Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: hq8DB6X9k8pl3BqTpCNM+laBCxfxIM3+ayAcJvJ8o7A=
Subject key identifier: 9E:5E:CA:A4:FA:42:22:D1:91:FE:55:E9:1A:3F:67:03:A0:14:77:43
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 019CAAFD6C16E861B6468F6501208B2A3FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 05FE
Signing time: Sun 01 Mar 2026 20:01:00 +0000
Manifest this update: Sun 01 Mar 2026 20:01:00 +0000
Manifest next update: Mon 02 Mar 2026 20:01:00 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: nlzrilED+z61UMi4Cx2mLNWrGHpBoy5580sEJn8W6Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6c:16:e8:61:b6:46:8f:65:01:20:8b:2a:3f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: Mar 1 20:01:00 2026 GMT
Not After : Mar 2 20:01:00 2026 GMT
Subject: CN=9e5ecaa4fa4222d191fe55e91a3f6703a0147743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:9f:3d:24:0d:49:66:7b:0c:10:92:fa:18:
76:9a:5f:d1:39:44:e4:84:61:09:cc:b4:19:c7:1f:
9d:79:69:23:96:7f:8a:70:91:1e:1d:42:3f:fa:73:
59:06:39:9f:e7:f9:d8:da:c3:f0:ab:42:ea:dd:d5:
15:45:d2:0d:1b:13:de:8d:26:b0:e4:f4:19:db:fd:
ed:d5:15:d4:2d:e5:b4:70:48:9a:f5:d0:56:03:0f:
9b:72:0d:18:82:06:85:0d:2c:d6:7a:3d:b1:b0:35:
6a:21:d4:c1:fe:0f:90:9c:58:c2:25:31:16:89:b1:
f3:db:a6:14:33:dd:36:6d:11:29:92:61:aa:b3:47:
b4:f5:4c:08:0a:e8:bd:09:4d:6b:1a:c7:27:8b:51:
44:9e:64:d4:dd:09:8d:c5:56:0c:cb:ef:16:7f:a9:
db:4e:78:c5:9f:ed:2f:4d:f0:82:77:00:d1:4b:7d:
4b:3e:af:95:5c:6c:6f:a2:4d:7a:ec:46:92:9b:b2:
34:c1:bd:b9:94:46:f1:6f:83:63:b0:9a:a8:4a:1b:
93:88:29:88:2e:89:4b:80:1a:7a:47:4d:a8:0e:6b:
cc:5e:65:10:9b:7d:5f:9f:ad:ac:a4:2a:bf:11:09:
a2:ae:bd:42:cd:b8:db:20:ab:0f:52:21:11:0c:f2:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:CA:A4:FA:42:22:D1:91:FE:55:E9:1A:3F:67:03:A0:14:77:43
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:71:20:75:ff:98:1c:55:26:67:03:e8:6f:68:61:05:5c:da:
84:bb:37:1c:80:0f:c6:12:18:a1:85:f1:e5:f0:f8:ad:4d:10:
ff:97:70:b5:d5:99:32:7d:97:d0:86:f3:6c:c0:f8:29:67:f2:
70:c9:95:42:56:4f:6b:14:4f:0d:bc:d4:d4:6a:ae:74:30:d2:
21:d9:78:a2:a0:53:b3:da:5b:21:97:0a:0f:67:f5:77:33:b3:
71:2c:6b:b7:cd:b4:3b:d8:f2:90:a9:7c:bc:6d:ad:f4:64:78:
31:00:62:31:3a:50:91:a5:ac:32:30:aa:df:3b:ea:0d:f7:0e:
16:e1:fa:ae:b0:ad:a6:45:1c:30:d1:9f:dc:ec:12:b5:60:7e:
94:b8:c7:c4:ec:4c:70:84:55:09:55:46:24:25:e6:88:7d:6a:
03:ec:0f:19:20:ec:01:fa:f1:08:a8:11:43:3a:d5:f5:ed:6f:
9e:50:11:42:20:eb:a2:64:c5:3a:60:14:09:ad:42:1e:de:39:
63:2b:e4:4b:d3:bf:2b:4a:dd:89:8c:59:e9:61:d2:ef:0a:6d:
5f:e5:f8:11:37:ac:1c:30:e7:e3:27:5d:0a:70:42:91:3a:c3:
c4:59:c6:7d:7a:1a:4c:62:64:80:30:e5:1c:47:d0:1c:f4:2a:
47:cf:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:04 2026 by rpki-client