Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: Kt+LVEjISnJq91VYVxSDHFo+zQ4vW/I+z8onHUVjIhc=
Subject key identifier: 00:10:92:12:03:B4:B5:15:D8:B7:C4:24:D3:6D:7E:F8:7D:0C:2F:AC
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01A1DC81C75EA06D8FBD83309637F4B79A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 110B
Signing time: Sun 15 Nov 2026 00:00:55 +0000
Manifest this update: Sun 15 Nov 2026 00:00:55 +0000
Manifest next update: Mon 16 Nov 2026 00:00:55 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: 61tPH1yXA3w2oy1Z8d/UYZ3dTTEUglPOasC8IUkk6u8=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:81:c7:5e:a0:6d:8f:bd:83:30:96:37:f4:b7:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Nov 15 00:00:55 2026 GMT
Not After : Nov 16 00:00:55 2026 GMT
Subject: CN=0010921203b4b515d8b7c424d36d7ef87d0c2fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:5a:44:f5:67:6d:8f:a7:62:5b:2e:37:bd:
a6:c9:0b:30:10:13:0f:81:46:de:d6:88:01:4a:2d:
5c:ef:44:c1:c8:2e:0b:af:0c:a8:2e:f6:bb:fa:15:
91:50:c9:66:74:a6:fd:6b:85:ea:f6:56:ab:94:b8:
b0:72:23:23:f3:43:1a:95:c0:6a:52:a6:ef:ce:b1:
82:3b:9a:22:16:98:22:7d:f6:ae:e8:93:7a:44:80:
a3:05:10:81:bc:4a:06:49:9d:32:16:87:12:37:bc:
1b:3d:bb:ca:87:8c:5a:0f:ce:7d:cc:c4:48:45:98:
cf:dd:5a:e4:a4:12:57:e6:ce:5e:51:d6:ac:64:24:
43:b4:24:96:ac:c3:5b:36:cf:d2:c9:46:d5:57:99:
a4:0a:2f:57:63:3f:c4:34:b8:29:9f:eb:92:2e:db:
83:14:59:6b:06:bc:55:09:a6:da:fa:12:c9:29:9f:
d6:2c:df:f3:bc:63:fc:ab:1a:c5:0f:08:5d:ce:ea:
1f:77:e5:47:78:f5:ce:e0:f5:31:b3:67:61:9b:2c:
c0:d8:bb:2e:cd:1d:2e:7f:b5:b4:50:2b:37:48:64:
e8:53:06:90:cf:84:58:7e:62:73:77:51:66:45:a6:
cf:18:bb:85:ff:25:b2:52:52:92:96:1b:bb:fb:d7:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:92:12:03:B4:B5:15:D8:B7:C4:24:D3:6D:7E:F8:7D:0C:2F:AC
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3e:c5:47:f7:03:4c:02:32:e5:a4:34:f2:49:5d:09:4b:eb:
de:4d:99:26:9a:d7:b4:b4:40:03:ba:95:8e:74:86:1e:5b:69:
c6:8c:20:2c:78:75:17:71:1a:37:18:56:c0:6a:47:9a:0d:db:
2f:fe:17:a7:22:8b:68:0e:bc:08:2d:a7:e8:b3:8f:cb:3c:3b:
1b:76:84:3a:b4:d4:cf:c8:84:93:33:0a:86:d4:a6:5d:57:f7:
3c:f9:c8:19:64:b7:76:d7:20:cd:2b:7f:22:0d:25:58:cf:a6:
0c:d7:e4:b5:f3:d1:52:51:10:75:15:d6:b8:8b:de:a3:c6:b1:
f7:7f:6d:22:c6:0d:a8:0b:20:d6:e8:e1:27:e2:33:03:aa:e7:
1b:c4:66:c8:b6:3f:fb:29:e1:70:b9:13:cb:a4:ac:ca:0f:a7:
26:d2:cf:c9:3e:6f:24:af:41:8b:46:81:57:62:5a:93:e1:08:
b6:7b:1c:aa:79:3f:c7:0b:69:b0:a8:16:fd:69:3b:99:b4:c3:
74:02:16:9f:51:4b:48:16:9f:13:59:07:37:d1:7b:c7:c6:2b:
b0:4c:7d:d0:69:72:7a:2b:c6:9f:10:60:df:44:76:84:7f:03:
94:0b:e5:dc:e6:97:d4:f2:22:3d:8d:ab:9c:cb:61:1b:25:19:
72:2a:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:52 2026 by rpki-client