Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier: W+TNYUvugbTNOIWdeEbVrrywkj03TfMwnDCTuO0lHIs=
Subject key identifier: BC:8F:75:0F:B2:FE:46:AA:15:DE:01:3B:82:0A:B5:57:85:0A:07:15
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial: 019D273AF9EEB5BEA3F306BAD60ECCC32500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number: 12E5
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: OGn0bOthmc3dTYyMTaWjzyHrvqQVIHaKNhouFeyaLHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f9:ee:b5:be:a3:f3:06:ba:d6:0e:cc:c3:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=bc8f750fb2fe46aa15de013b820ab557850a0715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:ca:41:98:f1:f4:ea:f7:a6:74:77:fc:0e:
41:b5:cc:3e:65:57:fb:fb:73:bc:e3:e5:a4:70:9e:
29:ea:e8:04:7c:3c:57:85:e4:e8:a9:55:22:86:96:
1e:1d:34:e1:26:2e:67:bb:af:17:07:0f:d0:83:1d:
e8:b8:8d:0a:5a:3f:fe:92:6e:46:21:b7:4e:af:a3:
c7:c4:cd:4b:81:3c:3c:c8:75:da:5c:82:47:56:92:
45:df:1c:2a:f1:c9:7e:5b:ee:8d:60:07:16:d1:c3:
22:a3:5f:a9:f6:06:f8:83:92:2b:05:ac:70:be:20:
4b:8f:fb:bf:0b:75:0d:67:70:3b:8a:c7:52:38:28:
62:34:2e:2f:77:ea:2f:6f:08:8f:7c:b1:47:3c:d2:
09:76:0a:30:62:de:bf:4e:e3:7a:c1:a5:bc:59:bb:
a0:d7:6b:7e:66:7d:aa:d6:70:c1:f5:61:be:09:48:
3b:57:db:24:fa:2f:b4:38:6d:d2:88:70:94:fe:f1:
01:05:da:19:9e:7b:28:1e:86:e8:87:da:7a:13:6d:
5a:4a:15:d9:5f:6e:79:75:cd:dd:e2:a2:d1:46:c4:
37:9d:bf:f4:97:95:fd:29:67:f0:c0:69:4f:eb:a7:
6a:0b:56:64:a9:38:c5:39:a7:23:30:97:d3:ae:e8:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:75:0F:B2:FE:46:AA:15:DE:01:3B:82:0A:B5:57:85:0A:07:15
X509v3 Authority Key Identifier:
keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3f:f7:7c:fc:78:68:4f:dc:a1:2e:20:66:97:d9:41:9e:72:
28:43:22:bd:a9:12:bf:b6:72:41:8a:54:3e:f9:f5:56:dc:f4:
78:22:ca:80:79:3c:f6:f8:83:56:97:fa:be:13:64:5a:c6:42:
f4:ac:1b:27:8b:57:cd:5d:9b:fc:2c:93:ad:47:68:04:f9:fa:
2d:f8:72:0e:7f:54:70:70:56:ad:b8:9e:1b:ab:87:9c:5c:af:
c1:f7:80:4c:6b:18:88:18:80:90:a4:60:20:2a:c1:25:16:61:
29:89:56:ba:d7:c6:9d:f0:da:59:8e:2a:e4:90:fe:ba:c9:1f:
cb:8a:a4:d4:b4:7a:89:58:f2:0f:a3:1c:5e:75:4f:56:12:fa:
72:68:86:55:06:50:5c:1b:f4:ef:24:f8:ad:55:a1:7f:68:ef:
06:21:46:ca:0d:cf:6d:55:26:9b:b4:8e:1f:a6:14:12:76:39:
99:de:29:7a:b0:c5:22:73:de:49:91:7b:e9:01:49:7e:44:28:
4d:9e:0e:ea:89:52:2f:32:55:11:cd:5f:9d:ab:91:3d:40:b1:
48:84:d3:b8:a9:b2:bc:0a:22:1f:27:c1:42:f9:c9:17:dd:8e:
4a:97:17:46:37:f0:da:3a:a6:3d:b9:a5:4d:c9:fc:89:61:ff:
f2:9c:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:39 2026 by rpki-client