Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: yTTWkl1jAlS9lzqoGza4eMuX8ZNG4jTwui1CbqLEiNk=
Subject key identifier: D8:AD:CF:6C:32:E7:BB:45:AB:C2:EE:D2:AD:6B:B0:FA:45:8B:E6:CA
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019D284DCDC1FADEAE1EEDA96BDBA5D3C17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0B80
Signing time: Thu 26 Mar 2026 04:01:20 +0000
Manifest this update: Thu 26 Mar 2026 04:01:20 +0000
Manifest next update: Fri 27 Mar 2026 04:01:20 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: YEEerHZYK6DyNcYhTWz4UNR5rpZFHRgj/hYPI3MkAwM=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cd:c1:fa:de:ae:1e:ed:a9:6b:db:a5:d3:c1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Mar 26 04:01:20 2026 GMT
Not After : Mar 27 04:01:20 2026 GMT
Subject: CN=d8adcf6c32e7bb45abc2eed2ad6bb0fa458be6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:03:13:2f:6d:6f:75:9a:e3:17:16:ba:48:8a:
2b:56:10:8e:ab:5a:9c:f9:4d:2f:f9:17:07:4f:62:
07:89:2d:b3:ca:86:9a:81:1d:04:b9:2f:cf:f8:16:
2b:75:75:0d:a0:21:58:7c:86:2f:5c:9a:e5:9c:99:
6f:96:5e:f7:c4:4a:5e:3e:4d:db:e4:11:49:24:13:
1e:27:51:1c:1d:31:89:ac:13:46:4d:b6:9d:c0:b8:
8c:21:6f:15:51:c8:fc:14:e7:2c:27:85:9d:64:5f:
fb:67:ae:e9:5f:f1:2a:9b:01:c7:e7:db:25:6d:64:
78:e6:3b:bd:88:ae:11:1b:82:1a:ee:d6:3e:93:b1:
2f:09:68:5d:62:d4:ae:22:06:72:41:97:39:ac:eb:
a0:cb:78:cc:2d:ee:e4:07:4b:ef:d0:63:f7:e9:2e:
e8:00:da:19:f8:ce:7d:30:20:5f:f5:f5:1d:52:65:
8a:c9:53:40:cd:2a:0b:59:dc:de:38:7c:62:e1:e5:
14:2b:88:7d:71:ea:7e:92:f6:c3:bc:99:38:38:1c:
78:65:c4:12:dc:7c:22:e9:5e:3b:bd:ff:be:06:a8:
b6:b3:0c:3a:c7:ef:97:5e:18:64:9d:9e:1b:0e:e7:
75:8c:49:fd:51:7f:bb:36:aa:b9:96:16:8c:c8:d4:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:CF:6C:32:E7:BB:45:AB:C2:EE:D2:AD:6B:B0:FA:45:8B:E6:CA
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:52:ad:23:f8:3f:d7:c1:72:9d:4a:bb:97:6b:2c:78:7a:18:
40:73:51:e9:9a:c5:e1:75:24:10:eb:ed:bf:a0:70:40:5c:2a:
98:02:43:0f:67:69:f7:d7:81:23:4e:5b:3f:b7:43:a0:e3:af:
a1:20:14:b3:c9:6b:d6:1a:fb:59:89:19:6b:8e:bd:36:60:74:
7f:1a:28:c4:9d:c8:b0:17:3c:d5:66:c2:86:93:32:66:81:54:
6f:d1:01:72:92:01:8e:6f:e9:04:46:87:41:0d:e6:98:a0:8f:
a3:4a:23:e9:5f:df:a8:14:de:6a:a9:94:f5:40:3c:3b:53:f6:
9b:8b:2f:87:d5:7a:5c:99:32:fb:3f:01:7e:28:50:be:11:4c:
d0:af:2f:a0:6c:1e:94:0a:8a:c6:c8:38:c0:71:b9:f7:45:88:
30:15:42:28:28:2b:b4:65:ca:31:40:10:8d:9c:fc:1a:7a:dd:
81:f4:71:69:cd:b2:44:19:9d:5a:97:7f:63:53:d0:58:90:d4:
1c:e6:65:0f:0e:6e:47:25:ac:82:a8:48:a9:21:84:35:b5:cd:
70:a6:9b:b8:0e:0a:db:7e:4f:2d:87:98:bb:3f:5a:36:ab:38:
f8:9b:b9:fd:b4:c4:61:b8:5a:2c:34:f9:fd:56:3b:fc:8e:d0:
09:c3:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:04 2026 by rpki-client