Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: WlAqvqzt/0WeCtXWA/6sA5+jTVSBJkc6hb45Bg3+UBw=
Subject key identifier: D2:9B:CA:5A:C0:81:F2:5B:AA:C6:ED:FE:CE:EC:B9:D4:29:01:5B:63
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019CAB6AFD6191BE1BD5117B4B326D045BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:41 +0000
Manifest this update: Sun 01 Mar 2026 22:00:41 +0000
Manifest next update: Mon 02 Mar 2026 22:00:41 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: JP6LXH7Px5qO4VR1kTMDtX24fsmgT9SUACbfxjzgS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fd:61:91:be:1b:d5:11:7b:4b:32:6d:04:5b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Mar 1 22:00:41 2026 GMT
Not After : Mar 2 22:00:41 2026 GMT
Subject: CN=d29bca5ac081f25baac6edfeceecb9d429015b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:71:2c:0f:fd:08:9b:37:68:c6:79:58:85:
ff:ed:4f:ba:9b:32:dc:c5:43:2f:e0:17:ef:d4:9c:
32:2e:d7:cc:b5:be:dd:d6:30:97:1f:cd:07:ca:15:
81:04:6c:fd:4d:b1:91:f4:88:ee:fe:c7:30:37:e2:
01:36:e3:ad:fc:86:ec:77:57:9d:54:1c:9e:7c:74:
c3:f2:86:ee:f4:0f:6a:33:0a:86:12:6d:21:1c:54:
c9:7b:21:45:03:c1:c1:92:3a:a5:9b:9b:3d:bc:48:
fa:55:3c:1e:19:4e:3a:a7:89:fc:34:45:8f:5a:69:
bb:6f:e2:11:54:19:55:cc:a7:ec:a4:ca:01:8e:f3:
14:5e:05:a2:44:66:bc:0d:64:58:1f:9f:5a:07:04:
c2:07:78:b9:d5:3a:98:ba:c7:e9:0a:1c:67:52:06:
65:9b:2e:d3:31:47:73:95:29:80:97:df:82:37:21:
9a:7a:f2:06:ab:21:19:07:00:5d:35:89:1a:28:36:
e4:b1:a1:33:65:67:2d:d2:68:e2:21:21:76:b2:d8:
51:eb:f5:44:b3:fe:15:08:03:33:03:96:2e:0c:8f:
df:fb:b4:2d:14:7d:7a:0c:81:1c:58:fa:27:3d:5d:
90:cd:ee:82:83:91:f3:f0:67:be:73:32:a8:9f:85:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:CA:5A:C0:81:F2:5B:AA:C6:ED:FE:CE:EC:B9:D4:29:01:5B:63
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:13:ed:fc:4a:0b:ff:e0:d5:ee:d1:5a:c0:8d:ab:11:e7:
3f:11:51:25:a1:79:a3:ee:9b:1a:2f:5b:a8:fe:4f:5c:a6:9d:
8f:f2:24:ca:23:de:c6:1b:2d:5c:55:6b:f6:66:b9:e4:86:8c:
6e:ac:c4:95:95:8c:4b:67:b8:cd:d4:7e:ee:71:79:bb:b2:e4:
56:1c:5c:b2:45:0e:5d:79:aa:a9:7d:3b:49:3c:fe:9f:56:fe:
b3:37:fb:c4:92:0d:b3:85:ae:72:04:ec:9a:9e:75:a6:11:5c:
0a:17:9c:bc:fa:85:d7:c7:61:24:cc:a6:76:0e:47:a5:1d:af:
cc:89:a9:1f:18:e1:f0:ae:0f:bf:d6:6c:b0:7c:29:c8:49:a3:
bb:8b:85:c2:9e:15:e8:14:7f:4c:65:29:8f:8c:f3:a8:fb:33:
c6:0a:c2:66:a2:36:72:81:7c:e3:cf:5d:5a:a3:ca:fb:d6:98:
76:12:40:ef:27:6e:e0:d5:bf:30:db:50:0e:27:2a:46:ed:47:
79:2f:a7:b1:e5:68:bc:85:52:13:bc:13:04:fc:0c:fe:31:19:
8e:c6:b1:b3:8b:41:2c:b0:25:fa:71:c8:65:37:89:e1:c6:26:
88:ff:ab:56:f3:e1:98:42:1d:35:cc:c9:27:fa:b6:de:af:18:
db:18:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:04 2026 by rpki-client