Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft
File: CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft (raw, json)
Hash identifier: 6G75+rdA3PKWWGCVwR6DYXmqjFuND0ubh0z+bdkSM9k=
Subject key identifier: 4D:07:3B:E9:0C:BF:83:CF:38:0B:13:04:E9:00:24:49:4D:71:79:E5
Authority key identifier: 0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF
Certificate issuer: /CN=0a670ed2bc71191cb60bd9660148510b236d3acf
Certificate serial: 019CC8D0943E242830D671C23DB943350BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft
Manifest number: 0123
Signing time: Sat 07 Mar 2026 15:00:38 +0000
Manifest this update: Sat 07 Mar 2026 15:00:38 +0000
Manifest next update: Sun 08 Mar 2026 15:00:38 +0000
Files and hashes: 1: 57ExRImlY_J1W0DiqCuzHtZc1-M.roa (hash: H/MP7YqHoUUdNXYELvg7nbZxJWneiFMYDH3qjOKnph8=)
2: CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl (hash: 1NPQPUHD2vY6hYC2LdDdCp3+/tQ2SGTjhxF5LmP1DQ0=)
3: lnDM7sD_RAt_sM0f7QmBz4qOgYA.roa (hash: 1AImBJ5UNIT+sFRT9lpZkZKmyIOcl6ryDbLO+EP3i0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d0:94:3e:24:28:30:d6:71:c2:3d:b9:43:35:0b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a670ed2bc71191cb60bd9660148510b236d3acf
Validity
Not Before: Mar 7 15:00:38 2026 GMT
Not After : Mar 8 15:00:38 2026 GMT
Subject: CN=4d073be90cbf83cf380b1304e90024494d7179e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:48:36:d9:64:59:00:de:db:12:90:44:f5:
ab:74:e1:3d:74:78:00:36:99:5f:36:27:42:b9:d0:
ed:4c:a7:07:16:b8:93:c4:57:19:1d:e6:2a:16:1a:
5c:af:b0:00:6a:5f:37:09:fc:52:0e:5b:38:7a:12:
28:7b:2a:32:59:99:43:c4:fd:f0:3a:5c:a5:60:d3:
65:15:04:6e:29:77:0e:37:7e:03:3d:22:b5:3d:0f:
97:a5:63:9d:13:ba:db:fa:e9:96:b6:26:7d:83:f1:
a4:48:be:d1:41:41:f3:65:10:85:af:e0:1c:b5:b0:
3d:99:0e:68:90:dc:2b:ca:14:75:a9:0f:ed:99:1d:
55:59:f1:d3:c9:60:31:cc:3b:3a:3c:b8:81:e8:9e:
44:d3:36:fd:5b:53:6a:37:18:e3:26:ae:ff:72:c5:
0e:45:fa:41:2e:c5:f7:67:e8:b8:bf:fb:3d:7a:7c:
e0:84:01:5c:5c:01:cd:5d:cf:1e:6c:e7:8a:b2:73:
c6:ce:4b:d6:06:4c:9b:e1:36:08:a6:ed:5b:d2:00:
5a:db:a8:6e:d9:6b:c7:fa:28:7f:5e:ee:c0:b7:de:
38:bf:c8:f9:e5:25:e2:89:f8:f0:61:06:a5:86:cf:
36:0a:09:a4:e0:b3:0e:f8:89:07:54:7d:ad:59:90:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:3B:E9:0C:BF:83:CF:38:0B:13:04:E9:00:24:49:4D:71:79:E5
X509v3 Authority Key Identifier:
keyid:0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:a3:16:13:4e:6b:03:09:84:0e:b4:b4:5e:dd:f1:86:b2:
0a:bd:e6:c3:3a:43:fc:42:cb:a4:07:c1:e4:c5:74:1e:4e:ce:
5b:1c:46:5b:c9:63:b2:91:41:f5:3b:14:fa:af:be:9c:7d:9d:
b2:66:07:6d:17:b4:16:8e:fd:11:5a:98:d3:98:b6:d8:12:f1:
bc:7a:ad:2c:0d:27:6b:09:79:38:7f:c1:36:b0:7c:71:8b:f6:
fc:3a:30:2f:fd:2d:99:5f:02:76:d6:e1:11:81:c9:0e:f4:cb:
0c:6d:46:fd:dd:5a:3d:36:4e:85:76:54:cd:c6:42:3e:e2:b5:
4b:fe:1f:1c:02:80:e9:ae:48:9d:71:b6:65:75:0a:4a:e6:04:
f8:5b:01:1a:1c:f9:55:f7:d4:ec:2d:51:0f:85:0c:99:8d:95:
8d:ef:6a:50:ff:b5:79:11:64:6e:6a:a9:4b:df:46:a7:db:f2:
e1:8f:e8:2a:99:d7:18:f0:92:51:b0:27:39:9a:20:eb:25:b4:
fd:12:08:d0:06:7d:2b:f2:53:b3:85:6a:6c:d9:95:38:5f:d4:
18:e4:a2:3a:24:9d:5b:14:56:95:bc:2f:4e:0b:ec:5b:55:fa:
d5:7a:24:73:ec:f3:b2:a4:8e:89:29:8c:b7:b7:dc:01:b7:05:
2d:07:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:33:58 2026 by rpki-client