Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: rTxUF6wfBcZhlIom2AswZbwwoJHPVJk5dpmJSl6HlSY=
Subject key identifier: 68:A7:63:07:5E:5D:59:24:A4:F9:C0:9B:4F:98:99:7F:F4:6A:B5:B5
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019E30A8F3B8EA885C7CED80FCC2A71CBF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 083A
Signing time: Sat 16 May 2026 12:00:39 +0000
Manifest this update: Sat 16 May 2026 12:00:39 +0000
Manifest next update: Sun 17 May 2026 12:00:39 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: RGHwG7oIZU8LWyWS1OKRyOtcwFXeDqjbekr9hlRm+BI=)
2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a8:f3:b8:ea:88:5c:7c:ed:80:fc:c2:a7:1c:bf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: May 16 12:00:39 2026 GMT
Not After : May 17 12:00:39 2026 GMT
Subject: CN=68a763075e5d5924a4f9c09b4f98997ff46ab5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:f4:e1:5f:55:f3:44:ed:1a:82:15:80:7a:
50:02:b5:aa:99:46:6d:79:1b:85:47:09:ff:2f:47:
08:55:3b:f7:28:d1:ab:f1:8c:b7:f7:54:7d:c8:7f:
7d:8d:a8:33:08:fd:07:43:26:af:d1:da:d6:59:2f:
6b:cb:98:1b:b5:7a:c4:77:03:b8:0d:c7:79:76:0d:
09:2d:8f:16:16:97:d4:a7:c2:08:be:f9:5c:96:f8:
7a:3c:80:18:b7:18:ab:86:e2:cb:22:8a:af:81:45:
f6:9c:d7:3b:8c:9a:97:36:9f:36:50:0e:96:ea:af:
86:fe:3a:33:51:63:b7:d5:fc:16:2b:c3:97:2e:00:
5b:13:c8:d2:5c:14:7b:41:35:ac:57:45:ce:32:94:
4b:a4:a2:79:c4:10:f3:b3:8a:f7:d3:5f:1d:7a:cf:
78:4f:27:78:51:5a:9b:f4:08:fe:37:02:67:ae:7e:
0f:c6:bb:c0:22:05:37:e0:d6:fa:ad:7c:56:45:ab:
17:e3:4a:88:11:43:aa:45:ca:24:e2:b1:2e:39:59:
fe:9c:f6:9c:5d:a5:70:e4:c2:f5:e3:45:68:e7:a0:
35:d1:7a:4e:e5:cd:86:6a:1a:c0:40:60:bf:5c:79:
40:89:04:c8:f3:c0:0c:7d:82:d4:21:8b:c1:29:6c:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:63:07:5E:5D:59:24:A4:F9:C0:9B:4F:98:99:7F:F4:6A:B5:B5
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ea:5b:e5:52:e1:b3:d7:a0:84:da:72:47:ad:9c:40:c3:f0:
c0:58:a3:b9:bb:f0:9c:b2:7e:19:da:6c:a7:24:34:47:20:36:
c0:08:29:96:2f:6b:96:8b:73:a6:0a:df:b7:ad:43:f0:3f:8a:
99:ac:a0:5b:c8:04:d1:c6:89:a1:39:3b:3e:cc:e6:57:1a:35:
a3:fa:fa:40:59:98:61:62:f6:ad:67:b9:8c:e4:7c:8e:24:51:
a5:3d:65:09:4c:7d:c6:54:87:02:49:31:56:4b:29:89:93:66:
56:f9:bb:a1:71:ae:4e:38:0a:bf:56:4d:b2:38:75:0f:44:8c:
a7:e7:a1:04:21:53:da:b5:5e:10:51:02:b8:c5:4b:60:52:8f:
08:fb:5c:b1:63:5c:f4:88:bd:72:de:af:d2:70:6d:85:32:c4:
79:dd:7c:c5:da:b4:2c:a3:f0:cf:d5:02:51:b6:ee:40:6e:e6:
7f:5e:67:f3:1e:84:17:19:df:b8:e2:88:f2:2c:29:4e:80:85:
61:d4:ad:11:04:2f:cb:7d:7f:0f:fc:7b:ac:13:0c:42:c8:80:
dd:fd:33:f8:c3:c9:9a:00:72:e2:6c:46:0b:3a:01:e6:b7:50:
47:4f:69:a4:3b:7a:53:e1:86:cb:0a:33:80:16:46:7d:8c:21:
4f:38:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:46 2026 by rpki-client