Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: grcPy3PdvcW2uaWql3R8Trt1o6I0tbEZ4kxEguwfFY0=
Subject key identifier: 99:75:ED:88:8D:84:02:8A:D7:2C:C7:67:1E:8B:D4:7A:13:67:91:7C
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 019F93C97561EAA9E10BDB4B47C3A9D4E2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 1574
Signing time: Fri 24 Jul 2026 11:01:21 +0000
Manifest this update: Fri 24 Jul 2026 11:01:21 +0000
Manifest next update: Sat 25 Jul 2026 11:01:21 +0000
Files and hashes: 1: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (hash: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: gvvMhpg6ZMCIwjQlD6M9FCXoVS/Aa4lJwzRk+kZDe/Y=)
3: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (hash: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:75:61:ea:a9:e1:0b:db:4b:47:c3:a9:d4:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Jul 24 11:01:21 2026 GMT
Not After : Jul 25 11:01:21 2026 GMT
Subject: CN=9975ed888d84028ad72cc7671e8bd47a1367917c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:55:6f:0c:c5:78:c7:04:ac:d3:c7:1c:16:
fa:59:c5:c4:c4:07:bd:5d:df:cf:22:62:91:43:bc:
b0:1e:4b:f2:00:6e:8d:a5:76:ef:49:28:d9:36:d8:
7b:19:84:5c:28:06:ff:e7:d7:3a:d8:57:10:51:da:
66:05:a6:54:0f:e9:5f:ca:5e:d9:a9:77:00:8c:3a:
b5:c1:0d:68:74:3f:a5:7b:1d:c6:ab:fc:ae:4c:00:
e4:f5:03:7b:ef:5f:04:e3:37:8e:c5:02:dc:c5:0e:
e8:0b:55:db:9a:17:55:b7:db:dc:33:d1:0a:06:51:
1a:47:56:13:47:83:df:c4:3f:4b:f7:71:7d:45:8a:
34:e8:56:e6:41:45:2b:de:e7:8c:78:98:85:d3:9d:
32:23:4d:57:13:66:09:c8:72:8e:69:5a:80:79:53:
8b:64:c4:2f:ec:95:9e:70:00:71:1e:85:2b:9d:f9:
b3:28:a1:be:3d:c1:c2:b0:c4:48:e0:67:16:41:93:
27:2f:f3:40:c6:67:cf:81:b2:d4:a7:ec:bc:38:81:
d5:6d:f7:2f:88:4b:dc:4e:c9:a4:9a:7e:aa:f0:7d:
0b:b1:af:07:2c:fa:42:a1:c0:2f:fc:5b:14:b6:2a:
9e:71:da:8a:b0:23:e0:b6:26:6e:05:fe:97:66:50:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:ED:88:8D:84:02:8A:D7:2C:C7:67:1E:8B:D4:7A:13:67:91:7C
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:51:ad:62:8b:1f:da:ab:cf:5a:aa:b8:f7:6a:b5:53:51:8f:
7e:b5:fd:96:f1:ee:b7:79:88:28:76:d8:fa:b3:d1:16:7d:44:
9a:45:92:7b:f5:e1:7d:cd:7b:16:61:8a:75:3a:19:a7:9d:6e:
d9:b2:36:57:f0:6c:e5:ee:d5:68:f5:59:1c:17:8b:de:86:dc:
de:8f:a0:5d:b1:f2:3d:2f:d1:87:5c:59:d3:54:f5:d9:76:ee:
8d:38:97:08:a6:3b:e2:31:a6:71:bd:0a:4c:11:69:c6:d3:fe:
c3:36:63:f4:17:b0:b1:71:a9:72:97:f6:6a:68:79:dd:d0:fe:
9f:05:c7:5e:c4:3e:4d:80:a1:4c:83:69:77:83:65:78:f3:b9:
86:1d:fb:7f:2e:60:18:78:76:0a:78:33:de:46:50:e3:0f:ed:
0a:81:e8:5b:9a:43:bb:ef:f4:c7:71:bb:d4:00:d7:a3:d2:e7:
b8:73:aa:a7:63:63:57:d3:fd:8c:b8:ad:c2:78:2c:2b:fe:0e:
32:a2:d7:7a:3c:2f:f8:fd:99:64:be:3c:a0:8a:02:fd:fe:1a:
b4:60:c3:8b:24:f5:45:9d:a8:0c:89:14:d9:97:37:fa:ec:fe:
27:0a:87:fe:f9:6b:73:e0:aa:15:f1:c1:9b:76:06:8f:d0:bf:
31:82:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:28 2026 by rpki-client