Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft
File: _cmkuOXbmY8RgGzH-d-PpZeZOMs.mft (raw, json)
Hash identifier: TCTWMAYxHJZQ6pXKYW6NcuzOWOOmUEUkobHfzVzg3A0=
Subject key identifier: EA:5C:52:F5:ED:41:6F:62:BE:69:21:EB:FA:20:F3:BD:3D:A8:4A:B8
Authority key identifier: FD:C9:A4:B8:E5:DB:99:8F:11:80:6C:C7:F9:DF:8F:A5:97:99:38:CB
Certificate issuer: /CN=fdc9a4b8e5db998f11806cc7f9df8fa5979938cb
Certificate serial: 019D333E5F1F89A8F3823347587F2859E19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft
Manifest number: D4
Signing time: Sat 28 Mar 2026 07:00:18 +0000
Manifest this update: Sat 28 Mar 2026 07:00:18 +0000
Manifest next update: Sun 29 Mar 2026 07:00:18 +0000
Files and hashes: 1: _cmkuOXbmY8RgGzH-d-PpZeZOMs.crl (hash: BT3El5Kjh23UGNVvvPozqscVtyidqmFW77ka3aecHHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:5f:1f:89:a8:f3:82:33:47:58:7f:28:59:e1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc9a4b8e5db998f11806cc7f9df8fa5979938cb
Validity
Not Before: Mar 28 07:00:18 2026 GMT
Not After : Mar 29 07:00:18 2026 GMT
Subject: CN=ea5c52f5ed416f62be6921ebfa20f3bd3da84ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:23:b8:23:02:52:4f:7a:cc:ff:9e:5d:4c:
6c:68:08:51:08:0d:e6:9f:8f:42:b9:6f:77:fb:bf:
a3:a0:7c:b9:31:01:e0:09:76:4c:6c:a3:69:cf:03:
16:23:53:8a:41:df:01:9f:f9:f3:b5:3a:26:a5:3e:
fd:4c:3a:c8:78:df:e2:28:1e:d1:8a:af:88:8d:7f:
74:7c:97:85:71:f7:10:60:f4:1c:ff:bd:85:d0:d9:
ea:5d:ac:50:74:73:93:b0:57:91:10:ff:6e:9f:bd:
bb:aa:27:d0:c9:3c:07:c6:01:82:5f:68:57:a7:b5:
70:5e:c7:99:77:5e:94:c0:7b:30:c1:e5:cd:e6:68:
09:b9:94:36:bb:fd:c2:10:2c:02:84:5a:06:fa:3c:
60:d6:7a:bb:7e:92:bf:bc:1f:d9:40:1d:9a:84:95:
06:50:b8:44:ec:00:57:74:4c:4b:6d:3f:08:e8:c6:
38:26:b4:4f:3c:2d:22:63:5c:04:c1:9b:7b:81:6e:
63:ca:ec:ff:5a:34:00:1b:b3:96:d0:cf:5c:9a:b0:
cc:80:12:49:75:f9:56:07:20:80:f5:73:1b:52:f8:
14:e9:0a:ee:e9:a8:20:0f:15:45:b3:73:00:59:4f:
38:98:0b:a1:64:96:37:cf:ec:9a:14:bf:4a:46:ad:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:52:F5:ED:41:6F:62:BE:69:21:EB:FA:20:F3:BD:3D:A8:4A:B8
X509v3 Authority Key Identifier:
keyid:FD:C9:A4:B8:E5:DB:99:8F:11:80:6C:C7:F9:DF:8F:A5:97:99:38:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0f:01:31:f1:c7:50:51:06:5d:fb:06:4e:a8:fd:27:ae:25:
b2:2b:6c:34:37:c7:29:75:5f:c7:eb:68:b7:12:b1:4c:b3:91:
33:91:0e:98:dd:53:36:9a:63:3f:f6:2b:00:61:8a:07:9d:ab:
27:5b:1a:27:f3:c6:1d:f1:d5:fc:aa:8e:2e:c0:16:56:17:51:
b0:ff:03:bd:79:08:ef:9a:f2:88:b1:86:7d:ac:91:1e:66:7c:
09:1e:a9:76:24:80:14:ab:3f:8e:23:5b:6e:f7:c1:e4:ae:53:
65:58:d9:fa:62:f6:6d:63:ca:c6:ba:23:9c:1c:d5:6e:86:4a:
fe:a7:88:4b:cd:0f:35:ab:8e:be:c9:a0:6c:9e:ce:77:52:ca:
31:41:f1:b1:79:e7:22:87:02:26:e3:49:c9:09:ff:82:8c:54:
b9:91:0d:2e:be:dc:9a:85:ea:12:5f:c0:e1:6f:02:db:30:31:
6b:64:e1:95:35:cc:5c:9f:f6:79:59:27:4d:9f:4d:fc:62:fe:
6f:63:19:f3:44:aa:6d:d8:33:67:81:01:c8:ea:ad:d6:69:1d:
13:0e:3e:61:a5:60:82:8c:c7:fe:5f:47:22:24:dc:55:6e:d5:
85:fc:f1:27:31:27:85:60:7d:d7:54:8f:4a:6f:5f:cc:4a:5f:
ae:8f:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:23 2026 by rpki-client