Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: AzuyBd/5f657qdwVFFsj8XGBO7mtFO2ybvDWzxDTwDg=
Subject key identifier: 44:C3:98:77:55:30:63:CE:39:58:5A:C0:5C:D4:CF:A0:D4:DB:7B:77
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 019D2961513CC514D77B0688BD5841A64C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:02:16 +0000
Manifest this update: Thu 26 Mar 2026 09:02:16 +0000
Manifest next update: Fri 27 Mar 2026 09:02:16 +0000
Files and hashes: 1: F99ntdp2qRkWyX4GCUSsxJD7WV8.roa (hash: XZkkSfzBXZ21L3XovvCMvlzirbHA8+n/5A9z1OK+IY8=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: X5WUA3ihIhEkt4zZr9VPFbRF9w4v6630eqBod5GzBdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:51:3c:c5:14:d7:7b:06:88:bd:58:41:a6:4c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Mar 26 09:02:16 2026 GMT
Not After : Mar 27 09:02:16 2026 GMT
Subject: CN=44c39877553063ce39585ac05cd4cfa0d4db7b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:b3:81:43:96:78:40:8a:5e:0b:ed:21:e6:
b8:02:35:e7:9c:bd:69:56:17:15:1f:35:29:11:3e:
00:d5:b3:6f:64:d9:8a:8a:d0:00:f3:76:61:d3:b1:
41:3f:85:28:d8:f5:71:4a:e6:08:b8:a1:a4:5f:91:
83:cc:88:6b:f8:e3:fa:f5:52:73:49:21:2b:2f:9d:
3d:21:ee:74:a3:e5:74:1e:62:32:bb:17:02:e5:1e:
72:20:d2:3c:cb:01:e3:9b:f1:74:2d:ab:c9:1d:6a:
1a:aa:d7:d7:4c:f0:6d:01:43:ab:e8:45:5c:25:8b:
ea:0a:be:6a:39:cb:7a:4f:99:00:c6:6c:3e:3f:61:
40:22:f2:48:ea:ac:87:33:68:9a:49:f9:c4:fe:1e:
48:16:36:bf:18:c7:5a:64:10:38:23:ab:9e:07:1d:
81:33:e1:48:e2:02:07:ce:35:31:d4:67:bd:67:e9:
9b:f0:11:61:43:de:02:3f:b0:ea:62:95:75:5c:cc:
0c:de:af:f0:be:27:0c:dd:f0:32:90:99:d2:66:8d:
80:d6:27:f0:07:37:50:3a:9b:78:e9:17:36:2f:51:
68:b6:5f:74:e4:a4:22:d9:b7:3a:7c:d2:69:f3:97:
6f:e1:2d:15:df:00:bf:c7:1f:e2:87:b5:7c:86:8d:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:98:77:55:30:63:CE:39:58:5A:C0:5C:D4:CF:A0:D4:DB:7B:77
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3b:ba:30:82:a3:55:e4:3c:d7:1d:93:ea:73:12:f4:f8:02:
1c:19:1d:b3:06:bd:59:a4:86:bd:e9:45:c3:54:73:d0:bc:bf:
d0:37:c5:a6:20:94:04:ed:15:5e:6f:1d:ea:ae:d3:b5:51:0c:
24:bb:c6:37:c3:e8:fd:05:44:1c:57:de:4f:14:13:28:89:d4:
ea:96:4f:eb:f5:be:ec:10:fd:30:e7:ae:dc:ca:e4:ac:c6:be:
36:d0:a3:d6:53:2d:6c:11:e0:79:1e:c6:18:d9:2f:70:bb:83:
03:eb:fe:92:8d:3a:42:c4:85:0c:88:e3:53:d1:01:22:64:11:
67:6a:89:f8:da:5d:db:8d:19:fa:11:4c:b9:49:eb:97:17:c3:
4e:1a:1b:48:f2:fa:34:48:3b:e9:ba:29:ec:2c:d6:f8:38:ee:
6f:fb:a6:a5:89:eb:14:7f:a9:55:3c:d9:d1:f7:3e:45:33:f9:
7b:0c:ee:6a:da:a8:ef:62:26:b9:37:66:1b:0f:40:37:46:2f:
2b:68:c5:94:81:9e:2c:6e:61:b3:05:00:5e:a5:85:3a:9d:91:
9f:25:4f:4d:2c:6e:73:56:67:ad:31:b2:0a:d4:90:f1:8a:95:
40:4c:09:b7:60:cd:80:57:a3:bf:67:bb:c2:43:0a:7b:46:9c:
29:d4:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:31 2026 by rpki-client