Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
File: CmU5pR-0bmZf9wiC20-YStNN6SQ.mft (raw, json)
Hash identifier: UKKqeUs/ltDO+82c2DeZNWd9mPMMEXMUhi7qQ+ARYuI=
Subject key identifier: 7E:5F:A3:E6:8C:5C:FF:58:90:D3:17:D5:89:6A:86:69:94:44:3F:EB
Authority key identifier: 0A:65:39:A5:1F:B4:6E:66:5F:F7:08:82:DB:4F:98:4A:D3:4D:E9:24
Certificate issuer: /CN=0a6539a51fb46e665ff70882db4f984ad34de924
Certificate serial: 019F8F1100F94773E168F66D2C7F6E51B561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
Manifest number: 012F
Signing time: Thu 23 Jul 2026 13:01:23 +0000
Manifest this update: Thu 23 Jul 2026 13:01:23 +0000
Manifest next update: Fri 24 Jul 2026 13:01:23 +0000
Files and hashes: 1: CmU5pR-0bmZf9wiC20-YStNN6SQ.crl (hash: cTuj4FfIWyzCWhc6EmA+HFNSF5fNqz+hLwTtX+bFzgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:11:00:f9:47:73:e1:68:f6:6d:2c:7f:6e:51:b5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a6539a51fb46e665ff70882db4f984ad34de924
Validity
Not Before: Jul 23 13:01:23 2026 GMT
Not After : Jul 24 13:01:23 2026 GMT
Subject: CN=7e5fa3e68c5cff5890d317d5896a866994443feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:81:17:a8:21:f8:0a:37:98:08:99:93:48:
20:98:a4:be:3f:25:da:4e:d8:e0:2b:8d:38:2e:cd:
cb:15:32:67:d9:4b:e8:b8:eb:8d:46:78:5f:9a:c4:
d1:09:2d:8f:6d:62:12:ee:e6:78:43:f0:39:a6:ba:
d3:1c:dd:fa:da:04:e1:b4:78:dd:57:14:38:04:60:
6a:83:a1:83:26:9d:67:2e:4f:38:37:0a:78:9d:9e:
c5:46:76:4b:99:c6:38:29:13:45:ca:46:a4:d4:cb:
cf:2f:41:e3:f7:a6:96:e7:64:45:27:87:a0:ce:86:
5c:5c:3c:68:b2:eb:2c:3d:03:6e:e0:c5:69:07:44:
da:4d:8f:3a:1c:40:ca:21:fd:eb:54:2a:51:08:40:
bf:35:03:bc:45:3f:c7:ed:ba:69:30:6e:27:55:33:
79:31:62:1a:2b:f7:11:b2:d6:b6:38:f6:e4:fc:18:
92:04:71:ca:96:00:83:0e:8e:41:e1:55:58:ad:aa:
b2:8b:16:d7:17:87:4f:1b:61:d1:01:ab:d4:05:ba:
4b:6f:61:78:ea:e0:4b:9a:cb:d5:75:6d:04:cc:76:
18:26:17:32:c2:b3:7c:c5:2d:fe:42:90:0f:3d:85:
e0:a0:82:80:86:b0:c6:94:e6:07:13:9f:54:ab:ff:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5F:A3:E6:8C:5C:FF:58:90:D3:17:D5:89:6A:86:69:94:44:3F:EB
X509v3 Authority Key Identifier:
keyid:0A:65:39:A5:1F:B4:6E:66:5F:F7:08:82:DB:4F:98:4A:D3:4D:E9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2a:3d:12:80:56:eb:86:cc:8c:b4:bd:60:5f:4d:1b:e2:72:
6c:70:82:de:bf:ee:89:4b:a9:e1:94:6b:5c:f6:e9:9d:0b:5f:
27:62:38:e2:fb:b7:e2:48:27:f3:6c:6e:f5:bc:55:bb:04:75:
1c:01:56:1f:7c:b3:b9:d5:2c:fd:4a:88:8c:fa:fe:1e:0b:8b:
93:fa:89:a5:b9:79:bd:fe:82:36:18:44:fe:35:4a:32:6b:d3:
ee:d8:fd:72:0c:5b:82:b8:7e:88:0f:24:ef:cc:a7:46:9d:6f:
ec:9e:96:67:cb:dc:c5:c5:d3:11:2f:4e:00:24:f8:92:74:95:
4d:f6:fa:1f:ab:67:8d:50:6f:65:ee:86:b0:98:cf:b5:a0:a5:
71:d1:23:8d:b7:79:16:0b:cd:37:d5:0e:de:aa:11:8a:2c:97:
79:66:b0:e6:5e:ee:ed:e7:08:a0:3e:94:7b:5b:36:9b:b5:eb:
2b:43:0b:49:e9:dc:fe:c7:f9:de:2b:67:3d:b9:32:21:13:54:
06:0d:fa:68:d3:37:1c:ab:9a:df:d3:5b:df:25:1e:a2:81:b9:
28:5a:1e:a2:16:e9:b7:1e:14:5b:a3:33:ff:c3:42:a7:12:40:
4e:e7:eb:81:4f:46:1e:2b:cc:82:18:a3:44:04:3c:e5:9e:9e:
44:88:c1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:23 2026 by rpki-client