Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: Ib93U19RGx7jgul8WsIySysfgy2AI4u5FzOqStl2YjM=
Subject key identifier: F0:02:97:4F:11:D3:BC:95:7E:B3:19:89:05:F9:E3:7B:4A:6A:32:13
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019CE4B66086509FE7B0DC381F20ED4D5C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0B5D
Signing time: Fri 13 Mar 2026 01:01:23 +0000
Manifest this update: Fri 13 Mar 2026 01:01:23 +0000
Manifest next update: Sat 14 Mar 2026 01:01:23 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: Yq9leQLyLyxMiWwQQwZTPRf+fKhr/gy9nLGNDd/mJAY=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:60:86:50:9f:e7:b0:dc:38:1f:20:ed:4d:5c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Mar 13 01:01:23 2026 GMT
Not After : Mar 14 01:01:23 2026 GMT
Subject: CN=f002974f11d3bc957eb3198905f9e37b4a6a3213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:9b:cf:6a:27:e2:7e:0a:57:2e:c6:ef:67:
8b:2e:03:1f:db:b8:7c:86:18:8d:77:31:22:c1:2d:
8c:4e:20:14:bb:79:76:d3:1a:02:2c:76:68:a7:c0:
a2:6d:7f:d6:81:78:da:92:21:26:ab:f7:d5:f9:df:
4c:4c:74:16:2b:a1:2f:96:07:d2:c2:ec:2f:38:71:
5a:cc:47:37:ab:02:3a:10:f6:45:76:40:b3:10:37:
3d:9e:f3:0f:c5:aa:eb:52:bd:9b:e9:89:ac:49:6a:
b9:29:8d:b9:51:9a:42:17:01:01:45:53:0b:37:9d:
cc:cb:41:48:81:e3:da:c9:22:73:7c:4b:66:6d:83:
40:cf:25:bc:88:27:58:a4:a1:ea:f5:5e:ff:ac:9b:
0b:5a:b5:ac:3c:22:e5:f0:53:af:e2:32:8e:9b:15:
e5:f1:fe:8b:70:d3:c3:ef:08:1d:cf:98:57:b0:38:
f5:6a:af:31:d0:76:46:8f:ce:21:f3:46:88:4b:29:
71:7e:3c:ec:f5:c3:a6:9f:b0:b0:9e:22:3b:00:a9:
84:f4:33:a3:e0:46:34:aa:40:32:22:14:2b:3e:9e:
80:6a:c7:5d:ca:15:c8:13:f4:85:8c:54:78:38:ab:
05:74:1b:a8:48:71:52:cb:ef:b9:ea:a7:00:8a:89:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:97:4F:11:D3:BC:95:7E:B3:19:89:05:F9:E3:7B:4A:6A:32:13
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ed:ba:c7:16:48:a2:17:44:d2:8f:20:7f:a1:8a:4c:74:0a:
ab:f6:1f:57:87:f4:bc:8a:70:07:2d:5a:de:41:be:2e:48:da:
23:81:3d:85:11:5f:a7:2f:83:bb:57:e8:0b:6d:ff:65:fb:8a:
cf:cd:14:4b:70:1f:99:f9:f4:0e:1f:17:3c:a9:71:86:3e:b2:
75:60:77:39:53:ac:df:5a:99:fe:e8:df:61:a5:13:e0:5d:af:
3e:1b:99:df:79:4b:46:49:df:99:5f:b0:25:e4:51:ae:be:4c:
ea:58:ce:f7:68:a8:c3:ac:21:3f:ca:68:e0:a4:19:a2:9a:9c:
73:8f:a3:41:4f:a8:27:7b:ca:1f:c2:86:8e:bc:5e:f3:28:27:
f4:76:17:3a:2b:f9:fb:44:e4:59:f8:70:d2:0e:41:e6:75:49:
9a:82:ba:cb:b9:1f:07:79:b4:72:23:b9:36:57:fd:c8:e0:96:
95:8d:37:b5:72:ac:5b:d4:5f:54:0e:10:7d:3b:d3:81:55:42:
c0:e6:34:5a:23:7c:54:14:c2:53:2a:fa:b2:08:86:89:97:49:
a8:ab:d1:78:84:b2:6b:b4:46:57:a7:8a:88:c6:ca:92:f2:07:
8d:15:6a:1e:ad:ca:c1:df:86:0f:bb:83:fd:23:42:a5:0b:3a:
5d:d4:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:00 2026 by rpki-client