Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: lFhC6jk/LkPmZ3RFtjW2MrsGekTmmG1mEtch6s2mt/U=
Subject key identifier: 5F:FF:67:F0:C3:08:EF:A0:ED:DE:A5:AD:43:06:97:B7:25:95:31:69
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 019D284DFFD82A611E1F6C2E7285D9079D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 04:01:33 +0000
Manifest this update: Thu 26 Mar 2026 04:01:33 +0000
Manifest next update: Fri 27 Mar 2026 04:01:33 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: 00+x1xVO2fzUd37qNWDVLingbLaQCJvWRhCnnJP6eus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ff:d8:2a:61:1e:1f:6c:2e:72:85:d9:07:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: Mar 26 04:01:33 2026 GMT
Not After : Mar 27 04:01:33 2026 GMT
Subject: CN=5fff67f0c308efa0eddea5ad430697b725953169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:46:87:ba:7c:bb:c9:f0:02:3b:83:dc:9d:
9d:45:65:56:65:3d:dd:a3:cc:b7:41:d1:8a:7e:c5:
79:62:27:03:e3:4f:8b:a9:61:cb:58:37:ed:41:43:
2f:37:1a:ca:97:0c:7c:68:3a:14:54:47:d0:b8:7d:
6e:6e:d9:49:09:84:af:58:a5:02:d3:52:b6:b7:a6:
ad:b4:a7:ec:76:77:b9:c6:23:da:3c:b4:38:f3:43:
45:12:df:07:9b:6a:33:eb:cb:23:eb:52:cb:0c:cb:
f4:aa:9c:ce:24:c3:0c:ff:a1:ab:62:32:c0:07:a8:
9e:ae:7d:94:aa:12:be:1b:3e:11:46:1d:87:15:3d:
14:7c:13:9c:8e:86:50:ef:10:95:cb:c7:bb:a7:99:
b7:af:86:82:7c:e4:67:db:8a:18:4a:30:c7:2c:f2:
f7:72:7a:7e:44:a4:a1:01:8c:f9:3d:b9:e7:bf:41:
ea:75:53:f4:2c:33:84:ed:7e:0b:4e:3a:49:4f:6e:
bf:6f:ea:e3:c7:64:a3:86:f4:6b:1b:99:be:76:fa:
dc:d3:d4:78:88:60:3c:9b:9f:e7:33:96:be:2e:f8:
f3:0e:50:38:86:e4:0f:20:60:21:7f:82:d4:fb:38:
bc:a5:41:ab:5b:30:3a:c4:bf:31:24:bb:31:ba:6d:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:67:F0:C3:08:EF:A0:ED:DE:A5:AD:43:06:97:B7:25:95:31:69
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:84:0c:d1:9f:fc:51:0a:e7:30:b1:03:a0:72:56:2b:e2:91:
f3:57:a9:c1:61:f6:88:17:29:30:bc:7e:57:ff:dc:83:92:2b:
7e:10:85:e7:ce:cb:92:ac:f4:d2:93:a3:dd:9a:d0:2d:e8:92:
0a:93:ac:38:83:c4:e6:4b:93:d2:21:3e:fe:19:e0:7f:a2:5b:
5d:fd:21:90:b5:2c:31:a1:e1:7d:f0:53:db:68:2a:18:a4:a6:
28:51:6b:19:71:72:cd:9b:fb:b8:f4:c4:47:5b:5f:f1:dd:4b:
d2:a2:c0:13:10:00:71:75:a5:ef:30:af:57:53:1d:ea:34:2d:
59:c1:fb:41:f1:39:7a:79:3e:7c:bf:75:9e:93:34:79:c6:4c:
85:04:dd:00:2c:ba:e8:b8:6b:5c:a0:b8:9a:14:e5:5d:ee:ab:
35:2a:16:44:b7:87:d3:1f:ac:ac:d6:86:f7:9f:b7:14:b8:bf:
53:bc:99:7f:c1:98:94:5e:46:c7:92:38:78:5d:29:5b:c6:a8:
db:29:80:d6:4c:89:7c:d6:4d:a8:c6:20:e4:e0:75:6f:d4:54:
fc:ab:44:35:a1:e7:78:b5:39:c6:bb:8c:4a:0a:24:d1:f8:c8:
2c:a7:90:4c:3c:9e:a7:79:e0:79:b9:4b:f3:c2:0c:bf:68:de:
f3:a0:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:48 2026 by rpki-client