Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: m2utI3pS5MfHZ/5HMixiq1RAz2CPPn/A2/sB9CAn7LY=
Subject key identifier: AF:FB:72:9B:66:16:9E:A2:FC:DC:54:92:91:75:D8:A4:CF:9A:73:FD
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019CABA2088B826689E4C7128EC4EE97184E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 04CD
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: AHhvSbDqthTKmXTCNqh0xwbo2RSmN7PWkSjEymhSU+8=)
2: I09YHj-xMtJyOqy1S5-_QiKKHCM.roa (hash: Dl6s19nphOIYoXAZFraR2mc7LjS/EY8yRFQ8t5aHIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:08:8b:82:66:89:e4:c7:12:8e:c4:ee:97:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=affb729b66169ea2fcdc54929175d8a4cf9a73fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:93:48:4d:22:16:81:4f:ab:e5:42:81:56:
f4:65:05:bb:6b:3e:b7:cb:2d:9a:51:fa:1e:67:f4:
4a:38:9c:d2:80:26:c8:0c:4c:ea:6f:01:61:6d:bc:
c0:82:24:85:05:5e:07:ee:ed:4a:74:2a:aa:60:10:
ad:98:f4:6f:58:ec:79:b7:60:a8:0d:a4:55:fa:00:
9d:ba:27:78:2b:c8:7f:e0:bc:05:3b:50:8b:03:ae:
5b:cc:f6:58:70:0e:53:3b:99:cc:5c:12:fe:44:3c:
9b:d0:4b:00:85:36:7e:1b:ff:90:9d:5e:d4:59:7f:
59:6f:b6:fb:a6:4d:46:53:ac:85:d2:50:ce:93:d4:
e4:ab:ae:52:9f:2b:4e:bb:91:35:4e:7c:0b:ab:4b:
c5:02:c4:df:5e:46:d8:e4:3d:a0:f2:d0:b3:fe:56:
da:25:e7:eb:3d:27:f0:2e:9e:c0:06:db:f8:a7:31:
53:0d:0b:92:c3:47:b2:33:d6:26:e3:ed:26:d0:0e:
bd:43:d2:4e:dc:30:f6:03:9f:13:cb:b3:1e:7a:b2:
b6:af:7c:8c:62:d2:f5:a9:4f:2e:6e:3e:29:54:1b:
c1:e8:a6:81:0f:83:3c:8c:1d:62:ca:4a:e6:7c:2f:
b6:fa:d0:09:23:e1:07:0d:8f:cc:69:13:5f:a0:71:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FB:72:9B:66:16:9E:A2:FC:DC:54:92:91:75:D8:A4:CF:9A:73:FD
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:16:3c:8a:69:6b:b1:3c:31:85:35:f2:b5:63:27:e2:ee:41:
a9:c7:e4:e6:7c:d6:cd:13:0e:07:a3:5a:05:73:2c:5a:d3:5f:
f8:19:ca:92:be:7d:fb:c6:2d:b8:35:87:48:74:78:4c:8a:c0:
ee:0d:eb:d8:dc:4f:89:d9:e5:4d:3b:ea:b2:ee:0d:60:23:13:
af:9e:00:dc:31:c1:0c:58:f5:c3:31:ea:31:1a:95:1a:87:17:
88:50:f1:1f:be:07:d9:07:49:9e:fe:5c:0b:4d:98:5f:24:d2:
75:5c:8a:d3:2f:2d:b1:d6:c9:a6:13:f8:52:cb:17:7e:7f:9a:
fe:e0:1e:b9:f2:02:41:d5:90:73:5b:57:61:e7:fd:b9:88:76:
53:26:21:ee:49:06:6b:7c:cd:8a:26:9f:d8:1c:3a:0a:d3:85:
40:f9:eb:27:37:bf:23:d5:d4:c4:5e:22:1d:cf:94:1a:54:29:
30:43:ee:be:db:7f:cc:7a:c1:98:dd:a2:42:9c:65:04:8c:ab:
91:39:dc:8c:e1:28:45:d2:08:01:83:f7:96:af:87:a2:02:f3:
0e:3b:ff:04:6c:46:16:40:8c:c2:a6:ff:d6:65:27:84:50:d9:
fc:70:eb:f3:cb:39:58:54:0b:0c:9e:df:34:1f:86:34:2e:d2:
f5:83:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:09 2026 by rpki-client