Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
File: CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft (raw, json)
Hash identifier: Xc9LeiH39SVjZRgp/O80zrM2OTgSiL8fCNwimUozXCE=
Subject key identifier: 34:82:34:FE:A4:8E:D7:B2:53:C2:41:A9:F4:B2:9F:8B:5F:14:4E:36
Authority key identifier: 0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
Certificate issuer: /CN=0a79946872eb5438684858fc861ed2bf6ccec353
Certificate serial: 01A03FA9CC62FDABC2D349123CCF2F90F5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
Manifest number: FB
Signing time: Wed 26 Aug 2026 20:01:27 +0000
Manifest this update: Wed 26 Aug 2026 20:01:27 +0000
Manifest next update: Thu 27 Aug 2026 20:01:27 +0000
Files and hashes: 1: CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl (hash: Qr5r5xXYHw3D1bPVwuMfY2NoYER1JjsMK47J0aTdUB0=)
2: XddofGQPCZvvJARoShJNKWyGOPE.roa (hash: mwOOWRufyuu3Lcd2xxoAQpzQ4w61M0La0mGMruF3D9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:cc:62:fd:ab:c2:d3:49:12:3c:cf:2f:90:f5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a79946872eb5438684858fc861ed2bf6ccec353
Validity
Not Before: Aug 26 20:01:27 2026 GMT
Not After : Aug 27 20:01:27 2026 GMT
Subject: CN=348234fea48ed7b253c241a9f4b29f8b5f144e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:f6:7f:21:4e:7c:27:85:d6:fe:a9:6f:84:
f0:ae:57:2d:c2:17:eb:99:e2:dd:ee:21:d6:83:bc:
70:99:0d:56:d8:88:03:b1:b6:41:25:7b:b1:72:9e:
0e:f5:c4:79:f6:07:f2:fb:65:da:43:70:98:12:de:
1e:73:fe:7e:cd:a8:f1:9d:d2:9d:ee:45:b6:bf:5f:
63:9d:eb:73:81:4a:dc:d8:53:6c:3f:4d:7a:a9:ef:
40:b4:37:26:db:2d:cd:82:a9:b7:f6:f0:bf:1b:01:
4a:d7:8f:09:42:7e:56:bc:e8:2b:ec:47:5b:4e:ff:
fc:a6:7b:ad:4a:dc:97:56:16:96:b1:73:fd:7a:83:
61:ff:cd:22:39:02:fe:37:b6:6f:18:0f:27:64:f5:
ba:a2:93:74:51:cc:60:bd:2d:d9:b4:5d:10:a3:ba:
90:ac:dc:54:b6:87:c1:ff:40:3b:b7:4b:b4:79:22:
d3:34:f8:1b:74:ab:c1:a1:de:d4:24:ae:ad:08:95:
8a:39:6f:cd:cb:b7:65:db:0a:b3:18:ec:fa:38:7b:
09:27:6d:ef:f4:c0:bc:07:40:d6:e3:f4:ce:fd:f9:
4e:f2:16:8c:a8:eb:41:82:b8:59:1c:41:a8:c5:c7:
43:13:28:2f:bd:cc:57:b3:37:d3:56:c5:9d:61:9d:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:82:34:FE:A4:8E:D7:B2:53:C2:41:A9:F4:B2:9F:8B:5F:14:4E:36
X509v3 Authority Key Identifier:
keyid:0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:94:db:f1:ce:c5:e5:fa:df:49:6f:32:06:90:11:77:ec:
86:55:e4:c7:26:04:a3:1b:93:8b:a0:ba:cb:04:db:85:8a:b8:
1e:18:76:ce:21:f2:25:de:67:46:4a:1e:f3:54:e7:79:5e:eb:
0f:94:c2:4e:74:33:40:a2:69:fb:e5:95:07:de:5a:52:a1:c8:
e0:50:89:87:33:60:8b:50:58:29:60:e1:dc:a3:a0:c7:a6:68:
c0:98:e1:c5:f1:22:ce:99:48:cc:47:8e:91:d8:de:fb:d1:f7:
ac:60:da:51:22:c6:f0:46:66:4e:8c:fc:66:35:fa:2b:99:c7:
a1:51:08:1b:c4:7c:76:43:f0:86:5c:37:22:d4:a4:a4:8d:8d:
f9:30:6c:41:c0:a4:40:6c:96:44:8f:79:37:ad:3f:88:b2:88:
f9:c1:ae:be:1c:b1:d6:e8:64:11:4e:2d:04:8b:55:52:28:b8:
d4:ab:98:d7:fd:c1:8a:f2:74:eb:ac:c5:6e:aa:9e:9a:72:75:
eb:dc:e7:98:e7:83:15:4c:87:f7:df:c6:94:43:75:b7:37:10:
f7:bf:2b:0c:20:df:00:0e:ed:3e:42:c5:ed:2f:43:5f:f5:91:
85:04:38:00:0e:12:ca:3a:82:cc:5f:e5:12:32:d6:b5:bf:a1:
4c:aa:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:36 2026 by rpki-client