Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: paZlzQ7/4xUcKPUNkyyvt9zSeWQY5dBMJP76V8MIC5s=
Subject key identifier: 83:6A:57:E4:03:DA:41:ED:6F:D0:DC:11:7F:6A:D1:26:3D:F8:4B:FD
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 019D2BBC40BBD28B00E69D16D5BB586C0168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 1435
Signing time: Thu 26 Mar 2026 20:00:50 +0000
Manifest this update: Thu 26 Mar 2026 20:00:50 +0000
Manifest next update: Fri 27 Mar 2026 20:00:50 +0000
Files and hashes: 1: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (hash: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: eaZnkmLpR6BJALdE4YrU8Hv+JJNbOTkQz4LM5z/sGDY=)
3: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (hash: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:40:bb:d2:8b:00:e6:9d:16:d5:bb:58:6c:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Mar 26 20:00:50 2026 GMT
Not After : Mar 27 20:00:50 2026 GMT
Subject: CN=836a57e403da41ed6fd0dc117f6ad1263df84bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:68:1c:da:e7:5d:b3:a4:7c:50:f5:12:8a:
43:f4:2b:fc:58:dd:de:3f:56:90:d4:ba:c0:14:46:
72:8a:7b:24:41:85:6b:8e:86:dc:dc:d0:e0:03:d9:
3a:3f:ca:73:a1:ab:b7:35:b0:fb:bf:d7:73:44:a6:
74:00:4e:90:73:7f:9d:db:82:0e:e1:71:b8:fa:df:
41:e8:d1:57:b9:ef:de:29:d2:17:76:06:9d:c4:fd:
57:c4:54:a6:f2:9f:70:a2:aa:08:13:e0:0d:dc:da:
60:d1:bf:56:9f:6e:3d:7b:f0:e2:b9:3a:55:f7:fd:
46:53:4f:b9:12:5d:e6:88:52:30:c1:e0:44:5b:6e:
44:11:5f:69:b5:b2:80:43:be:57:ff:76:0c:c3:6b:
63:e4:8e:f6:67:60:d5:23:43:4e:94:49:a7:f1:2e:
4b:b1:41:ed:49:40:82:1e:22:84:a5:99:78:91:31:
77:f4:c9:04:7d:4b:bc:3a:ee:75:50:39:38:33:66:
24:d4:0e:e6:d9:90:4b:27:14:f8:39:32:c0:9f:97:
27:52:4f:17:97:39:59:e7:50:5a:dc:ab:21:30:4d:
42:35:5d:62:ff:7a:d3:83:51:45:c6:7c:a9:6f:04:
fb:8e:dd:88:3a:95:7c:53:1f:b7:c9:c1:bd:f1:ae:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:57:E4:03:DA:41:ED:6F:D0:DC:11:7F:6A:D1:26:3D:F8:4B:FD
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:43:6c:41:35:72:77:67:c9:82:5c:80:b7:ea:82:13:ed:f2:
16:ee:18:cb:a7:53:2e:8a:b4:03:b1:47:59:00:b0:45:29:52:
3c:93:62:5a:eb:ea:79:73:a8:96:28:e6:32:dc:bf:c4:b6:4e:
d9:82:be:9f:38:d6:fe:2d:3d:8e:40:76:8d:54:a0:bf:89:bc:
12:ab:33:81:6b:26:af:25:c0:18:72:ef:12:8a:f1:c7:89:5b:
f7:52:eb:c0:80:de:89:a3:6d:ee:d1:58:29:4e:00:f0:3e:d0:
e2:77:a2:b2:20:51:ea:08:41:d2:3c:e9:91:46:e8:81:b6:65:
69:8e:ab:6e:c5:39:49:e5:40:00:5e:c4:7d:57:7f:6a:6e:30:
ee:1d:43:d1:80:f2:23:05:88:6f:2a:5f:1b:e7:db:ce:42:87:
86:03:2a:f3:9c:5e:fe:ff:3e:cb:a6:2c:a9:82:9c:13:fc:eb:
50:fb:61:54:37:03:2f:2c:e2:a7:f0:34:36:e8:fe:9e:fc:a8:
78:80:94:14:aa:ad:f9:fe:01:e4:9e:59:a4:f4:a3:86:4d:0c:
48:9d:db:ba:12:84:73:72:b8:45:bf:70:7f:8c:5e:55:17:17:
c2:3c:0c:9e:36:93:25:56:12:a6:f1:11:c1:dc:43:e8:96:92:
81:bd:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:31 2026 by rpki-client