Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: X7mMJs6TZ/8l5fGmfzqY9xTMSImrEv+Gs58KGMdrBFs=
Subject key identifier: 96:D1:66:9D:F7:57:F3:D9:82:57:2A:E1:CD:EF:5F:E5:E0:66:69:DE
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019D9B19F3DDC09860FFCCB65E0CDBA7019B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 0549
Signing time: Fri 17 Apr 2026 11:01:02 +0000
Manifest this update: Fri 17 Apr 2026 11:01:02 +0000
Manifest next update: Sat 18 Apr 2026 11:01:02 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: csjFKJjgw1wEraPjr62cu0/MgcIRXmnDTF/BMjgo+Tc=)
2: I09YHj-xMtJyOqy1S5-_QiKKHCM.roa (hash: Dl6s19nphOIYoXAZFraR2mc7LjS/EY8yRFQ8t5aHIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f3:dd:c0:98:60:ff:cc:b6:5e:0c:db:a7:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Apr 17 11:01:02 2026 GMT
Not After : Apr 18 11:01:02 2026 GMT
Subject: CN=96d1669df757f3d982572ae1cdef5fe5e06669de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:90:e0:ec:39:2e:e1:66:bf:6b:83:94:f2:
ed:d8:8a:ea:6a:32:d2:f1:92:71:ec:2c:cf:99:06:
5d:fd:80:4f:16:cf:79:d2:0b:bd:db:c3:d7:c3:d6:
90:ac:24:ca:e8:96:2a:23:ce:7b:65:0b:82:78:a5:
13:75:52:c5:95:34:9a:dd:84:41:17:d7:b5:a3:f2:
f3:e4:71:be:c0:5e:9e:51:29:69:00:26:df:f0:60:
8d:4a:cc:c0:44:5f:3b:cc:c2:1c:1f:b1:f9:94:fd:
6c:2f:ed:60:f7:62:f6:13:49:e8:f4:66:b4:8e:53:
e6:e1:7e:2c:1c:15:f5:48:70:18:4d:96:45:2d:f9:
ef:2f:07:04:9e:d7:43:cd:84:48:cd:69:7b:2e:78:
70:64:f5:dc:a1:c2:b0:e5:d8:11:aa:80:95:b4:f2:
75:8f:55:b6:83:2d:06:e2:2a:1b:63:05:e5:bf:9f:
ba:8b:d6:83:66:16:fa:5c:3f:af:f7:b4:b2:44:b7:
31:ab:27:31:0d:ee:4a:ce:46:a4:b0:c0:4b:3e:bd:
fc:33:98:88:88:1d:0a:e6:8a:88:18:f7:ac:ca:40:
b5:53:5c:c4:c1:47:ee:b7:d1:6e:52:36:b0:a6:d1:
83:0a:da:00:3d:cd:7a:9c:16:cb:54:ea:60:98:e1:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:66:9D:F7:57:F3:D9:82:57:2A:E1:CD:EF:5F:E5:E0:66:69:DE
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fd:80:17:50:ad:ba:80:3a:fa:e1:ee:fe:44:af:d6:c9:b0:
d1:ef:99:62:91:68:d9:0e:4a:11:ae:18:81:da:2a:d9:7d:b7:
8e:02:44:75:aa:4e:16:0f:80:e4:cf:31:a1:4d:5c:a0:83:85:
8c:79:26:c4:95:7a:12:c8:09:ef:4d:ba:39:76:ab:de:83:55:
43:47:1f:6f:ab:7a:68:09:2f:12:12:b2:e2:4a:4e:62:30:63:
ca:f3:5d:91:09:46:6c:57:67:3c:38:98:3e:5f:63:7c:d0:34:
c9:ef:cc:5b:ea:8b:19:61:45:66:1c:a5:b3:5a:d5:49:d1:07:
92:93:86:cd:94:b5:4d:d3:08:1f:57:49:cc:e2:76:43:20:4b:
9c:ad:b3:8b:b4:1f:18:bd:22:19:17:0e:b0:a5:9b:e0:9a:39:
31:1d:a2:32:80:08:85:f3:6f:77:4a:a4:60:e9:09:21:de:ec:
12:91:b4:47:c2:b1:0f:a4:58:c8:d9:ca:87:ab:04:f7:8e:86:
7b:bc:08:6d:81:d0:76:8f:40:e2:02:06:cf:d6:c9:96:f7:ee:
d3:27:53:56:ef:e1:01:66:df:7e:42:47:4f:fd:6a:83:4c:27:
89:4c:9a:da:c1:19:de:44:75:9b:55:83:b5:4b:2b:2f:0f:54:
b4:68:3f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:25 2026 by rpki-client