Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: olIqMrxnabVbeLGOZPC77At2XpU1/N4O66t+4KbInUM=
Subject key identifier: 17:C6:84:D9:39:72:81:38:A7:83:0A:32:07:0C:31:02:49:18:DE:78
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 019D9C2CCDE15E6D274418670CB425FCE586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 1556
Signing time: Fri 17 Apr 2026 16:01:14 +0000
Manifest this update: Fri 17 Apr 2026 16:01:14 +0000
Manifest next update: Sat 18 Apr 2026 16:01:14 +0000
Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=)
2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: DlTG4WBAe5VgUBOacG7Nn20FJ+p/YeS0Fjc+m64dyOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:cd:e1:5e:6d:27:44:18:67:0c:b4:25:fc:e5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Apr 17 16:01:14 2026 GMT
Not After : Apr 18 16:01:14 2026 GMT
Subject: CN=17c684d939728138a7830a32070c31024918de78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:5a:83:f6:24:db:79:94:67:11:7f:a2:c3:
0d:a9:8d:75:97:86:6e:b3:9e:1b:e3:1b:55:41:d8:
68:bb:ff:f0:f2:06:5b:7c:68:19:42:23:d9:0f:f1:
25:02:36:37:85:d4:f8:fb:2b:26:6a:bc:8f:f4:f6:
5c:cb:4c:ce:fb:fe:5f:73:30:62:11:01:60:17:be:
ee:a0:22:9c:b4:4e:36:e4:4a:b5:da:55:2b:8d:20:
58:e7:f4:fc:f5:27:1c:a8:17:a8:4d:8c:91:e5:d3:
1c:26:93:06:3f:70:eb:2c:23:ce:57:f3:75:03:8b:
e3:c4:1a:cf:b7:6f:9d:e3:e0:eb:98:71:63:4c:dd:
93:0d:cc:d5:99:2e:f4:57:57:da:97:2e:61:0c:3c:
a7:cd:92:67:db:19:b6:b8:56:67:ca:b8:40:3b:45:
d9:bc:cf:74:d9:a1:e8:fb:e2:b5:65:1e:aa:55:80:
e3:88:e4:5b:5e:4e:bf:eb:20:87:e0:7c:9b:b5:1d:
3d:0a:3c:51:32:7c:d4:8f:05:0c:11:8f:93:5c:a9:
aa:f0:9d:31:2a:be:0b:26:71:3c:5d:42:40:9d:2c:
41:91:aa:59:e4:74:ad:67:80:d2:d2:df:8b:e7:ac:
fd:9b:aa:53:50:72:56:54:cd:71:61:52:cb:40:d7:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:84:D9:39:72:81:38:A7:83:0A:32:07:0C:31:02:49:18:DE:78
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:eb:6f:bd:fd:88:e2:8d:2c:38:a6:02:1e:7f:8e:17:b3:86:
11:a7:8f:5d:85:c8:94:bf:66:91:47:a4:98:a4:53:18:08:63:
36:30:00:c9:c4:bb:c5:c3:f5:3e:8d:7f:45:5d:94:e8:38:6a:
a6:53:7d:df:52:c0:23:2a:4d:d6:69:64:28:58:04:fb:40:92:
80:7c:58:f9:f2:5b:08:3b:9c:42:9a:43:fd:91:e3:42:57:81:
57:bc:70:8d:42:0e:59:4a:d0:07:28:de:af:f6:77:29:15:07:
5e:e2:b9:09:ef:2f:d2:85:5b:90:87:6a:3d:bf:3b:e9:77:55:
5b:1f:5e:d0:9c:09:27:63:e3:5f:be:8b:b4:2c:5a:f0:1a:6b:
41:8f:b4:14:27:67:14:95:6b:dd:4e:c9:09:bf:66:3a:15:f4:
71:8e:72:96:d0:03:cf:f2:91:85:c6:72:96:66:db:36:f0:53:
64:e9:c6:b1:31:bd:07:7b:44:4d:d5:69:32:3f:9a:aa:e3:50:
1b:a3:d7:ad:55:e8:07:b5:7a:f6:34:a0:c1:36:01:6a:f4:93:
fa:06:43:c0:ec:7e:80:7b:4c:e5:73:64:81:07:97:cc:44:63:
4c:61:13:9e:74:66:f0:f7:a9:fd:a0:55:ad:0b:db:8b:61:fd:
65:f9:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:58 2026 by rpki-client