Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
File: CmU5pR-0bmZf9wiC20-YStNN6SQ.mft (raw, json)
Hash identifier: rqzrMLAHOe5++9lldt1nc5qqvLrIDFeEUmJ/m92yuuM=
Subject key identifier: 45:75:6C:8C:A5:B6:FA:97:EF:D2:5F:DD:44:76:BF:A2:4E:E2:49:75
Authority key identifier: 0A:65:39:A5:1F:B4:6E:66:5F:F7:08:82:DB:4F:98:4A:D3:4D:E9:24
Certificate issuer: /CN=0a6539a51fb46e665ff70882db4f984ad34de924
Certificate serial: 01A0D94CB64A18F8870E5E10589A1FB4B55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
Manifest number: 01DA
Signing time: Fri 25 Sep 2026 16:01:18 +0000
Manifest this update: Fri 25 Sep 2026 16:01:18 +0000
Manifest next update: Sat 26 Sep 2026 16:01:18 +0000
Files and hashes: 1: CmU5pR-0bmZf9wiC20-YStNN6SQ.crl (hash: KqeEWn1ecW5gBjJYxV2R6nvIBIBc8LCI38oXoaVf6C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:b6:4a:18:f8:87:0e:5e:10:58:9a:1f:b4:b5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a6539a51fb46e665ff70882db4f984ad34de924
Validity
Not Before: Sep 25 16:01:18 2026 GMT
Not After : Sep 26 16:01:18 2026 GMT
Subject: CN=45756c8ca5b6fa97efd25fdd4476bfa24ee24975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:3d:99:31:13:2e:31:f8:f4:38:06:46:df:
0f:c7:3e:2f:ff:71:0b:b3:cb:ce:1a:3b:c8:dd:49:
45:d4:91:3e:be:a2:87:41:e0:77:ef:3e:48:46:83:
bc:af:eb:62:89:57:9d:65:a7:84:df:62:67:0e:f8:
99:0c:a8:9b:86:4e:48:b7:ad:45:80:b6:25:a9:e4:
1b:5e:21:5d:14:d5:26:2a:87:2b:71:43:fb:ea:9e:
b2:ac:8a:97:78:b0:e6:1b:66:9a:60:e2:9b:f6:53:
43:3f:1e:5a:ce:24:38:16:1c:22:8c:d5:7a:21:94:
ff:2a:81:33:c1:46:b1:ef:ca:db:a5:39:94:a1:66:
b0:9b:24:3e:25:c0:8c:24:4f:d6:01:aa:26:1d:a7:
b8:f8:11:4c:4e:06:e9:87:73:46:57:a4:bc:e5:a8:
c5:e3:c5:d5:31:ea:d8:00:be:a9:98:c8:49:40:99:
ad:6f:ec:96:1a:73:8a:e6:cf:e9:0d:93:f1:c9:64:
15:2a:19:49:0c:a0:fd:ed:1f:6f:91:ca:c0:a2:fd:
25:87:f4:96:8b:77:9f:35:e6:1a:cb:81:3a:d3:6c:
f1:9c:7e:26:69:cd:20:58:44:d9:c8:0a:51:6c:4d:
9f:a5:41:8b:72:91:06:98:d9:d7:46:ce:a9:c9:6d:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:6C:8C:A5:B6:FA:97:EF:D2:5F:DD:44:76:BF:A2:4E:E2:49:75
X509v3 Authority Key Identifier:
keyid:0A:65:39:A5:1F:B4:6E:66:5F:F7:08:82:DB:4F:98:4A:D3:4D:E9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:79:a5:82:db:bd:73:db:e5:eb:73:a3:55:cb:13:e5:8d:62:
53:bf:6e:a7:5a:69:33:b3:a3:e9:3a:8e:be:b8:13:f2:c9:25:
2e:96:3c:ea:ef:07:b8:93:0c:74:f1:64:7f:4a:34:cf:ab:b3:
38:8f:92:b0:f3:07:49:56:54:8a:ad:9a:27:a3:52:cb:c7:86:
65:5b:ad:e3:70:49:df:8c:20:b0:5d:2d:d5:93:ee:79:b2:4a:
58:e8:f0:3a:c9:02:26:22:80:4e:65:f2:82:98:7b:40:16:d0:
76:50:32:d2:da:41:ca:3e:a5:39:b1:22:0a:f6:bf:02:08:42:
7b:d2:4f:2e:20:fb:dd:37:91:13:14:b5:3c:54:68:91:1b:f5:
6a:d0:1a:41:d1:08:9b:1e:85:2e:0e:d4:5c:d6:82:22:c5:df:
04:fe:d4:41:23:7d:12:37:03:0d:d6:8e:15:c7:0d:63:3c:21:
f0:4f:c4:ee:13:65:f9:ce:98:d9:58:89:4c:89:87:05:92:34:
a0:03:b5:6e:8b:93:f6:b4:f2:73:5d:d5:f9:48:59:9a:72:34:
38:da:39:1f:05:5b:c1:8b:50:88:28:c8:92:5c:0c:67:39:a8:
33:ac:27:08:c1:b8:3b:28:54:8c:92:5d:03:91:91:18:10:c1:
6d:38:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:11:05 2026 by rpki-client