Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
File: CmU5pR-0bmZf9wiC20-YStNN6SQ.mft (raw, json)
Hash identifier: TZBN4D92ljr0sWeMw7yukmfcLOrsLnzJ3Bl37rWexS4=
Subject key identifier: AA:34:8E:20:A4:A4:12:0C:53:A9:1C:4B:00:5F:A1:14:F7:92:CD:99
Authority key identifier: 0A:65:39:A5:1F:B4:6E:66:5F:F7:08:82:DB:4F:98:4A:D3:4D:E9:24
Certificate issuer: /CN=0a6539a51fb46e665ff70882db4f984ad34de924
Certificate serial: 01A040BBFC5A2104649A761FF0676FBB815B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
Manifest number: 018B
Signing time: Thu 27 Aug 2026 01:00:56 +0000
Manifest this update: Thu 27 Aug 2026 01:00:56 +0000
Manifest next update: Fri 28 Aug 2026 01:00:56 +0000
Files and hashes: 1: CmU5pR-0bmZf9wiC20-YStNN6SQ.crl (hash: D9770+cUW7mtgSiyJIY5u+EaJFGnpXMU9VknUhUhLLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:fc:5a:21:04:64:9a:76:1f:f0:67:6f:bb:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a6539a51fb46e665ff70882db4f984ad34de924
Validity
Not Before: Aug 27 01:00:56 2026 GMT
Not After : Aug 28 01:00:56 2026 GMT
Subject: CN=aa348e20a4a4120c53a91c4b005fa114f792cd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:05:41:f5:1f:b8:05:cd:51:44:13:15:87:
80:d5:82:a1:b2:09:f3:ab:7d:35:fd:72:bd:6c:b5:
02:70:88:02:df:e9:7b:97:a6:16:00:34:89:c6:e2:
d8:77:80:0a:52:aa:4d:0f:3c:88:af:ac:09:ec:97:
ad:2a:56:36:e6:29:d0:47:82:1c:ee:87:0d:0d:2b:
10:c9:93:fb:b7:bf:87:90:9d:f0:5c:47:21:b7:01:
b2:bd:cb:46:b8:be:c4:cf:53:95:6e:65:db:0e:2d:
48:f8:a3:e5:24:b3:6d:d5:60:3c:b2:cf:c2:c9:ca:
92:01:02:30:d3:a8:7d:df:a1:54:b7:0b:ba:33:9c:
74:e0:7b:e7:ef:6a:71:b7:b8:49:bf:52:37:e4:36:
cd:60:c5:e6:36:b3:65:b7:55:15:3d:28:53:6c:a4:
b3:5e:78:37:94:9a:53:31:29:a5:65:42:26:ce:36:
9c:e9:ed:40:c8:17:69:b7:ec:88:d6:28:9e:9b:0e:
62:61:e5:4d:36:86:c1:97:5c:09:b2:42:e2:8d:df:
44:fe:75:c0:64:f5:d8:16:1f:cf:c8:7c:92:50:04:
b6:75:51:17:aa:a7:e6:90:90:a8:2b:29:f0:4a:47:
ab:ce:e3:cb:61:9e:de:5b:cc:69:85:fe:4e:b1:01:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:8E:20:A4:A4:12:0C:53:A9:1C:4B:00:5F:A1:14:F7:92:CD:99
X509v3 Authority Key Identifier:
keyid:0A:65:39:A5:1F:B4:6E:66:5F:F7:08:82:DB:4F:98:4A:D3:4D:E9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmU5pR-0bmZf9wiC20-YStNN6SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6e0f63-7aa7-4d5d-809a-3932dd3a0ac5/1/CmU5pR-0bmZf9wiC20-YStNN6SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fc:24:2f:78:fd:4b:88:12:f3:f1:af:32:e7:98:cc:a5:53:
