Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: Timzc9VcrGSt2N43S3zlOyIqskIf3m/c8pF2rF7/iPc=
Subject key identifier: 76:7A:02:BD:64:9A:36:39:63:27:4B:EF:EF:BB:CE:93:E3:59:1A:4B
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019D39779E614410E2792E936D773984CAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 07BA
Signing time: Sun 29 Mar 2026 12:00:33 +0000
Manifest this update: Sun 29 Mar 2026 12:00:33 +0000
Manifest next update: Mon 30 Mar 2026 12:00:33 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: kd0zaFj4XnPnmr1ZImaWyYa3ThkjirP3qSt2woyZ0uo=)
2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:9e:61:44:10:e2:79:2e:93:6d:77:39:84:ca:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Mar 29 12:00:33 2026 GMT
Not After : Mar 30 12:00:33 2026 GMT
Subject: CN=767a02bd649a363963274befefbbce93e3591a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:5b:c1:85:88:04:8d:cd:e7:d2:af:3d:ba:
90:04:1f:f0:82:5b:d5:9a:aa:c3:c1:d5:d6:d4:c7:
11:39:5c:b5:6e:a9:37:48:64:3f:a5:3f:78:81:51:
61:59:81:71:e3:51:0e:14:0f:33:15:f0:45:37:94:
6a:c0:00:2f:b0:38:73:70:bf:01:e8:0e:ab:61:75:
0d:7b:67:5b:33:ce:7e:fa:95:f4:e6:56:bd:f7:b2:
d8:1b:eb:a6:df:28:5c:b8:19:5b:48:2d:85:b1:b4:
ca:b6:90:c4:f1:f1:4e:1a:e5:af:d2:bc:d3:48:44:
5f:10:a6:75:9b:d4:70:ba:84:b7:b5:c2:7c:f6:4d:
0a:d9:11:c3:20:a6:f0:ed:6d:ed:77:4d:ec:fa:f4:
6c:60:f2:31:7d:86:35:40:e9:67:3e:fb:4c:94:dd:
d9:48:5a:89:76:d7:37:a8:bc:b7:72:43:59:fd:f6:
95:10:84:04:23:ac:0a:1e:b1:25:98:f3:cd:e7:20:
14:c5:4c:7a:ba:e6:44:ca:dc:92:a4:1c:8a:ba:d0:
f5:83:d0:06:51:1e:ba:17:85:71:70:1e:b5:7c:32:
ed:9f:12:32:02:f6:95:af:44:6e:6d:08:81:fc:79:
92:fc:6f:e3:3a:fc:4d:72:7d:97:54:9a:2a:50:c9:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:02:BD:64:9A:36:39:63:27:4B:EF:EF:BB:CE:93:E3:59:1A:4B
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:78:cd:f8:e9:3b:c1:ed:ee:fc:b3:1a:8c:7a:7d:84:08:8b:
5e:f8:bb:b2:25:10:73:d0:3d:6f:1c:f7:4a:e7:2d:a1:fb:77:
00:ec:6e:36:f1:ef:47:a0:32:0b:a5:42:3e:a5:c8:66:3d:dc:
61:c0:44:6c:82:1e:85:14:de:f6:1b:07:0d:a1:f9:af:c3:d3:
61:2c:2a:63:c9:c1:f5:37:90:9c:eb:5e:3d:56:76:41:a3:32:
c3:11:9c:51:91:e3:8a:ef:93:d6:7d:45:7e:10:84:54:25:aa:
d6:bd:35:5e:4f:2d:53:a3:d1:d2:89:40:c4:a1:05:f2:a4:22:
6c:6a:95:16:18:d2:f8:e5:5d:fe:27:f8:e9:5c:33:ad:2c:74:
7b:6d:f7:b3:f2:31:f4:45:75:e5:af:2c:3a:60:f7:9d:d0:2f:
30:78:a8:79:2e:fa:2f:a2:cb:00:b4:dc:2e:32:7a:7e:b2:15:
c9:5a:60:b4:a2:35:d1:49:b9:e2:ba:eb:19:ac:dc:8a:90:d0:
a9:1c:92:e9:61:63:e9:41:b0:e1:ef:c4:85:2b:22:08:f6:03:
58:d3:04:a3:73:17:18:13:6b:d3:40:66:44:22:38:da:88:b4:
68:6f:f5:9d:18:6c:60:73:19:d0:2f:4e:9b:24:6a:63:dc:33:
bc:27:9b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:50 2026 by rpki-client