Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: FkBCH/JyG7BTaw0U6KAtMbwHgK3CK9SK9De8ephdNcQ=
Subject key identifier: 64:4F:71:D1:12:DF:AE:4E:C1:57:1B:50:6F:12:88:D1:BF:FC:16:62
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01A0D7CBD863B5096A05CE24A45FA7FAE1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 1084
Signing time: Fri 25 Sep 2026 09:00:55 +0000
Manifest this update: Fri 25 Sep 2026 09:00:55 +0000
Manifest next update: Sat 26 Sep 2026 09:00:55 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: cKdI6VcaqyP23WnH1f7/YK7jLWJqmM/w4feiWEIZBZo=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:d8:63:b5:09:6a:05:ce:24:a4:5f:a7:fa:e1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Sep 25 09:00:55 2026 GMT
Not After : Sep 26 09:00:55 2026 GMT
Subject: CN=644f71d112dfae4ec1571b506f1288d1bffc1662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:9b:84:34:a8:7a:22:78:97:c0:fa:c9:b0:
9b:61:1f:5c:f8:c4:b9:9c:fa:9b:52:76:27:73:f2:
25:4e:66:31:58:68:05:f3:0d:f7:e2:6c:7a:a0:a1:
cc:80:a2:c6:be:99:aa:be:76:f7:fd:d0:9a:27:fe:
d2:dd:a0:00:35:61:85:25:ee:c3:cb:ad:4a:5e:13:
24:86:8c:ad:36:1b:42:dc:a1:e3:96:27:2b:2f:e9:
26:b5:b6:b8:63:91:9a:0c:34:35:57:54:32:7b:9b:
d6:e7:cd:a6:c1:33:74:16:18:65:c2:e9:a9:06:04:
1a:21:4a:36:82:cd:af:35:c4:9a:62:3e:11:03:a1:
0f:25:47:40:13:29:cc:51:f1:3f:09:36:fb:ab:9b:
e9:29:8d:d4:6d:a3:4b:c3:53:36:e8:99:c1:76:1b:
af:f6:29:1f:12:61:37:c9:82:f2:99:35:70:ea:fe:
39:81:09:21:f2:60:cf:53:f5:19:af:81:20:90:fc:
32:b7:43:ba:c4:76:e0:83:39:9c:99:79:7c:4e:77:
8c:93:ed:05:11:72:ac:c6:2e:bf:cf:c6:a7:1e:0a:
0c:8b:ee:ee:2c:9a:53:e4:49:92:b8:23:69:ae:ac:
e4:86:c2:61:90:75:d2:54:60:d0:26:7e:4d:b7:c3:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:71:D1:12:DF:AE:4E:C1:57:1B:50:6F:12:88:D1:BF:FC:16:62
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:53:7a:5a:d0:4e:c0:f7:57:7f:03:d1:64:7d:0c:29:7d:71:
0b:2f:60:e4:0a:af:3a:52:81:f9:0e:80:af:b2:ba:f9:5f:bb:
e4:ac:fb:a7:50:83:98:44:5c:55:64:c3:e7:ed:9d:25:2c:59:
a5:22:d5:e8:05:d3:ed:e1:ed:3c:c9:b4:6f:16:c9:b6:95:a0:
4e:87:e6:fa:a2:1d:ef:1a:60:d2:5a:3e:22:c5:b0:28:8b:a1:
f2:cb:ad:ee:1c:8c:1b:7f:13:0b:2b:be:ba:f3:29:55:a6:bd:
2a:4e:09:4a:ca:c9:da:b3:85:90:66:bd:3e:bb:94:df:bf:e3:
c1:15:cc:d3:6c:87:e2:df:c7:9f:59:ff:e9:30:2d:ea:76:9b:
a3:70:9f:85:0c:c6:b4:14:a2:83:14:97:67:10:d6:13:f0:ab:
ac:08:14:e4:95:1a:9f:55:90:5d:e8:5d:b4:02:a8:9a:4c:12:
20:73:31:29:37:55:a7:15:e2:03:2e:3f:be:6a:d6:41:e1:b0:
b9:72:76:f3:d5:75:a7:e2:b9:43:c0:96:c6:86:3f:70:60:06:
e7:79:db:05:3a:76:0c:5e:44:65:dc:c1:36:6a:97:b1:ba:ae:
94:2c:65:88:26:fb:a2:e7:a6:43:35:10:82:10:4b:e4:5e:07:
32:fd:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:21:25 2026 by rpki-client