Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: npPA93BSHv5+l3nCF26HbIkCLlqMg77cSKP8PVrwe5g=
Subject key identifier: 42:EF:52:8F:63:A3:41:88:99:07:69:65:67:E6:04:6B:32:7D:AA:26
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 019CAC7DFFB04E2670CCD592B4A2C732E9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0D1C
Signing time: Mon 02 Mar 2026 03:01:04 +0000
Manifest this update: Mon 02 Mar 2026 03:01:04 +0000
Manifest next update: Tue 03 Mar 2026 03:01:04 +0000
Files and hashes: 1: HicIDZMbcNLp_sFaOT70NM1dk-A.roa (hash: oFoTMWe4jG5kyZXaz3ugU3TiaWlqRkipFfUCxRN/kLw=)
2: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: dj0DCoC+le8OfwRvcb/RB2I3J0N95vjKu44Uk5kE/Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ff:b0:4e:26:70:cc:d5:92:b4:a2:c7:32:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Mar 2 03:01:04 2026 GMT
Not After : Mar 3 03:01:04 2026 GMT
Subject: CN=42ef528f63a341889907696567e6046b327daa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:f9:18:77:6e:70:39:22:bc:63:4d:6f:6c:
d3:09:e4:2d:34:da:e4:6d:93:60:a7:87:91:65:ea:
60:16:cc:cb:36:a7:4e:10:9e:1f:31:75:66:3d:1c:
df:2a:9f:df:5e:39:a5:57:b7:c7:84:02:de:0d:3c:
fe:44:e8:11:a0:5e:af:2a:e1:00:95:19:9c:47:5d:
d7:13:81:85:fc:c7:53:0d:10:57:f1:9d:03:d9:61:
b9:ac:dd:17:9d:8b:3c:ff:f1:8c:eb:e0:60:63:db:
8f:94:0e:9f:aa:0e:4a:6d:b6:ec:2e:e9:28:21:be:
7f:48:9b:16:de:2e:fb:57:e9:09:ce:a2:07:37:de:
a6:d7:c7:e2:e3:6b:57:bf:d6:b4:c7:ab:ec:de:b8:
34:98:34:ad:79:5f:54:e5:81:4f:d9:e4:ee:39:6f:
b6:a7:14:0a:80:2a:27:b1:d1:91:89:d2:73:13:6f:
14:6b:3f:fd:27:1e:ab:56:a2:b0:15:65:cc:3f:d4:
7b:4a:5d:aa:47:83:2c:48:94:6f:62:c8:7c:8b:81:
8a:c8:2d:98:b1:70:87:95:81:20:89:d2:5b:3f:71:
76:8e:57:ca:35:44:45:df:97:64:39:e8:fe:0e:12:
34:26:13:93:40:a2:c7:ec:87:9e:62:aa:2b:18:79:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:52:8F:63:A3:41:88:99:07:69:65:67:E6:04:6B:32:7D:AA:26
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:a3:7c:77:52:9c:d2:c9:4f:9b:58:ec:02:38:25:f1:e0:a5:
87:f6:9f:48:a3:a0:3c:3c:67:f4:9c:85:d7:c4:77:f3:80:9a:
b1:a5:14:ac:d1:93:6f:a6:4c:14:d8:1b:16:80:f8:80:9a:a1:
fc:db:74:69:7f:2b:9e:bb:5f:6f:8b:07:0d:cf:79:20:4d:48:
43:1c:2e:4d:98:d7:f7:4d:e5:ba:7f:70:30:98:82:fc:de:77:
39:d8:73:e7:da:3f:19:a8:32:94:64:e6:e0:29:37:73:75:a8:
41:2b:b6:33:7f:81:4e:74:d8:fa:ed:66:c3:3b:8f:17:36:d1:
93:1c:0b:91:6f:8c:7a:a5:55:ef:c3:f9:c5:28:74:02:2e:95:
f5:96:0f:11:3d:2e:26:40:7e:50:1a:54:17:85:75:18:3c:aa:
7b:ce:bf:e4:9a:a1:7d:02:1a:b3:9d:89:88:80:23:e0:d7:ae:
fd:a7:5e:c5:88:4b:2f:f5:d8:46:73:98:9f:d2:60:69:9f:8d:
cc:f7:5a:e7:a0:a4:78:9d:75:d4:da:d3:22:a7:2c:e6:4a:ba:
5c:ea:ff:7b:69:3d:0e:c3:e8:d4:f6:a2:ab:64:bc:89:05:7e:
66:76:49:93:b0:1f:69:a1:85:59:36:a2:4c:21:ad:b2:2a:44:
27:06:08:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:09 2026 by rpki-client