Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: /jneptABDBZeWnhjPYyXUahyXifmXhxrYuVAbbux048=
Subject key identifier: 58:D8:15:63:5C:8C:3F:52:78:B3:8D:7C:ED:71:13:EF:E1:C3:F2:B7
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019E1EA2F5A3EA7F553405D819D688E7550E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0F1B
Signing time: Wed 13 May 2026 00:00:56 +0000
Manifest this update: Wed 13 May 2026 00:00:56 +0000
Manifest next update: Thu 14 May 2026 00:00:56 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: nTBKpA/bCpC7zvuhSa3lUsWkan3BTyHnqPYf4VY4kUU=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f5:a3:ea:7f:55:34:05:d8:19:d6:88:e7:55:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: May 13 00:00:56 2026 GMT
Not After : May 14 00:00:56 2026 GMT
Subject: CN=58d815635c8c3f5278b38d7ced7113efe1c3f2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:a5:88:56:7c:15:f7:65:57:d4:50:cf:f5:
28:2a:54:bb:23:84:91:1e:fb:74:a3:34:56:f0:a7:
4d:1d:76:38:12:6a:39:c8:b2:10:09:41:3e:54:2f:
d7:9f:e9:75:34:78:55:cc:9f:c9:3f:3d:00:b3:ec:
5c:b8:a4:e6:ec:4f:ba:bc:08:98:e4:44:20:37:06:
f2:09:46:b6:3c:53:17:b7:a5:57:f7:99:6a:3a:f0:
83:c6:62:fb:01:1a:fd:d2:37:de:2e:a9:db:7f:cc:
80:89:b5:50:18:a3:2a:38:c8:e9:59:d5:93:9e:85:
00:ad:62:e6:53:0c:7d:0e:18:7c:25:54:5d:b6:3f:
04:ab:c5:99:5a:0b:17:ea:5e:3f:d5:cc:54:25:4d:
4f:ee:1e:69:f5:cd:05:55:51:6b:2a:b6:d7:a1:dc:
71:54:87:db:3d:66:c4:d7:59:fd:cd:59:8c:bd:88:
56:55:a7:cd:5a:0e:5d:c1:22:21:10:6c:ee:cd:6b:
43:b1:52:58:f2:d4:3b:03:a9:71:d6:2f:f1:57:2e:
d6:99:9c:4e:9a:35:9b:d8:54:e0:c4:35:44:57:ba:
41:b4:cb:c0:bb:71:02:4d:18:16:a9:a0:c8:d7:37:
75:8b:b3:4d:8a:1e:cb:43:86:9c:0d:da:a8:03:de:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:15:63:5C:8C:3F:52:78:B3:8D:7C:ED:71:13:EF:E1:C3:F2:B7
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:35:bc:4d:3d:ed:7c:27:de:f7:6c:8e:cc:ba:0b:97:75:9a:
00:02:97:43:99:1d:69:57:ec:d7:1b:e1:6f:35:bd:02:20:78:
92:4f:57:11:87:1e:6f:92:47:5a:90:77:04:2e:b6:4f:2b:7f:
c1:81:88:62:3e:7f:8e:57:47:bf:3d:c6:6a:85:27:65:55:c6:
42:d4:e2:19:63:6a:a9:1a:f7:94:55:43:b6:11:78:15:28:f0:
e4:87:f9:78:13:f0:65:9a:e8:2f:5f:f5:20:02:26:5c:07:24:
28:db:15:e8:59:1e:09:03:66:73:26:af:cb:93:e3:9f:d9:74:
da:9f:62:70:2d:c2:2a:3c:04:06:57:be:ef:7f:8c:a6:11:2f:
ab:c4:01:c9:25:9d:02:e5:6e:bb:ec:77:f0:7e:c8:8b:01:eb:
21:12:82:b7:5a:3b:93:d8:bd:b2:4d:a3:35:bc:a6:6f:ab:c8:
76:41:0a:af:db:16:e6:44:91:c3:7a:a2:dd:8b:c1:e9:24:c0:
0c:e4:d7:17:b7:a3:ff:68:dd:c8:35:30:1a:84:01:b4:49:e5:
2a:b6:eb:f0:89:f6:c6:cc:f4:59:01:75:40:e2:41:56:24:ea:
59:98:6a:99:ac:2e:bc:16:a5:b6:6c:2c:20:d8:fd:04:73:3e:
bf:c0:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:31 2026 by rpki-client