Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: QwuIpqk+g2eRxPorYWx8Etw3qii3YLJ1c0Lwyj3CICU=
Subject key identifier: 38:90:61:A9:8E:75:7A:11:BF:7F:43:9B:A6:10:FB:30:57:97:6D:9D
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 019D39418AD6646F4043CAD6C81BDDBCAEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 143C
Signing time: Sun 29 Mar 2026 11:01:29 +0000
Manifest this update: Sun 29 Mar 2026 11:01:29 +0000
Manifest next update: Mon 30 Mar 2026 11:01:29 +0000
Files and hashes: 1: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (hash: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: e6PV5L1PiKft4Vva7jtmUhfztxBEAR4i+Uem71UJS/k=)
3: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (hash: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8a:d6:64:6f:40:43:ca:d6:c8:1b:dd:bc:ae:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Mar 29 11:01:29 2026 GMT
Not After : Mar 30 11:01:29 2026 GMT
Subject: CN=389061a98e757a11bf7f439ba610fb3057976d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:3f:c7:00:70:67:68:31:48:76:5e:70:92:
2a:4d:7c:08:ac:2b:be:d9:ba:c8:82:6b:41:75:3a:
82:fc:31:4c:23:ba:42:35:83:d4:65:63:be:e2:5d:
48:58:77:5a:52:89:7e:36:8b:70:67:7f:4a:1a:99:
d6:21:65:df:a8:56:51:97:f6:51:b2:9e:15:99:38:
37:04:9b:e2:c6:8b:9a:9c:94:46:e6:92:8f:1d:62:
2c:7b:ef:9c:d6:c7:ec:d4:09:e5:fb:2a:11:b9:84:
0c:c6:32:53:a0:36:bb:2f:2c:0c:c6:84:63:fc:a2:
61:08:a9:9b:db:f5:67:ea:9e:2c:b2:e8:1e:9d:a5:
c8:64:05:05:9d:2a:6f:8d:aa:c0:33:e5:3b:64:ad:
c3:71:c1:cb:90:c5:bf:c2:f9:f3:f2:1d:d3:9c:d7:
d6:7b:03:c0:d9:d2:3f:27:4b:44:59:05:7b:61:33:
14:9a:51:13:ca:7d:29:1d:4e:9b:e2:d9:d6:1a:ac:
64:d1:3f:0e:96:75:98:81:e9:44:f5:28:77:2d:4e:
f0:1e:1b:12:6e:b8:ce:08:84:a8:5f:f9:4d:77:aa:
3b:58:6b:22:6b:48:35:d5:86:6f:ab:f3:20:80:d2:
29:42:62:26:d0:7b:9d:50:62:3a:e0:29:8c:94:58:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:61:A9:8E:75:7A:11:BF:7F:43:9B:A6:10:FB:30:57:97:6D:9D
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:21:87:08:fe:a9:ef:59:53:09:9e:b7:99:96:99:ca:18:71:
b1:ff:05:e3:95:fa:9b:17:dc:e9:ab:2f:29:80:12:40:4b:3b:
1b:ff:f3:00:1f:f0:ac:57:3b:a2:fe:8e:3e:4c:68:3c:dc:21:
41:4c:95:32:a1:ab:22:7e:7d:fd:a2:86:a6:45:1d:a2:19:5a:
65:40:98:1a:fa:be:11:43:b8:1a:5e:bb:09:1c:39:a4:26:b0:
5d:f5:b0:9a:fe:3c:13:a0:f8:5c:de:69:67:80:32:d7:da:01:
15:fc:85:41:73:c1:dd:c3:ab:f2:c6:49:7f:5e:c7:b5:b8:15:
de:7f:ab:e0:59:a2:59:36:8c:ef:86:cc:67:d7:29:ac:c6:02:
a3:db:62:2b:a9:c3:3d:96:03:08:32:97:cf:5c:55:4f:f5:26:
0c:e3:51:47:44:a8:af:fd:ce:1e:81:77:2c:da:0d:37:06:96:
89:e8:b1:e3:6d:84:24:4b:f1:63:c8:a6:a7:1f:d8:25:19:d7:
c7:85:fc:7d:e1:97:9e:e5:2f:dc:3a:ed:b9:92:05:d7:86:5e:
8a:eb:4f:27:da:9e:bb:d2:b1:67:59:a6:68:0a:ed:c9:74:28:
8b:78:bc:25:68:c0:06:e1:e5:e3:f5:9b:0c:da:ae:4f:a8:77:
a0:bf:c5:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QYrWZG9AQ8rWyBvdvK7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy
NTY5ZDMwHhcNMjYwMzI5MTEwMTI5WhcNMjYwMzMwMTEwMTI5WjAzMTEwLwYDVQQD
EygzODkwNjFhOThlNzU3YTExYmY3ZjQzOWJhNjEwZmIzMDU3OTc2ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLc/xwBwZ2gxSHZecJIqTXwIrCu+
2brIgmtBdTqC/DFMI7pCNYPUZWO+4l1IWHdaUol+NotwZ39KGpnWIWXfqFZRl/ZR
sp4VmTg3BJvixouanJRG5pKPHWIse++c1sfs1Anl+yoRuYQMxjJToDa7LywMxoRj
/KJhCKmb2/Vn6p4ssugenaXIZAUFnSpvjarAM+U7ZK3DccHLkMW/wvnz8h3TnNfW
ewPA2dI/J0tEWQV7YTMUmlETyn0pHU6b4tnWGqxk0T8OlnWYgelE9Sh3LU7wHhsS
brjOCISoX/lNd6o7WGsia0g11YZvq/MggNIpQmIm0HudUGI64CmMlFixYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiQYamOdXoRv39Dm6YQ+zBXl22dMB8GA1UdIwQY
MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct
MTM4Yzg0MTdhZTkzLzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz
LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiGHCP6p
71lTCZ63mZaZyhhxsf8F45X6mxfc6asvKYASQEs7G//zAB/wrFc7ov6OPkxoPNwh
QUyVMqGrIn59/aKGpkUdohlaZUCYGvq+EUO4Gl67CRw5pCawXfWwmv48E6D4XN5p
Z4Ay19oBFfyFQXPB3cOr8sZJf17HtbgV3n+r4FmiWTaM74bMZ9cprMYCo9tiK6nD
PZYDCDKXz1xVT/UmDONRR0Sor/3OHoF3LNoNNwaWieix422EJEvxY8impx/YJRnX
x4X8feGXnuUv3DrtuZIF14ZeiutPJ9qeu9KxZ1mmaArtyXQoi3i8JWjABuHl4/Wb
DNquT6h3oL/FYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:08 2026 by rpki-client