Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: n9b7+++FnGxUh1UTxmhSvgA5RHcFdIJqTjW4HSSIEeU=
Subject key identifier: 05:9C:87:D5:2C:39:CA:8B:FB:F0:83:D9:20:EB:3E:11:B3:9B:A9:B9
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 019D2C97E1CD39ED24DC51A8867C92119840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0683
Signing time: Fri 27 Mar 2026 00:00:44 +0000
Manifest this update: Fri 27 Mar 2026 00:00:44 +0000
Manifest next update: Sat 28 Mar 2026 00:00:44 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: F122GKlxSRyriygGHmdE5aZYLoB8VbBjUS0cXd/UEy8=)
2: MWM6QEDr90E-Gb18CyVaMUI1SUg.roa (hash: piGRt6COIMkm6UJI/Tww3fuE2c94SS0LGgDLgxHDNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:e1:cd:39:ed:24:dc:51:a8:86:7c:92:11:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Mar 27 00:00:44 2026 GMT
Not After : Mar 28 00:00:44 2026 GMT
Subject: CN=059c87d52c39ca8bfbf083d920eb3e11b39ba9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:d1:ee:52:61:dc:d7:b2:bb:1b:c1:d4:d0:
7e:2f:ca:12:6c:e6:8b:92:9a:19:dd:c6:62:81:7e:
9f:bd:bc:f4:6c:94:5a:33:fa:19:f4:9c:54:28:3d:
72:73:03:18:b4:9c:4e:6c:d9:31:30:d8:f7:f3:6a:
db:ae:05:ae:d2:f7:2b:1c:3c:c7:1a:f4:9e:99:6c:
8e:8e:e5:ed:12:93:2c:02:9a:fe:82:67:05:9d:0c:
75:e9:b2:57:2a:f8:fc:97:df:d7:8b:a6:f4:86:16:
f6:16:c4:c3:62:22:c8:e4:26:14:e7:61:e9:94:b3:
ef:1c:38:18:d5:17:74:18:ec:4d:73:ee:05:58:25:
58:fe:10:c0:bb:a5:e1:9d:dc:ac:c6:0f:df:e8:b1:
9c:f9:92:3d:03:52:36:56:99:5e:a6:97:55:0d:a7:
f8:f6:67:54:a4:91:e1:b6:f4:c5:3a:f9:86:8f:b4:
71:be:9c:a1:3f:85:fd:aa:1f:6b:14:1e:38:ac:59:
43:67:ca:0d:8e:38:35:2f:e6:2d:3a:17:e3:17:f0:
de:67:ca:9f:d5:df:a7:ec:80:b8:c3:d9:ef:70:98:
17:e8:15:58:6f:5d:25:18:3d:bd:e0:95:c5:8b:8a:
cc:1f:75:37:9a:7c:54:12:fa:90:d6:79:ff:d7:78:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:87:D5:2C:39:CA:8B:FB:F0:83:D9:20:EB:3E:11:B3:9B:A9:B9
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:85:14:00:a0:6a:4e:37:ce:69:13:4c:1a:a4:f5:83:6a:76:
96:18:8a:4a:ce:d4:8c:69:f3:de:90:81:7a:d5:dd:82:04:b5:
79:74:97:4b:38:03:09:d0:3d:c7:62:54:4b:a2:88:d4:2a:b4:
3a:e9:c7:80:e0:15:c6:d9:ea:94:dd:0e:f6:97:2b:41:c7:0d:
76:39:75:14:5c:9b:dc:2b:43:02:a1:cc:40:14:5a:79:8b:e5:
dd:ca:65:ca:1f:50:47:c7:f9:8f:f2:3e:18:98:e7:0a:fd:96:
f4:a2:75:5c:f0:0d:1e:a4:33:92:81:97:79:b3:9a:34:d1:c2:
11:5d:8a:34:3a:d1:76:8e:74:8b:c2:06:ba:9a:a3:28:58:76:
26:4f:7c:d4:2b:9d:69:94:ba:fa:fd:83:86:ac:7d:aa:9b:13:
ae:0a:38:b5:3b:8c:0c:20:34:50:69:fb:8a:f9:34:e3:4e:3e:
56:6f:b7:bf:ed:7f:24:8a:0a:82:39:01:7e:ed:4e:b0:77:ce:
b6:28:3a:8d:ee:d8:6c:9f:d9:3c:2a:95:ba:e5:70:f8:b0:3f:
ff:f1:2d:bf:14:bb:d2:eb:a9:46:5d:26:4e:c4:2c:71:5f:7e:
13:75:c3:0b:b8:ec:d2:39:85:b1:92:e3:59:b4:87:43:c9:e3:
cb:85:f4:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sl+HNOe0k3FGohnySEZhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0
OThiNjkwHhcNMjYwMzI3MDAwMDQ0WhcNMjYwMzI4MDAwMDQ0WjAzMTEwLwYDVQQD
EygwNTljODdkNTJjMzljYThiZmJmMDgzZDkyMGViM2UxMWIzOWJhOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA/R7lJh3NeyuxvB1NB+L8oSbOaL
kpoZ3cZigX6fvbz0bJRaM/oZ9JxUKD1ycwMYtJxObNkxMNj382rbrgWu0vcrHDzH
GvSemWyOjuXtEpMsApr+gmcFnQx16bJXKvj8l9/Xi6b0hhb2FsTDYiLI5CYU52Hp
lLPvHDgY1Rd0GOxNc+4FWCVY/hDAu6Xhndysxg/f6LGc+ZI9A1I2VpleppdVDaf4
9mdUpJHhtvTFOvmGj7RxvpyhP4X9qh9rFB44rFlDZ8oNjjg1L+YtOhfjF/DeZ8qf
1d+n7IC4w9nvcJgX6BVYb10lGD294JXFi4rMH3U3mnxUEvqQ1nn/13iihQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWch9UsOcqL+/CD2SDrPhGzm6m5MB8GA1UdIwQY
MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt
YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0
LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoUUAKBq
TjfOaRNMGqT1g2p2lhiKSs7UjGnz3pCBetXdggS1eXSXSzgDCdA9x2JUS6KI1Cq0
OunHgOAVxtnqlN0O9pcrQccNdjl1FFyb3CtDAqHMQBRaeYvl3cplyh9QR8f5j/I+
GJjnCv2W9KJ1XPANHqQzkoGXebOaNNHCEV2KNDrRdo50i8IGupqjKFh2Jk981Cud
aZS6+v2Dhqx9qpsTrgo4tTuMDCA0UGn7ivk0404+Vm+3v+1/JIoKgjkBfu1OsHfO
tig6je7YbJ/ZPCqVuuVw+LA///EtvxS70uupRl0mTsQscV9+E3XDC7js0jmFsZLj
WbSHQ8njy4X0mw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:15:30 2026 by rpki-client