Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
File: CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft (raw, json)
Hash identifier: CKLi7p6vdonO9SODqsxSy2os4VeJ98CaKwuhEagkcpg=
Subject key identifier: DD:65:CF:00:C0:82:39:E1:1D:C3:14:29:91:71:A6:1E:D3:A2:26:12
Authority key identifier: 0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
Certificate issuer: /CN=0a79946872eb5438684858fc861ed2bf6ccec353
Certificate serial: 019F8FEC99DCF4E1BD50C65696B54631466E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
Manifest number: A0
Signing time: Thu 23 Jul 2026 17:01:15 +0000
Manifest this update: Thu 23 Jul 2026 17:01:15 +0000
Manifest next update: Fri 24 Jul 2026 17:01:15 +0000
Files and hashes: 1: CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl (hash: 0cMgumz0ymiJ05MqAvGv0tkG6CYyHqgBBy+J68idLcw=)
2: XddofGQPCZvvJARoShJNKWyGOPE.roa (hash: mwOOWRufyuu3Lcd2xxoAQpzQ4w61M0La0mGMruF3D9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:99:dc:f4:e1:bd:50:c6:56:96:b5:46:31:46:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a79946872eb5438684858fc861ed2bf6ccec353
Validity
Not Before: Jul 23 17:01:15 2026 GMT
Not After : Jul 24 17:01:15 2026 GMT
Subject: CN=dd65cf00c08239e11dc314299171a61ed3a22612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:41:8e:7a:09:ef:f7:8d:c2:b0:5d:27:ed:
be:99:ca:1f:35:99:b0:94:e3:56:6e:30:22:82:a4:
a6:93:bc:09:d3:fa:c2:53:c0:e3:a5:ca:f3:8d:f5:
0e:09:21:9a:54:20:d2:df:94:30:d2:89:f6:d9:56:
8f:0a:99:fe:81:d8:35:27:4b:aa:23:6e:b4:2b:28:
cd:44:a1:94:ae:07:2e:78:49:1f:b2:06:e2:36:ba:
8e:25:8b:62:7e:f6:01:58:95:8d:1e:aa:80:c4:22:
b4:09:9d:55:40:49:b8:4f:0a:ff:52:f5:da:2b:95:
fa:b3:44:32:af:53:74:be:f4:3d:7a:d2:6a:ae:6b:
31:12:07:45:82:af:a8:8b:b3:bf:1f:92:35:5b:d9:
d7:67:8c:36:4d:41:91:bd:71:d6:19:35:3f:8b:88:
c9:6a:1f:80:b9:48:80:0d:8a:db:2e:21:2a:1b:4e:
1e:c6:f2:a9:ed:be:ba:67:73:9e:11:b5:94:d8:83:
bd:62:3f:c8:9a:65:1b:f4:f4:98:bb:ad:73:5b:c2:
c4:17:9b:2c:c8:43:ac:3d:3d:fa:56:b3:03:6c:00:
1c:ac:4b:20:c0:4e:48:24:7b:f4:3d:10:81:f4:1c:
6d:34:ff:18:de:d1:01:a0:f0:3a:a1:5c:49:9a:cf:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:CF:00:C0:82:39:E1:1D:C3:14:29:91:71:A6:1E:D3:A2:26:12
X509v3 Authority Key Identifier:
keyid:0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:63:58:3d:0b:f4:d0:05:49:a6:b0:34:b3:62:ab:97:3a:eb:
