Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: 8G52imSmu06yDlfPQ1Mj35emUi9EYCVcTg0Qp2cPM3M=
Subject key identifier: 15:21:4F:5C:0E:DE:56:1A:A6:7A:2B:E9:93:88:85:C1:71:DC:C7:07
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 019E20FFD4277E44E2DEA6A9CA211BA51354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 14B4
Signing time: Wed 13 May 2026 11:01:37 +0000
Manifest this update: Wed 13 May 2026 11:01:37 +0000
Manifest next update: Thu 14 May 2026 11:01:37 +0000
Files and hashes: 1: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (hash: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: zJTdzeTHQ+NcpRogbRD/pCPDKoang+xu9fnvJD+upSA=)
3: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (hash: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:d4:27:7e:44:e2:de:a6:a9:ca:21:1b:a5:13:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: May 13 11:01:37 2026 GMT
Not After : May 14 11:01:37 2026 GMT
Subject: CN=15214f5c0ede561aa67a2be9938885c171dcc707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:49:a6:84:69:da:d9:b2:0b:c5:50:03:9a:
00:df:51:1b:9e:3e:71:ad:6b:23:40:7f:73:97:79:
87:e5:53:35:d2:e3:96:4c:fa:b3:b1:59:09:40:f1:
17:d1:bf:d5:04:3e:b2:3d:59:ad:e8:59:81:03:2a:
a5:9c:b5:37:a8:b4:02:ac:51:bd:ff:f8:34:10:40:
ea:93:f3:b3:15:ae:2b:e9:3c:39:a9:35:cb:d3:a4:
33:42:de:c3:05:a2:8d:69:cc:ff:96:67:8d:e6:7b:
59:b5:32:fb:c9:6e:81:81:5c:6a:e4:38:29:d3:bd:
91:c6:1b:01:fb:0e:a0:e8:b6:42:0d:f9:84:98:e4:
04:1a:02:31:36:ab:b3:84:e5:2f:58:04:2e:97:ee:
44:f4:3b:0e:f0:fe:86:3e:d8:70:32:98:17:61:91:
14:9e:d3:bc:59:17:97:fb:9c:83:37:c6:5a:b4:34:
68:60:7e:cb:b6:60:e5:89:5a:05:5d:25:2c:9a:60:
77:3d:8a:75:28:98:09:9b:85:ac:b2:24:29:b2:db:
f0:8d:44:46:1d:c6:60:7e:93:d1:6b:c4:e8:b4:24:
f5:bb:98:17:cb:4b:20:a4:45:18:a8:98:83:13:00:
52:7a:27:d1:3f:d6:5c:26:c5:94:9f:10:73:12:12:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:21:4F:5C:0E:DE:56:1A:A6:7A:2B:E9:93:88:85:C1:71:DC:C7:07
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:82:4c:af:f7:cd:5c:0f:f2:dd:c3:8a:18:1a:da:3d:69:
c8:8e:98:9e:08:fc:3c:47:66:65:f8:40:2d:4f:46:9c:78:86:
48:1a:2a:7a:1f:92:08:ec:8b:e5:8d:1f:de:2e:38:25:6b:02:
91:e3:7e:2c:e6:03:ec:6e:14:70:c9:5f:0d:25:26:3b:d4:d5:
73:ab:66:03:11:b1:3b:b5:fe:14:35:e1:28:41:18:2d:d7:58:
89:94:cb:c4:a7:8a:1d:8a:9c:09:77:ea:4d:aa:b9:73:b8:85:
2f:bc:0a:37:8d:07:72:9d:34:a5:a9:9b:c4:f4:d7:13:b4:80:
2a:84:37:2e:be:ef:bb:12:ef:58:d4:9a:b3:f9:78:fa:70:e7:
b2:52:0f:b0:46:15:87:b8:a5:6d:d7:10:12:cd:61:4a:c8:82:
bb:13:47:65:5b:ba:33:a4:9b:7b:0c:38:7a:33:b3:d3:e3:b4:
71:5a:6c:4a:17:4c:91:43:1c:83:1e:6a:20:1f:07:ad:17:e1:
ad:1e:8d:dc:96:7a:31:f6:7a:6f:1a:b2:6f:5d:04:44:0b:6c:
e7:53:d5:68:89:63:8c:75:1b:46:ca:d4:d9:a6:04:3d:30:c1:
aa:0d:bf:97:99:a3:21:32:f0:fa:6a:8c:e0:c2:ad:e6:c0:34:
e1:d2:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:54 2026 by rpki-client