Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: xWiWOoXb2/37Ug/P/otTt79Qdb6yiceqib4ijBo4L/g=
Subject key identifier: 85:F9:C7:37:71:A8:D3:30:7E:F7:7D:3B:77:C0:81:AF:D3:05:3C:6A
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 01A0C7EAB2D19ABA4C0C3F6D2EECDDEF730E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 07:00:42 +0000
Manifest this update: Tue 22 Sep 2026 07:00:42 +0000
Manifest next update: Wed 23 Sep 2026 07:00:42 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: iDX8MUgBCNxVNovm2hKrD497N+hZU+EsaiFvIwPK+ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:b2:d1:9a:ba:4c:0c:3f:6d:2e:ec:dd:ef:73:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Sep 22 07:00:42 2026 GMT
Not After : Sep 23 07:00:42 2026 GMT
Subject: CN=85f9c73771a8d3307ef77d3b77c081afd3053c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:4a:78:e3:0a:fe:aa:31:8a:5f:33:3c:fd:
96:c1:dc:70:0e:c3:cb:71:b6:49:94:94:2c:82:00:
10:44:21:23:b2:c2:d9:1d:e8:39:1e:6d:4c:11:d2:
55:f7:3c:35:fc:bd:da:4f:24:8b:42:cf:11:c1:94:
e2:f0:b1:84:84:89:95:e8:56:77:de:7d:2d:fc:11:
06:2f:b3:f9:c0:72:b8:48:34:14:d3:d5:5d:27:6e:
59:5b:b8:ff:32:88:1d:0e:4d:65:a2:4c:d1:97:13:
e0:ec:5e:64:ee:36:8f:57:56:8b:90:28:9a:b9:5e:
fa:cf:76:c5:19:ee:a8:4a:a6:0e:1d:86:84:52:7e:
4b:fb:e8:dc:9b:e8:72:3d:69:06:7f:07:9b:94:ca:
74:a8:d8:a4:ba:4f:e1:04:47:39:f3:bb:a4:49:fa:
5a:ad:32:ad:3d:14:1a:aa:37:c6:19:49:3f:22:c4:
d4:a6:e1:99:36:25:2e:03:cf:d1:9d:76:ec:84:54:
59:ef:cb:13:d1:d0:03:db:2a:56:ec:4d:3e:b0:5d:
aa:56:8c:4f:b8:4f:8c:ef:c5:ee:50:ad:fc:b5:2b:
b2:26:2f:7e:91:5b:36:e4:05:8b:03:9d:18:6d:ff:
74:3a:5e:4a:b2:ef:3d:90:4b:0d:b1:5d:6b:14:53:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F9:C7:37:71:A8:D3:30:7E:F7:7D:3B:77:C0:81:AF:D3:05:3C:6A
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ae:11:7c:ef:9d:e8:aa:7c:43:86:99:ca:6c:4b:a5:21:a8:
a4:69:36:91:e4:4b:f9:44:b1:27:5b:96:7e:5e:ca:6f:14:e0:
50:9d:f2:71:3f:7e:04:6e:ed:f4:16:df:53:26:4f:d0:8c:c6:
d7:07:5a:48:f4:45:f7:b8:6f:44:5f:42:93:e2:eb:29:59:ca:
0b:8e:9e:2d:9b:77:31:47:f7:74:14:66:00:cf:f1:4e:ef:59:
dd:51:6b:30:28:07:aa:99:fe:8e:d5:2d:48:73:84:0e:f8:74:
cf:eb:b6:9e:60:97:25:b6:29:2c:aa:50:03:72:c9:04:36:e6:
65:13:e2:e1:05:09:13:5b:9c:2f:25:76:e4:b0:ef:83:fa:1b:
19:6c:50:9b:7f:6b:3d:31:d8:00:7b:7a:ed:cc:92:ef:e9:f4:
ff:4c:a6:b1:65:48:5c:00:5f:c7:5b:bf:30:86:86:81:0d:74:
99:96:a9:06:10:b7:78:aa:98:86:23:1f:db:82:df:06:29:b5:
b1:60:2c:45:71:aa:34:64:cb:cd:ae:24:8c:c7:90:00:ec:99:
7e:b6:68:8e:dc:a5:b6:f9:0b:51:15:56:75:6b:5a:f7:26:0c:
8b:a4:1d:08:0d:92:eb:af:f8:b0:22:6e:41:b0:0c:34:0a:7d:
22:c5:03:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6rLRmrpMDD9tLuzd73MOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw
NzQ4NjMwHhcNMjYwOTIyMDcwMDQyWhcNMjYwOTIzMDcwMDQyWjAzMTEwLwYDVQQD
Eyg4NWY5YzczNzcxYThkMzMwN2VmNzdkM2I3N2MwODFhZmQzMDUzYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9BKeOMK/qoxil8zPP2WwdxwDsPL
cbZJlJQsggAQRCEjssLZHeg5Hm1MEdJV9zw1/L3aTySLQs8RwZTi8LGEhImV6FZ3
3n0t/BEGL7P5wHK4SDQU09VdJ25ZW7j/MogdDk1lokzRlxPg7F5k7jaPV1aLkCia
uV76z3bFGe6oSqYOHYaEUn5L++jcm+hyPWkGfweblMp0qNikuk/hBEc587ukSfpa
rTKtPRQaqjfGGUk/IsTUpuGZNiUuA8/RnXbshFRZ78sT0dAD2ypW7E0+sF2qVoxP
uE+M78XuUK38tSuyJi9+kVs25AWLA50Ybf90Ol5Ksu89kEsNsV1rFFM1pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIX5xzdxqNMwfvd9O3fAga/TBTxqMB8GA1UdIwQY
MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt
Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll
LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABa4RfO+d
6Kp8Q4aZymxLpSGopGk2keRL+USxJ1uWfl7KbxTgUJ3ycT9+BG7t9BbfUyZP0IzG
1wdaSPRF97hvRF9Ck+LrKVnKC46eLZt3MUf3dBRmAM/xTu9Z3VFrMCgHqpn+jtUt
SHOEDvh0z+u2nmCXJbYpLKpQA3LJBDbmZRPi4QUJE1ucLyV25LDvg/obGWxQm39r
PTHYAHt67cyS7+n0/0ymsWVIXABfx1u/MIaGgQ10mZapBhC3eKqYhiMf24LfBim1
sWAsRXGqNGTLza4kjMeQAOyZfrZojtyltvkLURVWdWta9yYMi6QdCA2S66/4sCJu
QbAMNAp9IsUDkg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:07:40 2026 by rpki-client