Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: QTu59sba/DRBRFaD4yj7WCZNvWbQ1rWzcXMPyI4zE7Q=
Subject key identifier: 07:EB:15:2E:7F:75:19:31:A5:19:E4:60:E3:67:7B:3C:C2:BA:C5:0B
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019FAA19B636A5FBF9D82D1B7B86074BFEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 19:00:39 +0000
Manifest this update: Tue 28 Jul 2026 19:00:39 +0000
Manifest next update: Wed 29 Jul 2026 19:00:39 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: j1R0ErIEi1ByL2tLJXq8923HVqu6xC6S5secauA2tbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:b6:36:a5:fb:f9:d8:2d:1b:7b:86:07:4b:fe:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Jul 28 19:00:39 2026 GMT
Not After : Jul 29 19:00:39 2026 GMT
Subject: CN=07eb152e7f751931a519e460e3677b3cc2bac50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:40:1a:60:b1:71:44:12:31:01:40:88:7d:
42:9b:83:84:72:f2:f6:18:09:8d:d7:68:1e:5a:ec:
3f:7e:72:2a:c3:78:5a:4e:44:55:bd:ab:36:34:38:
76:aa:67:a1:c2:18:a1:1f:33:5b:ae:7d:23:ae:a0:
f9:38:87:2a:d3:2f:41:0b:56:e4:84:05:31:4d:91:
90:70:7c:a2:49:df:04:28:67:10:c6:a3:2f:4f:6f:
27:02:04:d6:a8:98:11:a4:c4:3f:25:4b:66:0c:50:
db:5b:ae:82:cb:d1:01:32:7b:8d:df:a4:32:9c:a2:
a8:2d:ff:79:ae:e9:c5:a9:ae:13:16:e6:b3:fe:7c:
ac:b8:25:52:ca:f2:86:89:f9:c2:e5:53:16:c4:b0:
56:7d:f5:cc:f4:98:5c:1c:10:43:43:cc:62:12:f7:
d4:af:85:b0:38:c4:81:df:b9:b6:c8:43:27:42:4e:
96:2a:54:39:75:b5:28:ed:e2:9e:75:dc:e3:eb:f1:
7a:44:a1:2f:b1:ba:34:e2:39:42:4b:a8:7d:0a:94:
f4:1b:30:5d:c3:8e:48:98:56:55:dc:8a:8d:80:1d:
8c:42:c8:2d:70:8f:d7:84:81:3a:ae:82:e8:fd:34:
3f:e9:ee:af:b7:21:c2:0f:43:76:b0:f5:df:01:d8:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:15:2E:7F:75:19:31:A5:19:E4:60:E3:67:7B:3C:C2:BA:C5:0B
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cd:14:19:92:e3:3b:a1:2f:21:1c:29:b4:a1:c8:d2:62:9b:
15:be:a5:91:11:b2:f2:6f:aa:c0:a1:d6:26:2a:01:67:ee:aa:
46:7a:69:bd:9c:86:9b:38:b2:f2:a1:6c:72:ed:e7:f8:cd:f2:
64:3f:0d:2f:da:c6:b2:3e:1e:43:a7:2e:b2:96:00:44:2a:7a:
33:fa:c4:60:af:47:bf:99:ff:e4:f9:b4:27:d7:e2:d3:bc:00:
7a:4c:f7:90:3b:fc:d9:35:49:3e:8c:76:13:d0:8d:ae:2c:d4:
6f:12:48:87:19:b4:0a:62:21:74:07:c1:d3:be:eb:b8:7a:16:
ac:b5:69:c3:34:ee:dd:4a:1b:22:51:99:2d:23:d7:a8:80:68:
51:52:b1:1b:d2:2d:d5:61:96:5b:6c:3e:b7:82:b6:6c:7b:0e:
fa:68:a1:9c:62:9f:0c:25:82:53:1b:b9:e5:e7:ed:70:45:d4:
96:98:08:03:cd:f0:b0:56:df:17:72:6e:18:91:ca:31:91:56:
eb:5d:a6:14:ce:c7:10:fa:80:40:a8:b9:28:c4:34:79:4d:ce:
89:47:b2:3d:04:f1:6b:f3:49:b5:cf:66:c9:74:77:a4:0d:55:
e7:a3:f8:4b:3d:4f:36:d5:91:22:19:67:ea:7e:bf:83:e8:07:
28:21:c4:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGbY2pfv52C0be4YHS/7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw
NzQ4NjMwHhcNMjYwNzI4MTkwMDM5WhcNMjYwNzI5MTkwMDM5WjAzMTEwLwYDVQQD
EygwN2ViMTUyZTdmNzUxOTMxYTUxOWU0NjBlMzY3N2IzY2MyYmFjNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxZAGmCxcUQSMQFAiH1Cm4OEcvL2
GAmN12geWuw/fnIqw3haTkRVvas2NDh2qmehwhihHzNbrn0jrqD5OIcq0y9BC1bk
hAUxTZGQcHyiSd8EKGcQxqMvT28nAgTWqJgRpMQ/JUtmDFDbW66Cy9EBMnuN36Qy
nKKoLf95runFqa4TFuaz/nysuCVSyvKGifnC5VMWxLBWffXM9JhcHBBDQ8xiEvfU
r4WwOMSB37m2yEMnQk6WKlQ5dbUo7eKeddzj6/F6RKEvsbo04jlCS6h9CpT0GzBd
w45ImFZV3IqNgB2MQsgtcI/XhIE6roLo/TQ/6e6vtyHCD0N2sPXfAdglzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfrFS5/dRkxpRnkYONnezzCusULMB8GA1UdIwQY
MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt
Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll
LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc0UGZLj
O6EvIRwptKHI0mKbFb6lkRGy8m+qwKHWJioBZ+6qRnppvZyGmziy8qFscu3n+M3y
ZD8NL9rGsj4eQ6cuspYARCp6M/rEYK9Hv5n/5Pm0J9fi07wAekz3kDv82TVJPox2
E9CNrizUbxJIhxm0CmIhdAfB077ruHoWrLVpwzTu3UobIlGZLSPXqIBoUVKxG9It
1WGWW2w+t4K2bHsO+mihnGKfDCWCUxu55eftcEXUlpgIA83wsFbfF3JuGJHKMZFW
612mFM7HEPqAQKi5KMQ0eU3OiUeyPQTxa/NJtc9myXR3pA1V56P4Sz1PNtWRIhln
6n6/g+gHKCHE7A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:21 2026 by rpki-client