Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier: SA+GElG0a1Gj5lNhXUC6dzMWsKZFSAWDZErI47iobhY=
Subject key identifier: 0A:1C:5A:74:B5:20:C3:55:C7:17:E3:91:32:01:BC:7D:3F:73:28:7E
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial: 019D389C158C845E97F903BF6C19896E4EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number: 12EE
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: JjBM2Cm47xKXy4/uN75tPyW1BoqXe7ICdLB+CNkQivg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:15:8c:84:5e:97:f9:03:bf:6c:19:89:6e:4e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=0a1c5a74b520c355c717e3913201bc7d3f73287e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:b0:d1:9f:0c:f2:8e:e6:5f:5c:78:73:04:
7a:73:9a:02:ef:7d:6b:f1:27:a4:95:73:7e:8f:9d:
8b:99:52:ee:8e:75:78:49:69:55:17:40:e2:fe:f0:
51:67:f2:59:c2:fd:4c:0e:4e:0a:93:2d:df:2a:71:
7b:2f:2f:c9:b5:80:97:2d:bd:60:c0:5f:b1:d9:5b:
ec:fa:0e:3a:16:a2:31:14:8c:10:02:36:e1:a8:d0:
da:ba:6e:b0:4a:f0:a7:3c:47:93:a3:d8:ee:37:4e:
48:9f:84:70:98:58:d1:5a:3c:1e:cf:59:7a:9c:87:
c3:05:6b:45:7d:78:09:b4:ec:9d:a4:f4:86:17:be:
6f:86:2c:ca:a9:45:02:85:40:d1:09:c0:a0:a8:50:
7d:57:38:7b:e1:4f:08:80:30:95:85:9c:e6:be:8c:
9e:37:cd:eb:83:44:01:b3:40:85:f8:e7:53:22:a9:
84:fb:2d:25:a2:bf:b4:a4:ae:e8:9d:20:0e:4f:cb:
8e:f5:fa:7c:54:e3:4b:a9:d9:6f:5c:a0:9e:50:de:
a5:ba:1a:59:c6:2e:8f:de:83:cb:a7:83:b9:82:09:
cf:4d:7d:7a:b2:51:34:85:79:bb:d1:18:d0:93:11:
c6:e7:d4:2e:83:34:6a:ed:f5:8f:82:ae:e6:44:88:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:5A:74:B5:20:C3:55:C7:17:E3:91:32:01:BC:7D:3F:73:28:7E
X509v3 Authority Key Identifier:
keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5b:51:04:6e:84:c6:f5:24:e7:2e:24:c9:a1:e7:bf:45:4a:
46:bf:1e:fd:81:93:23:f9:b3:72:f0:fe:f7:d4:68:ec:57:bf:
ae:34:90:e8:9a:7b:39:2b:18:45:46:1e:70:16:03:3f:27:34:
dd:0d:7b:16:36:6f:15:1b:5c:5c:04:ac:71:02:d4:a9:e7:1a:
7c:14:05:9c:49:32:6a:c5:3e:88:a8:4d:9a:90:5f:5d:ab:0f:
92:aa:fc:81:f2:6c:91:1e:6b:e0:f9:39:8a:5e:30:63:50:aa:
19:16:e1:6b:e2:91:d0:fe:a4:12:70:cc:94:8d:72:8b:29:a4:
c7:c5:c9:fc:07:f7:cb:58:4b:42:9a:de:ed:95:85:8b:64:3d:
1f:2e:fa:0d:4e:7b:39:41:85:e9:3c:f5:b8:85:56:33:e1:f5:
31:62:99:4c:76:f7:cf:b9:78:7b:1f:b9:21:9a:c4:34:2f:d7:
f6:b5:5b:e2:1c:f4:75:8a:e9:c2:49:d6:f0:62:b9:37:cb:47:
75:e1:54:4e:4c:6d:d3:6e:9f:76:24:a4:fc:35:a4:ce:a2:ef:
98:1e:c7:cb:a9:ab:05:4d:f3:f2:c9:b7:33:7f:2e:06:3f:3a:
e9:fe:45:1b:2a:6c:e8:68:c1:e0:1c:46:bd:cb:ea:61:e3:81:
e6:31:ba:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBWMhF6X+QO/bBmJbk77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmJkZjZkZmE2NDk5ZTJjNGFhZGVlZTEwNjY0M2RhMDFj
MGZmOGIwHhcNMjYwMzI5MDgwMDQ2WhcNMjYwMzMwMDgwMDQ2WjAzMTEwLwYDVQQD
EygwYTFjNWE3NGI1MjBjMzU1YzcxN2UzOTEzMjAxYmM3ZDNmNzMyODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsSw0Z8M8o7mX1x4cwR6c5oC731r
8SeklXN+j52LmVLujnV4SWlVF0Di/vBRZ/JZwv1MDk4Kky3fKnF7Ly/JtYCXLb1g
wF+x2Vvs+g46FqIxFIwQAjbhqNDaum6wSvCnPEeTo9juN05In4RwmFjRWjwez1l6
nIfDBWtFfXgJtOydpPSGF75vhizKqUUChUDRCcCgqFB9Vzh74U8IgDCVhZzmvoye
N83rg0QBs0CF+OdTIqmE+y0lor+0pK7onSAOT8uO9fp8VONLqdlvXKCeUN6luhpZ
xi6P3oPLp4O5ggnPTX16slE0hXm70RjQkxHG59QugzRq7fWPgq7mRIha9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAocWnS1IMNVxxfjkTIBvH0/cyh+MB8GA1UdIwQY
MBaAFHJr3236ZJnixKre7hBmQ9oBwP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEt
NzViNTQ5ZThiYjRkLzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEtNzViNTQ5ZThiYjRk
LzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVtRBG6E
xvUk5y4kyaHnv0VKRr8e/YGTI/mzcvD+99Ro7Fe/rjSQ6Jp7OSsYRUYecBYDPyc0
3Q17FjZvFRtcXASscQLUqecafBQFnEkyasU+iKhNmpBfXasPkqr8gfJskR5r4Pk5
il4wY1CqGRbha+KR0P6kEnDMlI1yiymkx8XJ/Af3y1hLQpre7ZWFi2Q9Hy76DU57
OUGF6Tz1uIVWM+H1MWKZTHb3z7l4ex+5IZrENC/X9rVb4hz0dYrpwknW8GK5N8tH
deFUTkxt026fdiSk/DWkzqLvmB7Hy6mrBU3z8sm3M38uBj866f5FGyps6GjB4BxG
vcvqYeOB5jG6hA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:18 2026 by rpki-client