Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: RdEdT3OKsQf/e5hjx/dxvkbdRkThHpCzyo/VRaGouSA=
Subject key identifier: 6A:C1:86:BE:E3:C1:FE:1A:5C:60:77:CC:2B:45:51:D2:31:46:21:DE
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 019D33E341D07A65313EC2F6B03633BFA706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 1520
Signing time: Sat 28 Mar 2026 10:00:24 +0000
Manifest this update: Sat 28 Mar 2026 10:00:24 +0000
Manifest next update: Sun 29 Mar 2026 10:00:24 +0000
Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=)
2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: MmvyPdvUZsT1foIG/DhNDOX93RFqqAPj6zt44MMb4oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:41:d0:7a:65:31:3e:c2:f6:b0:36:33:bf:a7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Mar 28 10:00:24 2026 GMT
Not After : Mar 29 10:00:24 2026 GMT
Subject: CN=6ac186bee3c1fe1a5c6077cc2b4551d2314621de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:d1:39:73:29:f2:78:2a:4c:dd:9b:e9:b5:
78:cc:a2:b2:49:d9:4c:d0:e7:f2:8a:70:85:25:cf:
67:75:0c:fe:52:0e:d5:9d:72:91:48:41:8c:f9:89:
f0:1f:01:d3:ca:2a:50:e3:ea:f0:4b:e9:08:c9:82:
2b:87:9c:38:07:4c:56:20:77:44:b0:41:1e:64:00:
93:cf:7d:ef:bc:2d:9e:29:4c:b7:7f:5e:f0:f9:88:
87:fc:05:f7:3a:0a:ad:0b:95:4a:f8:e6:ff:b0:43:
f7:9b:58:a1:e0:1f:a7:28:ab:93:ef:2d:4f:4d:5c:
52:a1:49:3f:fc:c1:6f:b0:b2:5d:72:98:b5:d1:ce:
eb:34:38:22:28:39:da:c4:eb:54:a7:cb:35:f3:c2:
fd:91:69:99:4d:c0:22:0f:43:10:8e:18:4e:d6:ab:
40:ac:74:3f:b9:2e:28:7c:83:6c:77:8e:be:d7:60:
2c:f5:13:18:d3:c2:79:05:24:c7:d5:7e:94:9b:28:
34:06:a2:c9:54:ae:47:ba:3f:86:0c:5d:c1:ed:1f:
7d:9c:8d:5e:47:17:cf:be:3f:af:ad:05:40:d9:20:
e4:a7:45:44:bd:13:f8:d2:90:40:15:9e:83:52:95:
ff:d3:b8:86:81:e1:22:d3:d2:f3:e3:46:76:bb:42:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:86:BE:E3:C1:FE:1A:5C:60:77:CC:2B:45:51:D2:31:46:21:DE
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5f:99:fa:64:e5:7c:71:61:cb:50:5b:52:44:54:c6:36:3f:
fe:b0:21:f9:ef:5d:9d:ac:cf:76:86:35:80:17:57:c8:9d:e1:
66:8f:20:64:f2:89:ce:d0:93:2e:06:8c:7a:ac:36:ec:9f:5d:
64:3f:55:4a:ad:94:33:32:eb:c5:b6:98:d4:6b:91:ec:34:3a:
b8:5b:68:0e:2b:fc:a9:d1:9b:2d:49:38:54:cb:6c:4d:4a:df:
eb:42:7b:8e:c4:db:14:0a:cb:b8:e5:f2:5e:2d:42:dd:9d:86:
e3:7e:12:ad:85:32:16:3f:4d:22:bc:b6:82:b8:8b:29:70:2b:
34:42:f8:69:8d:87:25:ee:82:f7:08:31:e7:7b:e8:17:34:ad:
f8:55:8a:0d:89:2b:a3:03:a1:4e:68:30:aa:41:88:ca:1c:c6:
49:22:0f:a4:db:4d:14:3f:fa:a4:ab:3d:46:2f:d9:2e:57:88:
ca:97:03:22:79:c0:a0:85:79:e1:c0:7c:e0:41:9d:09:cd:10:
e6:c0:47:cc:00:83:d8:ef:b3:a3:83:22:15:0c:86:b0:94:98:
db:14:40:4a:fa:7c:3c:de:80:be:fd:1e:09:7b:d3:02:d0:74:
51:ed:f8:c5:28:fb:c7:d5:6e:58:1c:dc:26:d2:c0:9d:08:6f:
d0:d0:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:25 2026 by rpki-client