Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft
File: CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft (raw, json)
Hash identifier: HrwMOvrJm5FOAMhI28zo/U2GzBKhFS+hUlf5OlLhHPk=
Subject key identifier: E2:E9:B7:8E:7A:2D:01:D3:15:09:0A:0C:95:42:FC:C2:BA:5A:E3:B7
Authority key identifier: 0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF
Certificate issuer: /CN=0a670ed2bc71191cb60bd9660148510b236d3acf
Certificate serial: 019D2960893722DA6A53DE526EF188F789A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft
Manifest number: 0155
Signing time: Thu 26 Mar 2026 09:01:25 +0000
Manifest this update: Thu 26 Mar 2026 09:01:25 +0000
Manifest next update: Fri 27 Mar 2026 09:01:25 +0000
Files and hashes: 1: 57ExRImlY_J1W0DiqCuzHtZc1-M.roa (hash: H/MP7YqHoUUdNXYELvg7nbZxJWneiFMYDH3qjOKnph8=)
2: CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl (hash: 3eJKJgQFfuh/YsOUrp1uKt3iGoGWzFpQm+FPN+t+yEg=)
3: lnDM7sD_RAt_sM0f7QmBz4qOgYA.roa (hash: 1AImBJ5UNIT+sFRT9lpZkZKmyIOcl6ryDbLO+EP3i0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:89:37:22:da:6a:53:de:52:6e:f1:88:f7:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a670ed2bc71191cb60bd9660148510b236d3acf
Validity
Not Before: Mar 26 09:01:25 2026 GMT
Not After : Mar 27 09:01:25 2026 GMT
Subject: CN=e2e9b78e7a2d01d315090a0c9542fcc2ba5ae3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:3c:f0:8c:fb:83:2b:4c:46:ca:8c:b2:3f:
67:55:af:a2:2d:a5:5c:ba:9f:94:86:de:d1:e6:81:
21:93:e4:b6:de:e5:d4:22:a1:20:1d:53:43:41:43:
5c:99:1f:a2:3b:e3:3f:69:d6:d0:b0:d0:08:9b:2b:
6a:cf:14:9e:b2:e1:83:6f:15:d2:22:3f:28:c8:66:
43:e7:f5:48:f4:f7:8f:68:7e:41:a7:98:1e:e3:21:
62:8a:37:49:01:7a:46:e0:ae:32:0e:c6:ae:f6:39:
e2:58:d7:46:01:c7:eb:69:eb:86:af:db:9c:2f:e7:
87:ec:cc:8c:6a:f8:85:2c:e1:4c:b2:90:26:5b:e9:
ea:8f:36:6a:ce:92:b7:bc:ba:d5:ec:b3:2f:5f:11:
9d:3c:15:bf:17:74:df:b0:42:70:bb:1a:bd:4c:2a:
f7:bc:b9:3b:5c:e1:09:e0:cc:fb:54:e3:31:b6:33:
88:4c:19:c2:71:be:c9:84:ff:00:bd:94:06:cf:3b:
2e:3d:bb:43:ca:0e:7e:f9:70:22:1b:52:e8:26:4f:
13:7d:10:dc:74:89:dc:1f:06:65:25:3a:13:5d:92:
4c:1e:d3:1e:e1:23:8f:04:30:aa:95:3f:0f:4e:93:
04:e4:37:0a:ee:d3:3c:b8:e4:50:1f:5a:ac:e7:2e:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:B7:8E:7A:2D:01:D3:15:09:0A:0C:95:42:FC:C2:BA:5A:E3:B7
X509v3 Authority Key Identifier:
keyid:0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c9:6e:ab:be:76:05:c7:5e:62:5c:57:e4:11:1d:7e:25:d9:
8d:b1:90:c8:34:1f:4f:89:05:1b:f1:59:c0:ee:49:9f:83:93:
5a:91:60:fc:36:4a:e6:d1:67:1b:9b:3f:6d:ed:23:0c:cc:dd:
50:b6:67:a5:36:a1:15:42:ed:4d:18:96:c6:97:04:db:54:b2:
84:83:6f:4b:92:f6:f5:4d:d4:9b:ac:c5:6d:17:e1:46:73:03:
58:9a:52:cc:7d:d8:6f:f1:36:89:d6:e8:31:a3:09:c6:46:41:
02:fd:a6:42:46:a9:52:47:d0:b0:4e:8f:7e:3d:92:67:76:24:
05:e1:01:45:3e:24:c1:9f:7d:7e:32:f9:57:84:0f:3e:4a:3f:
6c:32:b0:d5:3b:a2:bb:64:51:90:f1:9d:26:f4:9f:4a:57:05:
51:06:4a:7a:8e:a2:25:24:9f:2c:2b:f6:0c:5a:4e:fb:0e:29:
36:f1:38:ff:0e:f7:89:4a:5e:c0:a3:29:d7:36:25:eb:29:cc:
70:7f:d0:0d:f9:d1:4d:2d:8f:82:42:89:6e:90:df:9d:d9:53:
31:8d:5e:49:33:c7:3c:e1:54:e0:ef:6e:86:b4:5c:61:3a:c3:
f7:37:d9:50:45:a4:33:03:5f:4b:b2:5b:8e:e1:be:9f:91:6e:
28:a8:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:10 2026 by rpki-client