Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: ysdL0qsW/RTA6zw5KzbqOeofpStxkjksu9VDp0tlDnY=
Subject key identifier: 16:6F:4D:68:63:BB:69:AF:BA:4D:1D:35:B6:7E:CB:55:2D:90:E9:6D
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019DCE62DA08DF2D05537E1BB4065E0A9E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0BD6
Signing time: Mon 27 Apr 2026 10:01:17 +0000
Manifest this update: Mon 27 Apr 2026 10:01:17 +0000
Manifest next update: Tue 28 Apr 2026 10:01:17 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: Jxl5VgdhijVBS3ftBfUPD5SEIcwb5gBpYKmyjIO0utw=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:da:08:df:2d:05:53:7e:1b:b4:06:5e:0a:9e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Apr 27 10:01:17 2026 GMT
Not After : Apr 28 10:01:17 2026 GMT
Subject: CN=166f4d6863bb69afba4d1d35b67ecb552d90e96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:27:06:d6:aa:86:b6:4c:4a:7f:75:45:65:
72:39:aa:34:6f:c6:99:bc:01:84:e0:60:8d:17:66:
e9:49:93:20:6e:04:40:75:60:de:25:37:33:ac:0a:
13:f8:d9:a1:1f:3a:d2:2c:ea:0a:20:4e:bc:18:af:
2c:de:67:a5:4f:5f:71:4a:30:7f:d1:1e:27:a3:fe:
1f:83:04:d5:58:4c:f1:c4:15:94:dd:e3:6b:b9:2d:
50:8e:d9:7a:bd:68:76:54:df:ad:c6:22:56:a4:13:
21:22:eb:a9:64:ab:3e:b1:23:2f:61:0a:68:03:79:
2e:7f:79:a0:34:af:e2:f9:c5:97:47:03:fd:42:ac:
be:b4:e2:71:94:59:53:09:d5:e1:a8:ae:4c:16:a3:
5b:41:37:75:eb:da:f1:37:50:a8:88:8d:42:dd:0c:
8e:11:66:6a:45:19:db:41:b1:0e:aa:c3:0b:1b:91:
07:f9:2e:8c:84:a8:aa:5d:0d:72:f1:73:c6:f1:59:
bf:df:bd:a0:27:62:aa:ca:92:50:ac:17:fa:8a:2b:
dd:4e:40:28:e3:87:0e:c8:6d:70:e8:79:a6:79:a9:
68:f3:60:6f:87:da:40:81:6c:47:29:27:74:67:05:
28:02:3a:b8:2d:8a:68:19:cf:fd:e1:1e:d3:90:85:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6F:4D:68:63:BB:69:AF:BA:4D:1D:35:B6:7E:CB:55:2D:90:E9:6D
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:39:95:36:76:1f:2e:86:55:01:87:aa:d5:25:65:25:13:
88:03:f8:dc:b0:2d:0b:1b:f6:d0:b6:87:d3:fe:10:2e:df:62:
50:49:18:78:27:ae:c1:cb:46:cd:39:6b:9f:f6:b7:4d:d6:e4:
74:07:4b:19:66:fc:88:4c:f1:d0:27:65:35:de:f2:4f:8f:c4:
2f:c1:6c:df:21:7f:89:42:78:0d:bb:44:72:c6:8f:e5:70:b3:
64:8b:0d:4d:55:84:97:22:3b:a8:09:35:ca:db:54:8c:e4:2d:
b0:32:db:3c:f1:9f:52:83:66:2d:27:08:bd:12:0b:f0:29:03:
e1:74:3b:f8:21:13:68:8a:e9:93:67:11:cb:f0:fd:20:e6:3b:
6f:41:bd:5b:b4:26:87:ac:37:9f:eb:26:5d:45:9f:36:1a:37:
a1:e1:eb:8c:d3:d8:30:8f:52:e1:bb:8b:3e:26:b9:16:61:4f:
4e:7b:6f:1b:3d:c9:3d:64:aa:3c:43:6e:da:9d:2a:50:91:b3:
ae:b6:f4:24:ed:5f:32:c1:4d:86:88:e6:32:51:7f:74:f7:f0:
c3:7d:b6:fa:b2:6b:67:40:0a:68:70:52:c0:e1:55:a9:c3:24:
6b:2e:c8:78:b4:45:b9:ed:fb:45:1d:58:41:e4:9b:ea:e5:32:
b9:80:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:15:15 2026 by rpki-client