Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: ASwFN8Jfn4I8ley6OYYtra8JHyhWGMC3m2wdluJWNGM=
Subject key identifier: 38:17:0E:11:48:1B:8C:FC:34:24:A5:A6:D5:E2:8A:75:3B:46:99:13
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 019D25F1F188FF7EBD9E6350695E0907BE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:46 +0000
Manifest this update: Wed 25 Mar 2026 17:01:46 +0000
Manifest next update: Thu 26 Mar 2026 17:01:46 +0000
Files and hashes: 1: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: IEZgVj6UOuiq3kWU7Qa9vV+VqVs4dmpnesf3kkXViDg=)
2: j63EUh8bGw4gZtzU0DG1LH-FIc8.roa (hash: kCvXryD6WaHV5/dIFEy0J57c6GyyMioVokTE4Sd2Wd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f1:88:ff:7e:bd:9e:63:50:69:5e:09:07:be:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Mar 25 17:01:46 2026 GMT
Not After : Mar 26 17:01:46 2026 GMT
Subject: CN=38170e11481b8cfc3424a5a6d5e28a753b469913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:5d:2f:45:6c:eb:71:46:5f:94:a0:f3:08:
86:5e:28:17:a3:64:3e:84:62:74:74:1f:ce:6b:3b:
70:b8:97:c3:53:c1:16:29:cf:76:35:16:57:20:b7:
8f:98:37:99:3b:d0:27:55:31:3e:b8:67:f5:2c:00:
8b:a1:00:9d:99:08:f5:77:61:09:3d:e7:b2:12:9a:
6b:99:14:05:7c:e0:55:c9:59:29:e6:4f:40:ea:df:
4a:11:43:82:b9:b5:ea:86:a7:b3:88:84:73:28:40:
e1:47:3f:f8:9e:58:6a:bf:67:e6:de:d2:33:39:6e:
e1:84:95:b1:7b:6b:0a:01:3a:22:cf:b8:c9:88:76:
a8:27:6b:1f:b5:b2:d1:27:39:cd:ec:d1:7e:57:bd:
b1:88:ea:d6:4c:b9:e5:0f:4e:02:3c:f4:96:ee:33:
0a:63:e9:91:65:31:8d:e7:1a:c8:47:22:b9:e5:97:
41:fa:95:d4:4e:c7:7f:0d:d2:17:70:45:32:6e:39:
98:05:10:3e:a3:d0:a1:36:7a:6e:71:0f:40:2d:0b:
72:ee:bb:80:5a:7a:1b:4a:a0:df:42:89:77:68:05:
a7:6d:cc:17:24:e7:cb:6e:d5:0a:bc:71:f4:fc:08:
41:34:e3:1d:3f:9d:8d:8a:25:1e:ba:b8:7c:c8:2f:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:17:0E:11:48:1B:8C:FC:34:24:A5:A6:D5:E2:8A:75:3B:46:99:13
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:75:95:4e:ac:69:60:54:da:00:01:35:98:88:88:ad:01:32:
2d:96:9c:c3:0e:88:1c:97:e3:74:9e:7c:bb:b6:28:d0:ba:52:
d0:e4:ca:de:5e:91:8d:c8:e6:c4:a9:4e:3d:1c:37:ac:38:ce:
00:ee:62:1e:f6:6c:4b:78:da:3c:39:07:3e:9d:c9:d3:93:ec:
4c:0c:84:08:f2:8e:8f:7b:0a:77:c3:35:d1:5e:96:8f:6e:4e:
29:04:c6:a2:42:c1:e5:50:b4:91:0c:9e:74:36:6f:8f:14:be:
b5:27:5c:8f:4c:73:cd:f5:41:c5:06:2b:2a:59:97:bd:04:da:
97:ab:32:61:bb:75:7f:a7:7a:31:47:03:09:40:4f:cc:89:e5:
ad:1c:b9:2e:7c:ae:41:ca:ab:6b:91:e1:84:37:4b:76:e8:9e:
68:f6:e7:de:32:6e:71:8e:c1:f9:77:61:7b:9a:c0:59:e7:ec:
a3:15:3f:5e:4b:8f:b7:88:63:12:08:3f:0f:6f:b8:7a:b2:0a:
48:65:b5:73:1b:72:9b:90:06:44:53:67:3f:5c:c4:ff:3f:be:
90:04:23:1e:30:81:34:4c:3d:ed:24:1f:34:af:6c:83:30:d9:
58:2e:3b:e2:24:16:1a:3b:f9:8f:84:13:64:b9:d0:5b:cd:6a:
5c:30:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:30 2026 by rpki-client