Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: qG6B51/nxQiMianXOEcry9Y1hNTzvDrvWdTdfrxM+fI=
Subject key identifier: 9E:C3:00:CA:83:BD:99:8E:CE:A2:78:F3:97:D5:8A:2F:D8:B5:A6:56
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 019D9A07587E0C46DEC0A45D0910695CFFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0D97
Signing time: Fri 17 Apr 2026 06:01:05 +0000
Manifest this update: Fri 17 Apr 2026 06:01:05 +0000
Manifest next update: Sat 18 Apr 2026 06:01:05 +0000
Files and hashes: 1: HicIDZMbcNLp_sFaOT70NM1dk-A.roa (hash: oFoTMWe4jG5kyZXaz3ugU3TiaWlqRkipFfUCxRN/kLw=)
2: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: lSv/nwlAlOtQkzVEcdqVGe1W0kuxwfdTn3Qf6WAw+xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:58:7e:0c:46:de:c0:a4:5d:09:10:69:5c:ff:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Apr 17 06:01:05 2026 GMT
Not After : Apr 18 06:01:05 2026 GMT
Subject: CN=9ec300ca83bd998ecea278f397d58a2fd8b5a656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:33:11:86:68:69:08:23:3c:b6:5b:a3:fd:
c7:71:d9:ba:c5:1e:34:d3:4b:ef:0d:89:4e:98:e3:
d2:aa:d0:18:5b:80:a0:96:42:42:61:0c:d4:d5:8e:
00:95:b4:9a:fc:cc:95:c6:e8:cf:d2:82:3d:33:d7:
29:e9:22:22:26:6e:1d:47:b7:d7:88:fe:85:91:98:
43:fa:c7:4c:46:74:79:da:f5:f6:52:8c:2d:86:d5:
94:c8:33:0f:63:d7:5c:c9:05:ba:75:83:6b:65:c4:
20:22:a3:53:ae:ca:da:58:18:1f:78:df:e4:51:b7:
84:2f:ce:50:13:b5:5a:ae:07:e8:9a:e6:c3:86:91:
a4:69:f6:01:ca:bf:e5:f8:42:44:cb:f6:1f:9b:1e:
b9:3f:42:e5:28:db:b1:7b:5f:6b:d6:ca:e2:92:b3:
c1:de:24:6f:06:38:8e:14:90:4f:ca:67:f2:33:c5:
67:45:24:d1:ee:83:fb:82:19:8f:6b:80:63:6a:87:
ce:be:af:2a:f6:b9:37:e0:86:40:dd:36:ea:53:81:
de:0d:91:1f:99:ee:20:b2:9a:4a:05:54:1d:4c:0a:
38:7a:c5:1c:2b:58:c4:66:a8:9e:80:97:0d:ac:ea:
c5:4e:95:65:a0:d4:c5:0d:b6:95:dc:14:c0:59:fc:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:00:CA:83:BD:99:8E:CE:A2:78:F3:97:D5:8A:2F:D8:B5:A6:56
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6b:21:b9:b0:57:70:fb:0b:23:46:cd:bf:e9:8e:32:0d:32:
df:c7:4a:8d:0c:90:26:6e:dc:7c:bf:65:47:b4:ed:2f:10:f4:
ef:48:f4:a8:77:16:63:7a:5b:6d:14:c2:c4:6f:4f:6f:98:66:
1c:01:54:3d:ab:50:3b:92:02:2d:b3:ab:5b:03:53:c9:e2:de:
9f:dd:41:dc:ee:5a:e9:0d:a6:1e:7f:61:52:c6:4f:10:f8:70:
fb:fb:dc:ef:00:72:e4:09:3f:19:b2:e7:84:58:8e:d3:12:27:
2c:d2:0d:7d:80:04:6d:9e:c4:87:aa:dc:b6:d3:cb:b4:19:9f:
d8:31:cc:0a:ea:90:cb:c1:47:01:87:80:21:00:57:ad:d1:21:
4c:47:fd:c5:81:3c:f2:0a:23:87:47:ae:32:97:a4:e6:c7:63:
53:88:71:e2:14:32:fb:91:dd:91:e3:b9:04:6b:bf:0e:88:d5:
c0:dd:2a:2a:1e:0d:33:de:49:59:c9:6b:c8:e8:48:ee:af:84:
62:8f:62:87:9b:51:28:59:05:83:9b:46:3a:b0:46:db:21:47:
2e:55:0b:b0:37:cc:2a:4d:e9:2d:6c:6b:14:db:c3:4d:39:df:
89:23:59:83:0c:d2:55:0d:36:f7:99:41:be:3b:22:35:5c:34:
16:a0:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:47 2026 by rpki-client