Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: D0APSt2/+GAU0le2wnmZqe/G6IeeKGf1zEFwe1fJlmU=
Subject key identifier: B0:02:92:CA:5C:34:F9:46:6B:F3:C8:1E:19:ED:3C:D0:3E:D2:DA:3D
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 01A1803D510E033ED2AE328E2724DD5F2414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 1673
Signing time: Wed 28 Oct 2026 02:01:04 +0000
Manifest this update: Wed 28 Oct 2026 02:01:04 +0000
Manifest next update: Thu 29 Oct 2026 02:01:04 +0000
Files and hashes: 1: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (hash: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: yNIkepyXWsDATjZv18sz6g5N1zJSYNTVxbssOJZ4xR8=)
3: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (hash: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:51:0e:03:3e:d2:ae:32:8e:27:24:dd:5f:24:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Oct 28 02:01:04 2026 GMT
Not After : Oct 29 02:01:04 2026 GMT
Subject: CN=b00292ca5c34f9466bf3c81e19ed3cd03ed2da3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:ab:63:b9:aa:6a:3a:4d:1c:ac:7f:0f:81:
8b:1f:0f:94:83:d7:0b:4a:c8:ba:e7:93:b9:81:4d:
bc:2e:ac:f0:86:5f:33:c2:fe:67:28:72:c9:02:d2:
03:b9:e2:02:7f:a4:e0:e7:60:08:31:44:27:c0:e0:
72:19:19:66:de:af:94:d6:26:7d:85:5f:68:57:34:
7e:9f:82:29:55:50:9f:71:9b:6e:e9:d3:e6:e4:06:
d8:bf:6d:82:96:1e:ff:27:e6:02:05:88:bd:0c:0c:
ba:3c:ba:f3:66:59:0f:d8:c6:56:e9:6a:63:5c:d6:
b0:1b:f6:3f:16:98:5b:38:7b:76:89:10:f3:d1:48:
4f:77:54:94:8f:e6:8f:b6:0e:21:14:49:f3:58:5c:
5d:8b:c7:03:ad:61:92:08:cb:a0:f8:1b:50:a9:7a:
ea:6d:4c:ea:ff:04:43:f2:0f:65:9d:39:a6:42:5a:
30:02:25:8f:0f:29:95:af:76:63:fc:dc:0f:b7:77:
31:dc:58:60:09:bd:84:10:e5:24:ee:1c:fb:61:5c:
19:67:83:fc:f8:1e:2b:0e:c3:6f:45:d8:3f:01:46:
f8:9f:61:e5:25:11:f5:e6:58:07:5a:3b:b3:89:b3:
7d:6a:16:93:b2:ea:9e:9f:12:f9:1f:ec:c1:90:d1:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:02:92:CA:5C:34:F9:46:6B:F3:C8:1E:19:ED:3C:D0:3E:D2:DA:3D
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1d:d7:4f:d7:09:71:98:03:30:7d:85:8d:16:39:1b:ba:3d:
8f:f9:08:70:48:6c:aa:0d:f3:53:6a:d6:46:82:fc:48:38:ef:
fd:a9:00:d1:f6:49:07:7b:7b:b8:1e:de:d1:e1:ef:6c:1f:38:
59:c1:28:d9:cc:bb:ed:ac:6d:26:6d:db:ba:7c:37:ea:91:55:
8d:4e:2d:c0:3f:8d:be:ed:03:bc:2b:ca:95:30:10:85:10:99:
53:35:e8:26:2f:9d:25:1d:ca:77:e8:d3:71:4a:7d:36:45:38:
6a:52:66:8d:ef:24:02:84:c8:58:73:58:cd:da:ee:a6:fa:25:
3d:64:d5:37:7a:b2:89:88:b9:72:a9:d3:39:8c:95:17:aa:c4:
65:43:6e:2a:dc:c9:01:07:6d:e2:a5:5a:d2:c0:0e:ab:7a:47:
75:04:95:a8:91:58:b4:11:c5:7c:28:4e:51:6a:41:ee:34:1d:
db:65:b6:1e:5c:24:35:36:97:12:f0:23:45:b5:4f:22:18:87:
b1:5d:ac:a4:0b:86:c4:ba:37:13:10:a4:b8:ff:dd:c4:08:42:
45:5c:17:ed:26:69:d9:a9:f8:77:d8:fe:2a:a0:d7:78:33:16:
90:ed:3c:ee:f2:9e:eb:c1:e0:e1:df:63:11:75:3a:26:77:ca:
4c:ca:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:23:49 2026 by rpki-client