5d:18:9f:84:70:6f:3f:14:82:97:35:f6:96:29:d5:10:25:52:
55:9e:50:35:7d:9f:9b:2b:e3:f2:fe:91:22:41:bf:81:0b:16:
7b:ba:9d:3d:f2:c0:fa:9c:52:fd:ed:f0:9e:de:5e:7d:10:28:
62:f5:d6:d8:68:01:56:19:af:35:a0:94:55:ed:a4:2f:65:27:
7f:bf:2a:93:ef:b4:0e:dc:20:ca:97:0d:c2:45:27:50:fc:5e:
ba:56:6e:31:00:47:c8:0d:54:6a:42:9f:ef:30:94:ce:7e:af:
9e:14:cf:e9:2c:b4:14:4a:a2:b3:97:7b:87:47:fc:0c:b3:36:
65:41:08:d0:5b:8b:dc:82:b4:7f:f9:0a:ff:55:da:86:26:7c:
49:c7:04:9c:1a:c9:e2:e8:c8:93:f8:77:58:b4:65:0e:52:e7:
3e:cd:3a:e7:ea:d2:9c:b8:3e:c5:db:8b:01:d9:22:84:f9:63:
54:d8:18:ae:2f:d1:01:90:bc:37:9b:77:ef:91:20:f6:5a:84:
2f:fd:b2:39:ad:35:1f:1b:48:f6:25:3f:71:e0:ef:55:5e:48:
a2:ee:da:2a:d1:17:57:c4:9e:ef:fa:21:9a:c6:06:12:cf:83:
56:62:b0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAu/xaIQRkmnYf8Gdvu4FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNjUzOWE1MWZiNDZlNjY1ZmY3MDg4MmRiNGY5ODRhZDM0
ZGU5MjQwHhcNMjYwODI3MDEwMDU2WhcNMjYwODI4MDEwMDU2WjAzMTEwLwYDVQQD
EyhhYTM0OGUyMGE0YTQxMjBjNTNhOTFjNGIwMDVmYTExNGY3OTJjZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFMFQfUfuAXNUUQTFYeA1YKhsgnz
q301/XK9bLUCcIgC3+l7l6YWADSJxuLYd4AKUqpNDzyIr6wJ7JetKlY25inQR4Ic
7ocNDSsQyZP7t7+HkJ3wXEchtwGyvctGuL7Ez1OVbmXbDi1I+KPlJLNt1WA8ss/C
ycqSAQIw06h936FUtwu6M5x04Hvn72pxt7hJv1I35DbNYMXmNrNlt1UVPShTbKSz
Xng3lJpTMSmlZUImzjac6e1AyBdpt+yI1iiemw5iYeVNNobBl1wJskLijd9E/nXA
ZPXYFh/PyHySUAS2dVEXqqfmkJCoKynwSkerzuPLYZ7eW8xphf5OsQFJEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo0jiCkpBIMU6kcSwBfoRT3ks2ZMB8GA1UdIwQY
MBaAFAplOaUftG5mX/cIgttPmErTTekkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ21VNXBSLTBibVpmOXdpQzIwLVlTdE5ONlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZTBmNjMtN2FhNy00ZDVkLTgwOWEt
MzkzMmRkM2EwYWM1LzEvQ21VNXBSLTBibVpmOXdpQzIwLVlTdE5ONlNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82ZTBmNjMtN2FhNy00ZDVkLTgwOWEtMzkzMmRkM2EwYWM1
LzEvQ21VNXBSLTBibVpmOXdpQzIwLVlTdE5ONlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvwkL3j9
S4gS8/GvMueYzKVTXRifhHBvPxSClzX2linVECVSVZ5QNX2fmyvj8v6RIkG/gQsW
e7qdPfLA+pxS/e3wnt5efRAoYvXW2GgBVhmvNaCUVe2kL2Unf78qk++0DtwgypcN
wkUnUPxeulZuMQBHyA1UakKf7zCUzn6vnhTP6Sy0FEqis5d7h0f8DLM2ZUEI0FuL
3IK0f/kK/1XahiZ8SccEnBrJ4ujIk/h3WLRlDlLnPs065+rSnLg+xduLAdkihPlj
VNgYri/RAZC8N5t375Eg9lqEL/2yOa01HxtI9iU/ceDvVV5Iou7aKtEXV8Se7/oh
msYGEs+DVmKw0w==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:21 2026 by rpki-client