Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: zs+IeICz7s6+5PAR9yJxTvnvzR0ycFkbmcyYRzLpqPk=
Subject key identifier: 52:A5:AE:E8:BA:FC:0E:59:40:DA:0B:6D:05:8C:82:99:E2:76:0C:24
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019D262800166A9B5FC7C2F37EAF0C0B5305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 07B0
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: zKg49Hjg6Hx8Rz99pwakcQhxn4XhK8kujDrJurTfBbQ=)
2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:00:16:6a:9b:5f:c7:c2:f3:7e:af:0c:0b:53:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=52a5aee8bafc0e5940da0b6d058c8299e2760c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:86:6f:d3:f7:15:b4:39:9f:0a:c0:69:85:
20:7f:3b:a3:52:62:e1:ef:c5:c0:71:ca:b5:63:1c:
fb:21:62:96:8d:9b:5f:45:e0:33:4e:c0:80:c7:d4:
4d:43:45:49:01:06:80:41:e4:16:b8:a1:59:3d:03:
6e:99:fe:0d:8e:45:ea:aa:32:61:f2:82:dc:dd:80:
59:9e:ae:4b:c9:be:a6:c4:91:17:1f:07:f1:8a:26:
57:7c:f4:bc:52:f2:f4:09:ee:5c:9b:47:da:19:c8:
d8:9e:a0:c7:83:1d:5f:a4:4a:33:87:c3:3c:f0:07:
78:2a:22:8b:58:1e:00:16:59:53:31:14:7c:0b:29:
2a:db:58:72:b8:a1:be:e8:00:2f:37:c0:fa:63:d4:
da:d2:07:76:5d:13:9d:95:6d:98:2a:21:64:47:1e:
8c:c0:25:0e:63:86:c5:b9:47:0c:f9:90:4f:1f:5e:
83:f3:c7:53:73:5d:bb:81:75:6c:7e:77:a5:a5:38:
fc:11:96:1a:15:1f:16:a5:a7:90:1b:db:a6:d3:d0:
45:53:db:2b:10:e3:e6:c9:b4:ef:56:14:cb:e4:ae:
52:da:81:4c:95:1f:d5:39:08:8d:d5:4c:81:77:86:
16:08:c0:b6:b1:8c:19:97:b5:34:fc:ca:cd:59:40:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:AE:E8:BA:FC:0E:59:40:DA:0B:6D:05:8C:82:99:E2:76:0C:24
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7e:81:87:69:8c:71:7f:e0:76:da:1b:09:11:a1:37:72:f4:
b0:bf:6e:50:ee:3c:06:4a:a4:2d:14:3e:37:0f:0a:3c:5c:28:
00:08:6d:32:e8:d6:d6:33:fb:54:65:b4:27:b9:48:64:00:e2:
6e:ee:81:ff:3c:a9:17:60:b8:7a:a7:91:0e:62:c9:c9:32:ed:
33:44:77:3f:89:d1:fc:00:f8:bc:0f:db:fb:07:6f:4c:0d:88:
52:2f:67:43:a4:83:9c:1b:f5:b5:f7:ec:c7:9f:65:49:79:e4:
a5:c5:53:a2:f5:e5:35:9c:d3:36:a2:17:03:5d:4f:83:19:7a:
b9:ae:5f:16:20:9f:a8:ee:1a:d7:e2:24:72:09:5b:9a:66:7b:
35:35:70:f7:a0:58:4a:92:e9:d1:8a:71:d0:c4:71:2b:27:72:
6c:13:73:95:26:f6:b3:ce:3c:ac:97:d9:1f:28:28:e0:ae:fc:
8c:c2:f7:1b:dc:93:e8:b9:74:f9:d7:18:f8:44:a1:69:62:fb:
82:50:fe:59:b9:fa:f7:ed:07:60:cc:0a:c1:54:ae:ab:de:aa:
17:40:0a:96:fc:38:8e:3e:af:9c:49:1e:f3:5f:a6:ec:74:31:
58:0c:4d:ea:bf:a9:16:b5:ca:4c:a4:89:ff:d7:73:89:28:54:
81:0e:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:59 2026 by rpki-client