Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: Z74W1wdR78jVLGThXkrgi8VRg8kUiyZFbMxshtCeE10=
Subject key identifier: C5:D8:E7:FF:FB:F5:87:D6:42:20:F0:3D:DF:00:62:95:76:E9:D8:1D
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 01A0CAEBC0400E3D5ADC98BBDEC10E938E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0993
Signing time: Tue 22 Sep 2026 21:00:42 +0000
Manifest this update: Tue 22 Sep 2026 21:00:42 +0000
Manifest next update: Wed 23 Sep 2026 21:00:42 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: VAaBv9RvJbFDQSvaGRmJ14AdGWK+jrqfur7kCjPYlFo=)
2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:c0:40:0e:3d:5a:dc:98:bb:de:c1:0e:93:8e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Sep 22 21:00:42 2026 GMT
Not After : Sep 23 21:00:42 2026 GMT
Subject: CN=c5d8e7fffbf587d64220f03ddf00629576e9d81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:88:58:be:31:1f:7d:e6:08:89:74:d0:c6:
a6:c7:6b:f7:db:12:31:80:4c:d6:e5:2f:9a:aa:38:
ab:bc:a3:46:2b:72:8c:50:56:e7:c4:c0:ab:ad:fe:
6b:c2:5f:8a:fb:65:e2:88:59:c7:98:27:e3:94:fd:
f9:5a:8f:9d:e7:e2:cd:a6:cb:d1:f1:fe:79:d2:14:
65:5a:d8:da:ff:ff:32:b6:29:2c:4a:40:ff:78:06:
da:b0:73:82:c5:04:39:b7:bd:af:f4:a8:bd:71:45:
67:12:9d:7a:7e:41:3a:b2:5f:34:e4:00:56:09:e3:
9d:eb:2e:bc:2c:8d:bc:42:de:2b:91:a2:ea:f4:ae:
81:5b:bb:4e:c3:9b:27:53:b1:df:3e:af:fc:3f:bf:
79:52:cf:e4:8f:2b:96:80:14:18:e0:19:3c:9c:cc:
1a:d5:a6:fd:87:06:ec:9b:a3:c5:98:b0:90:1f:89:
99:40:da:50:f5:56:90:b8:61:5a:52:b4:1d:eb:9a:
73:e6:16:59:ea:55:e2:8c:f4:a1:3f:48:fc:46:8f:
04:d5:ad:ff:9a:27:2b:df:89:71:db:72:0b:f8:6e:
60:f1:c7:ab:9c:59:0d:40:a6:40:20:18:08:34:1d:
c0:5f:6e:ad:7d:d3:e5:36:2c:f6:4a:35:b3:3a:4e:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:E7:FF:FB:F5:87:D6:42:20:F0:3D:DF:00:62:95:76:E9:D8:1D
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c8:7e:06:40:99:30:52:59:15:8a:36:23:83:4e:ec:b3:1e:
80:51:21:c8:be:f3:70:f9:e8:54:cd:b7:bd:37:1f:2a:de:89:
ce:8a:69:a4:18:d7:f1:b2:be:92:f8:4a:b1:35:bf:3a:ce:09:
cf:ea:33:9b:c7:f9:44:af:96:9d:5a:73:55:5c:46:5a:9d:3a:
7f:b5:38:e6:b0:a5:a5:e0:70:ce:67:a7:bb:c0:41:80:50:61:
f2:56:f9:84:ce:de:25:2c:39:e3:e8:49:84:e3:ce:f0:bb:11:
9d:fb:f9:ce:79:39:55:68:68:c8:7e:3f:c6:92:3a:6a:65:f2:
0f:1a:b7:b5:94:71:f9:fb:29:05:75:79:49:60:9e:9d:13:f0:
3a:f3:e4:71:e3:6f:42:f8:77:7f:dc:3b:cb:22:ec:fc:e5:fd:
33:a6:8a:e6:8a:36:d6:52:07:88:d3:df:e8:73:57:3a:96:58:
55:6e:1d:e2:2a:09:29:6d:7f:3b:81:03:62:91:81:cc:e0:9c:
d2:f4:17:3b:df:a4:3d:ca:a7:de:9f:ca:ca:54:9c:de:11:1f:
cc:0d:4d:6a:dc:19:85:56:ef:ad:12:b5:28:4c:ba:d4:21:e6:
4e:f2:bb:c8:5a:9a:2d:1f:12:2a:4d:c4:cd:2a:e3:f5:86:dd:
f4:41:04:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK68BADj1a3Ji73sEOk44OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj
YjFkYzkwHhcNMjYwOTIyMjEwMDQyWhcNMjYwOTIzMjEwMDQyWjAzMTEwLwYDVQQD
EyhjNWQ4ZTdmZmZiZjU4N2Q2NDIyMGYwM2RkZjAwNjI5NTc2ZTlkODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuiIWL4xH33mCIl00Mamx2v32xIx
gEzW5S+aqjirvKNGK3KMUFbnxMCrrf5rwl+K+2XiiFnHmCfjlP35Wo+d5+LNpsvR
8f550hRlWtja//8ytiksSkD/eAbasHOCxQQ5t72v9Ki9cUVnEp16fkE6sl805ABW
CeOd6y68LI28Qt4rkaLq9K6BW7tOw5snU7HfPq/8P795Us/kjyuWgBQY4Bk8nMwa
1ab9hwbsm6PFmLCQH4mZQNpQ9VaQuGFaUrQd65pz5hZZ6lXijPShP0j8Ro8E1a3/
micr34lx23IL+G5g8cernFkNQKZAIBgINB3AX26tfdPlNiz2SjWzOk6HDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXY5//79YfWQiDwPd8AYpV26dgdMB8GA1UdIwQY
MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt
NTc0NjJjMjgzMjk0LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0
LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWch+BkCZ
MFJZFYo2I4NO7LMegFEhyL7zcPnoVM23vTcfKt6JzopppBjX8bK+kvhKsTW/Os4J
z+ozm8f5RK+WnVpzVVxGWp06f7U45rClpeBwzmenu8BBgFBh8lb5hM7eJSw54+hJ
hOPO8LsRnfv5znk5VWhoyH4/xpI6amXyDxq3tZRx+fspBXV5SWCenRPwOvPkceNv
Qvh3f9w7yyLs/OX9M6aK5oo21lIHiNPf6HNXOpZYVW4d4ioJKW1/O4EDYpGBzOCc
0vQXO9+kPcqn3p/KylSc3hEfzA1NatwZhVbvrRK1KEy61CHmTvK7yFqaLR8SKk3E
zSrj9Ybd9EEEEQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:43:25 2026 by rpki-client