Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: yQ/NZRKInOn8fASHbXxgNS/vgPO0KVjUbYMi+Xh5fTs=
Subject key identifier: AC:CC:08:B4:5F:85:F4:FB:F8:DF:F1:EE:8F:AE:20:20:F8:A2:EE:EA
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 019D9C2D13983AAD04F6079C6F28EF373D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 16:01:32 +0000
Manifest this update: Fri 17 Apr 2026 16:01:32 +0000
Manifest next update: Sat 18 Apr 2026 16:01:32 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: z14Gh7FfRqK59NTx3yn3OEouEUZTtTXKN9gaGZUxAuI=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:13:98:3a:ad:04:f6:07:9c:6f:28:ef:37:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Apr 17 16:01:32 2026 GMT
Not After : Apr 18 16:01:32 2026 GMT
Subject: CN=accc08b45f85f4fbf8dff1ee8fae2020f8a2eeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:85:29:28:ff:1d:71:a2:f3:3e:4e:24:d2:
3f:90:df:e2:ba:3a:b5:d9:6a:4e:f1:e2:7f:8a:35:
a7:a5:10:ce:f2:6f:07:24:16:a0:df:71:e9:61:24:
d4:30:b2:70:32:ee:75:a4:83:a2:70:61:33:73:cb:
33:45:2c:26:94:39:bc:8a:24:17:82:bf:9b:8e:1f:
0c:09:f6:56:1c:a1:47:d0:3c:b2:f5:2a:d7:f9:20:
1f:d7:1e:46:28:94:6d:d5:2a:22:7d:cb:52:fa:69:
60:f4:ac:1e:9e:d6:52:6e:7c:09:a6:4b:af:e6:84:
50:94:78:a4:1a:96:2d:48:6f:ea:a7:54:9a:1f:e2:
34:f3:97:dc:30:a6:62:a8:b6:88:77:14:33:ad:6d:
8e:58:62:6b:2f:7d:bb:0a:21:77:f8:00:6a:2c:ee:
4e:74:bc:2f:67:44:89:a1:48:0d:1f:c9:14:61:75:
52:f4:10:42:7c:ac:bf:43:18:f8:c2:1c:47:c3:88:
19:a4:03:95:9e:f8:b6:07:85:07:29:f1:67:e8:b1:
4e:91:bb:80:e1:03:18:25:b8:db:37:85:50:a3:9c:
ed:43:11:3d:11:aa:c5:d6:d1:49:5d:05:f1:75:55:
e1:b9:4e:e1:a2:6c:a8:f6:f1:a9:21:80:27:68:b9:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:08:B4:5F:85:F4:FB:F8:DF:F1:EE:8F:AE:20:20:F8:A2:EE:EA
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:49:df:3b:a6:5d:eb:16:6d:66:a9:6e:05:ba:fd:e0:08:56:
c3:ff:6a:b2:f1:31:47:b4:96:2b:e2:73:48:68:aa:18:f7:81:
e2:99:59:56:c7:a4:80:45:5a:94:1a:26:68:54:ff:f8:f4:04:
b9:18:f5:92:c9:e2:d6:ba:9f:33:f6:f1:84:2a:be:65:ad:61:
4d:a6:70:1e:66:a6:be:e3:c8:06:29:ba:9b:af:0c:5b:87:00:
63:f2:30:d7:08:3d:95:f1:8e:78:4a:6b:cb:92:25:65:d5:3f:
97:ca:50:b5:86:4b:23:67:0c:b6:fd:c0:37:9b:20:81:0c:18:
70:8e:2c:88:16:da:9d:15:ab:05:9f:4c:8a:82:78:23:3c:cb:
61:e6:01:61:b5:04:d8:d7:e6:b9:c7:be:0e:4b:53:e4:24:83:
ef:d9:ad:8e:8b:b5:da:7a:0d:b3:e0:89:79:46:f8:53:8d:60:
e7:6c:70:ae:02:a1:ff:b9:c6:98:2e:1e:96:43:78:eb:ac:34:
d8:55:2b:b6:ad:49:38:14:a3:9e:10:9e:aa:9e:4e:42:ea:d1:
0f:9d:27:4f:29:bc:58:d2:1f:d1:67:b1:d6:18:86:e1:c3:72:
80:f6:df:50:c8:15:68:42:06:20:93:3a:26:c6:a6:10:31:10:
d6:3e:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:54 2026 by rpki-client