Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: o5tD5igBX7fzsbRzZ4KgYPUUlK5y9MctxuyLVIY8KdY=
Subject key identifier: A8:44:7D:1D:FE:B6:F4:DB:05:ED:4C:7E:F8:5F:5B:C0:C9:35:0D:2D
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 01A12DA0AE43BEFEA38BF51604E49B82C519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 01:01:07 +0000
Manifest this update: Mon 12 Oct 2026 01:01:07 +0000
Manifest next update: Tue 13 Oct 2026 01:01:07 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: dcZ0pQpIQRm40KMy3yO2Uf9BE3qFgcNKbVtDyVWlhkg=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:a0:ae:43:be:fe:a3:8b:f5:16:04:e4:9b:82:c5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Oct 12 01:01:07 2026 GMT
Not After : Oct 13 01:01:07 2026 GMT
Subject: CN=a8447d1dfeb6f4db05ed4c7ef85f5bc0c9350d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:98:5c:96:05:74:fd:40:49:3e:3f:ba:b9:
59:ed:3d:83:e7:f1:d3:0d:03:1e:01:89:1d:0b:54:
16:cf:a6:fc:10:32:d9:72:a1:f6:6c:f9:9a:bf:09:
b9:1b:a1:f1:c0:dc:3c:33:cc:10:77:65:39:39:2e:
79:8b:49:1c:60:ef:62:14:f3:84:4f:c4:d6:01:37:
61:22:70:84:7a:6c:e2:09:a6:b3:b8:9f:dd:72:0d:
be:6a:1d:ab:96:0a:df:56:bf:b1:3b:3b:2b:22:df:
5d:a7:a0:bd:ca:a6:3c:16:3b:12:da:49:b9:67:a6:
97:d9:8e:f0:84:2f:89:4e:92:ac:50:40:3d:fc:f6:
b1:cb:7f:21:47:39:16:a9:46:35:46:28:bc:c2:b9:
4d:b6:39:53:3c:9a:9f:fc:58:db:24:36:10:75:13:
11:24:fc:6e:44:b5:99:55:91:50:8f:09:32:40:e4:
de:25:89:7c:0c:aa:8e:8e:0b:16:59:51:8e:b4:4b:
2b:3d:f1:36:f9:aa:1e:25:d6:86:c9:48:81:6b:3d:
5a:7a:ca:02:ab:0d:0d:af:87:16:fc:f4:97:e5:75:
30:78:21:7c:87:75:9e:27:43:03:ee:09:a7:a4:aa:
62:d1:10:37:09:c0:9a:c7:bf:7c:06:f4:72:4c:bc:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:44:7D:1D:FE:B6:F4:DB:05:ED:4C:7E:F8:5F:5B:C0:C9:35:0D:2D
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:fc:36:6c:2b:1e:ee:50:43:90:c0:cf:7a:b5:83:ba:10:
2a:e5:a8:b8:ed:e4:66:96:97:e4:7a:8f:4d:80:0d:f7:01:0d:
6f:da:e5:9b:89:f6:94:a1:e8:e7:03:68:5a:66:08:72:ef:02:
96:2a:df:4b:51:4a:25:15:a6:b3:db:d9:a7:8f:0d:d5:c3:49:
de:29:73:c2:dd:53:dd:d8:74:a2:74:fe:18:5c:a3:b2:e8:5c:
6b:92:5f:61:22:fa:6d:50:b6:bb:68:30:b0:86:5f:04:01:8c:
44:59:1d:09:f1:f5:4f:ef:0b:59:4d:57:1c:ee:ad:d9:20:f4:
cd:69:01:fb:01:a4:c6:96:37:9d:b4:da:4b:3e:09:b5:d7:58:
70:89:cf:e8:c2:75:d3:df:ea:c5:06:33:26:51:ee:cf:f4:d9:
15:a9:30:34:b1:0c:d9:a8:5b:bf:0c:59:f5:69:63:79:51:34:
9f:ad:1a:b2:7d:c4:4a:a4:3f:ff:bd:32:aa:0f:da:e5:25:c4:
89:a3:cf:96:ca:5c:39:73:02:e5:1f:29:77:e6:72:2f:9a:b8:
00:67:ba:00:cb:fa:6f:0c:5e:f9:4b:94:70:67:3e:01:a5:f0:
9f:c0:7e:ec:09:b1:74:29:85:f6:94:da:d3:ff:f8:a6:56:ce:
ee:90:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:15:38 2026 by rpki-client