Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
File: CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft (raw, json)
Hash identifier: 8rUsxaipqKnhqPTdWvkc3DHuoK8udjPyBifV0R0KkXU=
Subject key identifier: E2:58:08:2E:76:92:77:26:2A:C1:80:83:58:7D:47:0F:8D:78:41:AD
Authority key identifier: 0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
Certificate issuer: /CN=0a79946872eb5438684858fc861ed2bf6ccec353
Certificate serial: 01A10A6FBF10F9E8BD97E780C111F8CB3490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
Manifest number: 0164
Signing time: Mon 05 Oct 2026 05:00:57 +0000
Manifest this update: Mon 05 Oct 2026 05:00:57 +0000
Manifest next update: Tue 06 Oct 2026 05:00:57 +0000
Files and hashes: 1: CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl (hash: M+o4AhNIjQLl891NS8sOz17+k77Cg5sqp6BGDyMyzPQ=)
2: XddofGQPCZvvJARoShJNKWyGOPE.roa (hash: mwOOWRufyuu3Lcd2xxoAQpzQ4w61M0La0mGMruF3D9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:6f:bf:10:f9:e8:bd:97:e7:80:c1:11:f8:cb:34:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a79946872eb5438684858fc861ed2bf6ccec353
Validity
Not Before: Oct 5 05:00:57 2026 GMT
Not After : Oct 6 05:00:57 2026 GMT
Subject: CN=e258082e769277262ac18083587d470f8d7841ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:e0:a1:0b:a8:c1:ac:4a:87:81:c6:d6:43:
96:46:84:b5:69:15:a3:b2:11:ce:1b:e6:c5:1c:33:
71:2b:ed:02:58:f3:dc:5a:13:8f:7c:85:29:49:c2:
df:40:1d:ac:ee:4a:cf:8c:47:a8:57:43:ec:02:d8:
34:c5:33:84:53:9f:b0:5f:40:8a:12:94:77:2d:e2:
04:ae:dc:2e:db:b6:6c:26:39:4c:e1:f6:59:df:9d:
08:d5:4f:05:34:93:78:37:86:15:08:d9:9e:d9:94:
c0:3c:0f:c5:d5:44:37:af:d3:c2:5d:db:a3:20:48:
eb:c5:07:80:c1:d7:d8:d3:39:bb:0a:cf:82:b6:b7:
e3:d2:b5:33:83:d0:be:42:3c:92:aa:74:7b:b0:e5:
d7:b4:ed:1f:15:b8:a3:12:f8:08:d7:50:eb:6a:e8:
6b:fc:1b:65:85:66:67:1e:74:46:e1:50:83:8b:3e:
d6:08:cf:04:51:44:78:40:8a:4a:83:70:9c:3a:8a:
4b:9b:4f:5f:e6:a8:ab:83:56:cb:9d:9d:1d:61:f6:
bd:03:cc:17:0f:31:bf:56:a7:ba:2b:b2:96:8d:b8:
da:35:a5:2d:24:8a:62:a5:8e:a3:a3:48:ac:85:b0:
5e:5e:39:2b:b5:ee:29:19:9e:9a:bb:46:9d:80:ca:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:08:2E:76:92:77:26:2A:C1:80:83:58:7D:47:0F:8D:78:41:AD
X509v3 Authority Key Identifier:
keyid:0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3f:1c:72:78:2b:80:72:84:78:f6:1f:11:aa:65:6c:70:f7:
cf:06:cc:d1:c6:b4:bb:22:a2:17:f3:48:a9:15:f0:3f:43:c5:
06:d8:91:1d:7f:a9:d8:33:a2:34:a9:54:43:52:cd:73:f8:b8:
22:bb:dd:2d:26:30:2e:ef:f1:d2:a8:ee:b8:26:38:97:d3:31:
f4:0b:14:42:8f:e3:d3:c5:10:9d:78:02:b5:a8:d5:00:f9:bc:
a5:f7:c8:e8:bf:50:50:88:f9:71:28:d8:aa:07:c8:fa:fc:ea:
21:51:af:55:22:af:57:80:9b:d5:a3:8a:75:81:df:0d:5b:7d:
5a:82:4d:f6:43:d2:70:19:e8:72:a4:b8:12:3d:ea:66:4f:45:
91:c7:13:2b:e3:80:a7:62:bb:cf:77:bb:4d:29:ae:24:e0:68:
fa:03:38:3a:4e:3f:5d:48:55:da:e6:68:38:d2:4b:29:8f:79:
87:34:ad:08:b3:d0:b9:21:ac:d9:e8:4a:12:e2:df:98:81:44:
4a:09:3c:03:c6:7e:5c:be:80:5e:96:de:ed:44:ea:c2:4a:1f:
a0:5c:9b:73:fb:7f:82:99:2b:2c:e9:43:1b:4f:21:b1:ff:d7:
10:e8:2e:d4:48:51:31:cd:67:75:4b:01:66:7b:9e:23:12:26:
4c:ee:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 17:35:28 2026 by rpki-client