Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: eJ9tmCaCCkqAE7lOzD04Q0IeuNgcT6FUFI4vauwmz2o=
Subject key identifier: 3E:0B:15:5E:BD:68:91:EF:0F:98:F2:DB:39:24:2C:97:69:2D:47:8F
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 01A0CD7F360BB6AC423DB4144A103C6C659B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0864
Signing time: Wed 23 Sep 2026 09:01:00 +0000
Manifest this update: Wed 23 Sep 2026 09:01:00 +0000
Manifest next update: Thu 24 Sep 2026 09:01:00 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: YERQdRuSAE0RZnMu4dJPsGuJq734KpSXNj1pl0KcIKQ=)
2: MWM6QEDr90E-Gb18CyVaMUI1SUg.roa (hash: piGRt6COIMkm6UJI/Tww3fuE2c94SS0LGgDLgxHDNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:36:0b:b6:ac:42:3d:b4:14:4a:10:3c:6c:65:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Sep 23 09:01:00 2026 GMT
Not After : Sep 24 09:01:00 2026 GMT
Subject: CN=3e0b155ebd6891ef0f98f2db39242c97692d478f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:de:a6:be:cc:4d:e1:b5:25:19:ea:1a:20:
8c:66:fe:11:44:77:37:57:c7:71:12:db:ed:f5:5a:
12:a3:5b:25:93:c1:db:47:c0:f8:c9:3c:17:9a:f8:
98:08:05:96:c2:5d:df:bc:f0:1e:7e:0a:85:c2:35:
9d:11:8f:21:bf:49:8d:e6:d6:f9:2f:60:9c:87:76:
4f:0a:68:bc:ad:48:fa:c5:73:86:b2:38:ed:9f:32:
a0:d4:b5:77:b5:1f:29:c3:d2:8c:8e:5b:9d:bd:53:
a3:57:ed:d1:1f:ee:d3:1f:0d:e8:24:0d:75:c6:d3:
61:39:b0:d6:12:7f:93:91:5b:12:df:e4:91:b2:16:
71:28:a1:0a:bf:62:4b:82:a6:c3:68:a5:df:90:3f:
58:aa:7a:51:39:50:17:92:72:67:0e:28:3d:f5:86:
78:29:c9:48:10:e6:b0:17:0b:0d:fe:fa:a4:76:ca:
70:8c:2b:95:d1:fa:17:da:37:94:cc:ca:89:f9:71:
fe:dd:c9:03:eb:d8:31:3b:69:3e:f8:df:be:2a:65:
cf:13:0f:57:64:6f:66:51:8f:82:f1:be:da:1d:19:
6a:73:8e:b1:50:df:e6:48:8c:5e:07:b7:2b:94:be:
3a:42:b3:00:7a:44:a7:9d:b9:0e:32:37:69:c8:89:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0B:15:5E:BD:68:91:EF:0F:98:F2:DB:39:24:2C:97:69:2D:47:8F
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0c:fb:f4:88:15:49:f1:a9:f5:c6:76:c8:0e:ea:da:db:b3:
5d:f7:6d:6e:3f:7d:d8:d4:1c:8e:8d:ff:1e:57:ea:80:c2:3e:
a0:4f:eb:f4:35:7f:fc:25:c9:9f:45:e9:d4:7d:ea:36:90:6e:
61:b9:6d:20:47:c7:f0:3c:92:f7:fd:24:cd:89:cb:e6:16:50:
d0:58:77:2c:e7:28:84:75:db:de:56:44:c6:b5:7b:61:68:c6:
8c:b5:88:48:1f:00:dc:d1:1f:c2:76:db:e9:bf:39:b7:e3:80:
74:da:16:12:5c:49:1d:2e:87:96:1e:23:12:93:7b:ca:f5:08:
75:ff:cb:9f:95:55:37:bc:90:1d:91:92:74:de:0e:a7:2c:d1:
f3:f9:cd:af:ca:b4:22:d7:2b:0b:31:83:ab:c0:25:6f:c7:ee:
9b:2d:0e:9d:b4:85:12:93:d0:e9:d8:e7:05:21:c1:25:ef:1a:
8b:3f:95:93:b5:6b:ab:41:11:fb:43:b6:66:ac:28:bb:9c:3c:
91:59:66:1d:f6:27:29:ff:12:94:3d:21:92:b7:a3:ca:14:dd:
1f:f9:83:bb:03:86:1d:11:b4:46:b6:eb:87:c1:b5:22:06:fd:
53:4a:a2:6a:b7:65:c1:09:e8:e3:ce:fb:cb:64:6c:d3:aa:76:
bd:2c:04:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfzYLtqxCPbQUShA8bGWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0
OThiNjkwHhcNMjYwOTIzMDkwMTAwWhcNMjYwOTI0MDkwMTAwWjAzMTEwLwYDVQQD
EygzZTBiMTU1ZWJkNjg5MWVmMGY5OGYyZGIzOTI0MmM5NzY5MmQ0NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquLepr7MTeG1JRnqGiCMZv4RRHc3
V8dxEtvt9VoSo1slk8HbR8D4yTwXmviYCAWWwl3fvPAefgqFwjWdEY8hv0mN5tb5
L2Cch3ZPCmi8rUj6xXOGsjjtnzKg1LV3tR8pw9KMjludvVOjV+3RH+7THw3oJA11
xtNhObDWEn+TkVsS3+SRshZxKKEKv2JLgqbDaKXfkD9YqnpROVAXknJnDig99YZ4
KclIEOawFwsN/vqkdspwjCuV0foX2jeUzMqJ+XH+3ckD69gxO2k++N++KmXPEw9X
ZG9mUY+C8b7aHRlqc46xUN/mSIxeB7crlL46QrMAekSnnbkOMjdpyImXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4LFV69aJHvD5jy2zkkLJdpLUePMB8GA1UdIwQY
MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt
YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0
LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwz79IgV
SfGp9cZ2yA7q2tuzXfdtbj992NQcjo3/HlfqgMI+oE/r9DV//CXJn0Xp1H3qNpBu
YbltIEfH8DyS9/0kzYnL5hZQ0Fh3LOcohHXb3lZExrV7YWjGjLWISB8A3NEfwnbb
6b85t+OAdNoWElxJHS6Hlh4jEpN7yvUIdf/Ln5VVN7yQHZGSdN4OpyzR8/nNr8q0
ItcrCzGDq8Alb8fumy0OnbSFEpPQ6djnBSHBJe8aiz+Vk7Vrq0ER+0O2Zqwou5w8
kVlmHfYnKf8SlD0hkrejyhTdH/mDuwOGHRG0Rrbrh8G1Igb9U0qiardlwQno4877
y2Rs06p2vSwE5w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:29 2026 by rpki-client