Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: yryWggkYhVqV6a3RSn/jJV/JrcA5eeJdOC4KWjkC5Sg=
Subject key identifier: CD:FE:4F:7E:11:DB:69:45:24:A4:E5:4E:46:5C:C7:C3:84:1C:17:34
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019D394072073F6911F847F3A49CA1677699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0EF7
Signing time: Sun 29 Mar 2026 11:00:17 +0000
Manifest this update: Sun 29 Mar 2026 11:00:17 +0000
Manifest next update: Mon 30 Mar 2026 11:00:17 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: AIHgBpbR0YdPnSYAyxRe9n/PTogxK/rEMFq8XMmOU1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:72:07:3f:69:11:f8:47:f3:a4:9c:a1:67:76:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Mar 29 11:00:17 2026 GMT
Not After : Mar 30 11:00:17 2026 GMT
Subject: CN=cdfe4f7e11db694524a4e54e465cc7c3841c1734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:dd:26:7d:5e:5e:d5:82:fd:f8:d0:23:c9:
79:12:0e:27:0c:75:f9:6f:38:9a:30:bb:8e:2e:db:
9c:8a:4c:f1:c1:b4:da:f2:59:2c:11:74:ce:ae:3b:
fb:45:b0:c3:4b:89:94:65:07:cc:8f:91:2a:99:7e:
a7:de:04:78:31:1f:68:b2:9c:61:a9:8f:06:d9:08:
69:65:53:93:d6:b5:38:d6:01:76:5e:36:29:f3:39:
91:76:65:ff:b9:73:49:5b:d7:53:77:1e:67:23:35:
7d:d0:79:c1:7d:1b:90:81:b8:d7:d7:16:4d:4a:7a:
75:31:93:73:62:1f:6d:fb:22:47:8d:15:91:51:49:
d5:4a:2c:3d:86:53:69:92:e4:ad:64:e7:3b:1c:9b:
e0:5e:29:6e:d4:48:ea:23:8c:ad:23:f0:5e:40:9a:
35:a3:57:df:3d:e0:f9:5f:22:e5:39:a5:c4:a5:9e:
fe:c5:15:96:f6:97:0f:38:33:e0:f0:cf:f6:ff:b3:
68:43:1c:87:2c:81:e4:b3:96:25:a2:06:e6:36:2d:
71:1b:cd:e2:11:d4:c8:71:70:21:69:fe:a1:cb:ca:
a8:18:c5:60:28:cb:2a:57:ae:f1:5f:94:b8:94:0c:
36:11:12:8a:86:7f:d1:2f:46:9e:bd:f1:7a:4b:c8:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:4F:7E:11:DB:69:45:24:A4:E5:4E:46:5C:C7:C3:84:1C:17:34
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:29:3f:e2:a7:5e:d2:fc:05:a3:96:52:73:94:6a:e7:b0:a6:
be:69:47:fd:fa:5e:52:15:c5:81:8a:d2:74:c4:71:1c:c2:61:
9b:96:3d:3f:ba:78:c1:84:8f:22:65:41:69:7c:49:dd:e6:2e:
b6:ec:e3:10:64:0a:07:b4:1a:65:60:84:7e:b7:04:8c:dd:66:
5a:76:ba:c2:7e:7c:14:2e:ae:0f:53:f4:f6:3b:c5:dd:82:d8:
a2:d5:06:2c:e6:a7:14:27:56:62:ed:c3:f8:4d:0a:3e:8f:44:
b9:3e:60:03:dd:e6:e3:dc:6f:70:03:f9:b5:06:bf:b7:cc:81:
f4:2d:8c:fa:5b:40:95:ab:f4:33:c5:b6:22:da:44:56:19:7f:
93:18:e1:2d:58:7d:2f:e4:6d:2f:d6:d2:48:a6:ac:95:63:74:
22:ba:e5:45:a7:d2:7e:cf:84:5b:ae:c0:c4:0d:ff:17:c0:a8:
35:fd:11:14:9a:62:4d:a7:69:a5:0c:67:ce:1d:a3:29:52:25:
ee:95:80:b6:56:63:3d:a6:dd:5e:88:a1:4b:d4:02:3f:76:76:
b6:11:83:3a:47:31:54:3b:d6:cf:5f:80:f5:1d:52:c8:4c:be:
ea:ac:50:c2:3a:d8:0c:9a:f7:f0:27:47:46:e0:4b:7f:f2:f7:
b2:a2:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:43 2026 by rpki-client