9c:5e:dc:f2:b2:ba:ae:19:57:ea:eb:f6:72:1b:ca:b4:c8:a0:
e7:42:ed:e0:f5:36:a9:a0:e2:8e:e5:cb:1d:fb:8d:35:ee:7a:
e7:dc:c5:94:9b:99:ca:2d:37:67:9e:f3:75:44:47:4b:a2:82:
fa:77:5a:68:10:ec:96:d4:4d:20:ea:22:51:69:8e:d3:90:46:
71:fe:72:ac:86:48:96:11:4c:14:df:a4:7f:5f:05:9d:09:42:
a3:75:51:d6:56:ef:4d:03:06:82:92:6a:9c:e7:a7:ae:e2:db:
7d:1c:27:d7:b5:f6:ee:31:d0:84:00:fe:e3:23:74:22:b0:3b:
87:3e:6a:08:a9:38:1a:bf:37:cd:08:10:3c:2e:43:51:7e:e1:
4b:45:e9:b9:d3:0e:ae:0a:53:be:f4:75:d5:cb:f0:aa:fb:20:
3b:6c:93:ed:e8:54:cb:4c:bb:6f:34:d4:5e:0d:bb:56:3d:9b:
7d:3e:b3:47:59:62:f7:9b:4c:1d:9f:0c:b2:e4:65:21:8b:e3:
79:fb:c3:cb:c8:93:6a:a8:f7:09:2b:29:18:91:2a:7d:af:1a:
0b:d8:a0:a7:5f:5a:cb:f6:f9:94:d6:47:c6:08:6c:2a:52:dc:
33:00:8e:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7Jnc9OG9UMZWlrVGMUZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzk5NDY4NzJlYjU0Mzg2ODQ4NThmYzg2MWVkMmJmNmNj
ZWMzNTMwHhcNMjYwNzIzMTcwMTE1WhcNMjYwNzI0MTcwMTE1WjAzMTEwLwYDVQQD
EyhkZDY1Y2YwMGMwODIzOWUxMWRjMzE0Mjk5MTcxYTYxZWQzYTIyNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLZBjnoJ7/eNwrBdJ+2+mcofNZmw
lONWbjAigqSmk7wJ0/rCU8DjpcrzjfUOCSGaVCDS35Qw0on22VaPCpn+gdg1J0uq
I260KyjNRKGUrgcueEkfsgbiNrqOJYtifvYBWJWNHqqAxCK0CZ1VQEm4Twr/UvXa
K5X6s0Qyr1N0vvQ9etJqrmsxEgdFgq+oi7O/H5I1W9nXZ4w2TUGRvXHWGTU/i4jJ
ah+AuUiADYrbLiEqG04exvKp7b66Z3OeEbWU2IO9Yj/ImmUb9PSYu61zW8LEF5ss
yEOsPT36VrMDbAAcrEsgwE5IJHv0PRCB9BxtNP8Y3tEBoPA6oVxJms9pjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1lzwDAgjnhHcMUKZFxph7ToiYSMB8GA1UdIwQY
MBaAFAp5lGhy61Q4aEhY/IYe0r9szsNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25tVWFITHJWRGhvU0ZqOGhoN1N2MnpPdzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80YWU0NDQtYTk1Zi00NjIzLTk4Y2It
NTgwM2ZmNzJjOTA3LzEvQ25tVWFITHJWRGhvU0ZqOGhoN1N2MnpPdzFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80YWU0NDQtYTk1Zi00NjIzLTk4Y2ItNTgwM2ZmNzJjOTA3
LzEvQ25tVWFITHJWRGhvU0ZqOGhoN1N2MnpPdzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGNYPQv0
0AVJprA0s2KrlzrrnF7c8rK6rhlX6uv2chvKtMig50Lt4PU2qaDijuXLHfuNNe56
59zFlJuZyi03Z57zdURHS6KC+ndaaBDsltRNIOoiUWmO05BGcf5yrIZIlhFMFN+k
f18FnQlCo3VR1lbvTQMGgpJqnOenruLbfRwn17X27jHQhAD+4yN0IrA7hz5qCKk4
Gr83zQgQPC5DUX7hS0XpudMOrgpTvvR11cvwqvsgO2yT7ehUy0y7bzTUXg27Vj2b
fT6zR1li95tMHZ8MsuRlIYvjefvDy8iTaqj3CSspGJEqfa8aC9igp19ay/b5lNZH
xghsKlLcMwCOSg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:47 2026 by rpki-client