Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
File: CMD4JPxpxHv1_teUYxbN_-P6BFs.mft (raw, json)
Hash identifier: sv+OJV2EQaLDMT2pcth7cHt6VcUKcVBydIcc8morsX4=
Subject key identifier: 5D:F8:E9:55:E9:82:81:85:62:99:69:8F:10:81:4D:C9:84:26:57:CD
Authority key identifier: 08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
Certificate issuer: /CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Certificate serial: 019EB6FC4D36E6D5FD3DA73FE0FA6685F3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
Manifest number: 15
Signing time: Thu 11 Jun 2026 14:00:48 +0000
Manifest this update: Thu 11 Jun 2026 14:00:48 +0000
Manifest next update: Fri 12 Jun 2026 14:00:48 +0000
Files and hashes: 1: CMD4JPxpxHv1_teUYxbN_-P6BFs.crl (hash: T8b2O+d+L0b/ZYmyr/GW/ieqcDOoG9t4uMICsY3YQfU=)
2: EcOiKWkfENOhpUFqCuAv__VHhnw.roa (hash: Dg3pxaRe1cEkDH8sGf4s69+1RouBE83t1FQSJNv9iHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:4d:36:e6:d5:fd:3d:a7:3f:e0:fa:66:85:f3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Validity
Not Before: Jun 11 14:00:48 2026 GMT
Not After : Jun 12 14:00:48 2026 GMT
Subject: CN=5df8e955e98281856299698f10814dc9842657cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:6f:82:09:05:ec:c1:a6:ad:d9:ba:e5:58:
df:f5:88:5f:14:d7:12:1d:4e:fc:d4:16:49:49:8d:
07:04:17:69:ec:ce:05:54:58:74:4c:87:87:74:ed:
ce:e2:d3:86:a5:f0:be:89:43:98:30:d4:42:f8:11:
58:03:9f:27:dc:b2:1f:7a:83:1e:bf:23:89:ab:4f:
91:95:ee:cb:10:a5:8c:3d:37:64:6c:e1:74:91:1e:
80:55:fa:45:3c:d6:70:ca:e5:0e:3e:7a:d3:3d:ed:
1a:7f:46:1d:f2:70:56:2f:1d:fd:3d:73:c4:62:c7:
3c:df:4c:23:97:5b:be:14:de:ac:1b:33:51:e0:36:
84:c2:68:95:ef:d5:e7:a3:b1:62:04:da:1a:17:d1:
b6:32:6b:a3:57:a4:2b:90:ba:9b:32:a8:2e:df:ef:
40:1c:35:a3:41:8e:2b:bf:c9:f5:0e:20:55:60:b5:
d3:0a:a7:e3:a0:fd:60:72:26:77:94:6c:7d:87:b6:
ad:1b:e2:9c:f6:09:98:24:cc:bc:45:d5:fd:0a:20:
19:1f:c7:0d:1a:c5:22:a4:d7:68:97:44:66:98:22:
14:0a:14:fb:56:b7:6a:0c:5d:b1:4d:82:14:77:d2:
6a:0c:cd:db:e5:de:bd:d2:11:14:13:84:bc:f9:5d:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F8:E9:55:E9:82:81:85:62:99:69:8F:10:81:4D:C9:84:26:57:CD
X509v3 Authority Key Identifier:
keyid:08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e5:3d:dc:c1:8f:96:2b:b9:a1:13:c0:a3:d7:c5:b6:b1:2a:
9a:2f:d5:ea:79:a8:75:03:28:7f:b5:f3:9e:f5:68:0c:ef:71:
98:9b:51:d3:3f:a5:93:eb:74:3c:88:f1:84:df:e3:45:8f:ec:
f1:96:95:ed:00:c4:a7:fb:fc:24:f9:bf:d9:ca:ae:c0:69:16:
ce:4e:14:eb:fe:c9:e1:6a:c4:b1:06:2f:54:e0:b3:ee:96:6e:
a4:93:0d:96:a6:0f:a4:69:f5:f6:32:b0:0f:47:f5:79:30:48:
af:09:ce:a7:cb:39:84:fa:1f:2a:78:f5:ee:b8:4a:97:48:df:
c2:e0:66:6d:00:a8:e7:9a:df:71:3f:d8:2d:39:83:39:38:2b:
4b:8e:a1:41:8c:fa:42:86:1b:3b:4c:ff:00:6e:ce:7c:3e:4b:
37:22:5e:af:66:2e:65:42:2b:40:c8:b7:bf:39:64:63:b8:e1:
16:91:23:dd:2d:bd:8a:c0:62:6f:4f:6c:d2:c0:ae:a9:c9:67:
cc:80:d8:a5:ad:4e:54:53:99:e4:db:7e:d7:e3:c0:ae:0c:32:
d5:be:c4:0e:9f:d7:1c:9a:60:59:70:cf:87:b9:71:ae:97:56:
94:f0:d7:38:fd:dc:ad:82:5e:58:ae:3d:36:40:4c:21:88:07:
1b:ec:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:28:48 2026 by rpki-client