Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: VbZz18sVBF+2KQC8UEfvU0aDFuHHa7M6ceUR2fuPen0=
Subject key identifier: 2B:63:C6:8A:7E:88:05:5E:02:8A:2A:65:29:4B:2F:1E:4A:B8:F8:DA
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 019EB98F4147E7761FA228A7ABC0661C2D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 1503
Signing time: Fri 12 Jun 2026 02:00:33 +0000
Manifest this update: Fri 12 Jun 2026 02:00:33 +0000
Manifest next update: Sat 13 Jun 2026 02:00:33 +0000
Files and hashes: 1: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (hash: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: 99T1i1zUPhAJF1V5X0BW5oCmilTGYZCooefl3HIc03w=)
3: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (hash: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:41:47:e7:76:1f:a2:28:a7:ab:c0:66:1c:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Jun 12 02:00:33 2026 GMT
Not After : Jun 13 02:00:33 2026 GMT
Subject: CN=2b63c68a7e88055e028a2a65294b2f1e4ab8f8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:09:2c:8c:ae:f9:21:05:b7:5f:e0:07:34:da:
7b:a8:a5:f6:61:5d:b1:d9:65:9c:a6:b0:4c:8c:e6:
43:c6:da:cb:fd:49:3f:f1:4a:ef:e0:94:6e:50:30:
7b:4d:25:8b:40:59:7d:d8:c1:1e:fc:3d:a8:67:50:
52:54:cf:a0:67:cc:aa:cf:a0:41:9c:86:8b:e5:60:
aa:7f:0d:c8:b2:60:96:2a:0e:d0:cc:02:ba:54:6e:
b0:2d:96:22:0e:27:e0:32:cc:36:48:a0:94:68:af:
90:5c:36:67:a8:80:83:20:10:95:40:2e:68:93:23:
18:64:55:1b:56:88:be:ce:65:9b:0e:bc:55:e7:8f:
be:4d:d2:9f:32:de:60:9a:b1:ca:99:ca:4d:11:7e:
01:b5:e8:7f:4a:47:b7:4d:63:b7:e4:5c:d3:30:ed:
76:4a:52:70:00:a6:90:8f:05:bd:6b:75:7c:d9:18:
08:a8:0c:71:06:54:67:cf:00:c9:4d:58:b6:c6:24:
c7:35:ee:96:7b:18:97:1f:44:1d:bc:b6:20:70:f1:
b8:7b:4c:95:3b:04:c2:a6:32:dd:28:bd:fa:52:ed:
4b:8b:1e:c4:60:00:6c:f9:59:fa:16:7e:1e:ff:6f:
44:af:d9:e2:d5:30:ce:7d:68:b7:47:56:4a:5a:8c:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:C6:8A:7E:88:05:5E:02:8A:2A:65:29:4B:2F:1E:4A:B8:F8:DA
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:67:a0:d2:49:bc:a2:fc:6a:6e:42:1f:ea:c2:fb:2d:de:51:
78:e5:f9:fb:cb:3e:3a:4a:df:80:13:41:96:c3:33:8d:f2:90:
fe:2f:a5:3c:bd:61:37:5d:5f:19:af:a8:6e:cd:be:a1:ad:c9:
29:f3:72:cd:ad:f5:28:f1:62:7e:40:b7:81:60:be:98:45:e9:
1a:70:9d:a9:c2:9c:58:7a:7c:b3:8a:4b:b8:3d:c3:45:f7:d8:
a5:cc:b5:4f:1d:dc:02:77:5f:e6:d8:c2:87:f0:ae:53:78:60:
8a:20:65:6e:a5:b3:8d:b9:b7:90:c1:be:85:1d:44:28:f7:92:
56:1a:49:02:4e:9a:15:3a:9d:1e:99:81:cd:61:d5:13:11:10:
f8:35:fd:e1:eb:5a:a0:e4:b9:26:52:ad:33:52:5d:bc:cb:53:
0d:eb:13:29:fb:e0:f1:f0:a4:9a:6c:f5:42:8d:3c:b2:fe:1a:
a3:eb:88:28:c1:5c:89:05:d4:98:f4:89:4c:40:f1:da:67:9c:
39:9f:9d:1e:b4:ae:35:39:a0:a2:f3:e1:88:d9:ae:e3:14:bd:
43:e4:71:81:b1:b5:27:0f:a0:23:f1:1c:7b:d5:da:20:4b:a1:
73:62:2b:d9:0f:6d:8f:fd:23:2e:1f:a1:86:00:14:ce:13:dc:
61:ec:e8:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j0FH53Yfoiinq8BmHC2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy
NTY5ZDMwHhcNMjYwNjEyMDIwMDMzWhcNMjYwNjEzMDIwMDMzWjAzMTEwLwYDVQQD
EygyYjYzYzY4YTdlODgwNTVlMDI4YTJhNjUyOTRiMmYxZTRhYjhmOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQksjK75IQW3X+AHNNp7qKX2YV2x
2WWcprBMjOZDxtrL/Uk/8Urv4JRuUDB7TSWLQFl92MEe/D2oZ1BSVM+gZ8yqz6BB
nIaL5WCqfw3IsmCWKg7QzAK6VG6wLZYiDifgMsw2SKCUaK+QXDZnqICDIBCVQC5o
kyMYZFUbVoi+zmWbDrxV54++TdKfMt5gmrHKmcpNEX4Bteh/Ske3TWO35FzTMO12
SlJwAKaQjwW9a3V82RgIqAxxBlRnzwDJTVi2xiTHNe6WexiXH0QdvLYgcPG4e0yV
OwTCpjLdKL36Uu1Lix7EYABs+Vn6Fn4e/29Er9ni1TDOfWi3R1ZKWozJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtjxop+iAVeAooqZSlLLx5KuPjaMB8GA1UdIwQY
MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct
MTM4Yzg0MTdhZTkzLzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz
LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWeg0km8
ovxqbkIf6sL7Ld5ReOX5+8s+OkrfgBNBlsMzjfKQ/i+lPL1hN11fGa+obs2+oa3J
KfNyza31KPFifkC3gWC+mEXpGnCdqcKcWHp8s4pLuD3DRffYpcy1Tx3cAndf5tjC
h/CuU3hgiiBlbqWzjbm3kMG+hR1EKPeSVhpJAk6aFTqdHpmBzWHVExEQ+DX94eta
oOS5JlKtM1JdvMtTDesTKfvg8fCkmmz1Qo08sv4ao+uIKMFciQXUmPSJTEDx2mec
OZ+dHrSuNTmgovPhiNmu4xS9Q+RxgbG1Jw+gI/Ece9XaIEuhc2Ir2Q9tj/0jLh+h
hgAUzhPcYezoCQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:04:57 2026 by rpki-client