Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: Qj5Edix+SoxueHF0WHWnYqMVVp4MV3T9CEH3ITcdLx8=
Subject key identifier: DA:6B:5A:1E:D2:A4:9A:86:BB:0E:1B:BE:2A:D8:BC:20:25:79:20:E6
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019E1D907030F01E9F781BB0C5BD5A591F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0BFF
Signing time: Tue 12 May 2026 19:01:05 +0000
Manifest this update: Tue 12 May 2026 19:01:05 +0000
Manifest next update: Wed 13 May 2026 19:01:05 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: zfylElfB+GcSTXtnTYM70QtbddLhXFYIFzQabu6mpCc=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:70:30:f0:1e:9f:78:1b:b0:c5:bd:5a:59:1f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: May 12 19:01:05 2026 GMT
Not After : May 13 19:01:05 2026 GMT
Subject: CN=da6b5a1ed2a49a86bb0e1bbe2ad8bc20257920e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:24:62:10:46:51:4c:5c:d0:6a:29:fe:03:
8d:db:c8:83:28:f2:28:bd:46:0f:0c:ae:58:03:f8:
3e:dc:c9:62:b1:7f:94:d2:8f:3e:2c:bf:f7:e9:6c:
27:0c:d2:05:74:61:1e:72:c5:1f:cf:fc:83:f3:9a:
64:e2:63:f5:31:34:36:4b:92:67:73:6b:fe:ee:7c:
d5:45:ab:b1:eb:71:b5:5b:c5:ca:cc:51:02:7e:92:
e5:4e:76:55:87:35:43:98:0f:8d:97:b2:7b:39:95:
39:b8:da:2f:45:21:07:49:4d:82:a8:57:9e:61:86:
2c:e3:85:95:1f:88:9d:12:c7:0a:fd:8a:a1:63:d1:
14:6e:6c:e3:7e:0f:6e:7f:a0:9f:06:e0:9a:fe:d1:
94:fe:bc:51:7c:b6:ec:80:f5:f4:49:7e:37:8c:3d:
b7:b6:ef:cc:c4:4a:6b:91:d2:e6:15:62:3a:5f:aa:
60:67:8e:c7:f0:e3:ae:10:b0:d6:8a:8c:94:6b:f9:
87:d3:f4:c1:58:13:a6:7a:9b:13:9c:29:e5:20:14:
61:df:59:28:ed:0f:b2:aa:81:a7:c9:eb:05:72:30:
e7:f6:4e:73:a0:57:c9:87:5b:12:cd:78:1e:f5:21:
91:43:94:39:92:02:71:d1:c7:96:57:ef:bd:dc:02:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6B:5A:1E:D2:A4:9A:86:BB:0E:1B:BE:2A:D8:BC:20:25:79:20:E6
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:00:86:62:50:66:84:ba:59:ab:a4:ad:d2:60:72:84:30:f1:
19:ff:08:b7:1e:28:3e:32:ff:dc:a7:ec:5e:50:6e:04:20:f3:
47:ab:5c:29:b5:ba:1d:e8:d8:e1:74:5c:75:87:f5:90:e8:c8:
5c:c2:21:2d:1b:ab:6f:af:1c:65:1b:0a:b8:cd:b4:b3:79:00:
a8:0c:76:9f:17:8a:59:a7:e7:bc:3e:9a:3d:27:dc:78:6b:61:
4b:99:c8:7b:25:38:88:a1:45:b5:59:2a:e2:9e:53:62:9d:60:
a2:be:81:61:20:e7:28:0d:73:f7:47:0e:e1:49:43:e6:9e:f9:
12:e0:6b:5e:70:b2:0d:35:f2:f4:0b:d2:52:19:ae:a9:15:f8:
fd:c7:30:fb:52:6c:eb:be:7f:0a:2e:80:ae:e7:03:5e:a1:68:
a3:7f:f8:e7:27:54:9c:65:f6:ae:e8:9c:0e:34:41:e6:31:5c:
26:9b:ac:63:cc:ee:09:59:7a:2c:d4:fe:91:f6:f2:c1:5d:53:
aa:06:7b:31:74:9b:ab:9b:20:5b:74:1c:d0:a9:53:17:2f:08:
64:59:7b:b0:1f:91:06:87:57:32:c5:48:83:86:38:89:64:2d:
af:16:0f:f6:d1:6f:e5:ec:d9:82:2d:b7:9f:4e:a1:b8:91:38:
31:72:35:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:25 2026 by rpki-client