Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: zDKTgn67tqyrJqzK55f0+d7fO8YZASfZSzTgVJQAQTY=
Subject key identifier: AF:89:46:62:EA:C1:E3:4D:A7:3C:5B:E5:D8:32:C5:4D:1B:A2:D4:AF
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019DB08F0EB8D5CA1FF56D8ED1ADDDD01719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0EE2
Signing time: Tue 21 Apr 2026 15:00:58 +0000
Manifest this update: Tue 21 Apr 2026 15:00:58 +0000
Manifest next update: Wed 22 Apr 2026 15:00:58 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: xUq3zQ2WUnYUGC3IDo7KRhAxEnCIOH1CgxjBVgSyY0s=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:8f:0e:b8:d5:ca:1f:f5:6d:8e:d1:ad:dd:d0:17:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Apr 21 15:00:58 2026 GMT
Not After : Apr 22 15:00:58 2026 GMT
Subject: CN=af894662eac1e34da73c5be5d832c54d1ba2d4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:36:fb:e3:1f:ab:3d:1c:ee:c7:15:88:ff:
4f:67:77:79:c9:b9:a4:b9:c4:ef:6d:b8:2f:4f:98:
7b:05:43:ad:fa:69:48:c4:2b:6d:dd:fb:a6:1c:f2:
47:2b:7e:b1:8b:4a:b2:8b:bb:25:9c:5f:83:f8:a3:
04:5e:f4:3a:6e:56:0e:00:0f:9b:22:b0:d6:db:29:
df:b4:32:12:6d:9b:4e:00:94:b0:39:2e:aa:de:3f:
fa:fc:e8:84:47:ee:76:b3:90:5d:0d:81:a5:97:0c:
eb:08:df:51:26:af:8d:fd:2f:b6:37:5c:4c:b7:8c:
5f:b2:d3:86:df:99:04:54:bd:90:b0:5d:10:f7:49:
fc:3a:67:8e:f2:3c:05:d3:df:55:3c:24:b2:21:1a:
ea:8c:36:18:63:0e:00:0a:a0:94:85:c3:b4:93:8a:
6d:76:af:0e:43:6a:bc:c4:ba:b6:69:dc:31:a8:d5:
5c:6d:fa:33:ee:ee:4b:77:10:12:aa:3b:b2:e2:91:
64:8b:ad:b6:41:51:e1:eb:5f:3a:4c:ca:8e:61:d5:
91:3a:d2:8a:c5:3d:82:4e:81:c2:2f:93:97:19:e3:
24:61:7a:a6:79:48:62:6b:49:1e:c9:14:4a:db:3a:
5f:d8:35:44:e6:5a:aa:2e:30:2d:5c:5e:ac:17:83:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:89:46:62:EA:C1:E3:4D:A7:3C:5B:E5:D8:32:C5:4D:1B:A2:D4:AF
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4f:d2:c7:1c:ba:ed:22:62:84:45:53:89:ba:2b:b4:3f:ec:
16:06:26:eb:bf:88:f1:6c:1d:33:3d:a1:5d:30:48:c3:2f:b1:
8b:ef:85:7b:31:17:1d:31:1f:20:dc:f5:f0:f9:ea:6f:ff:b2:
e7:ca:75:29:34:90:26:41:05:cd:0f:ff:88:33:df:b5:e0:38:
f0:72:33:f0:9e:38:d2:e2:68:01:2d:96:5f:19:e6:86:51:ea:
79:8f:aa:fa:c7:7e:a2:78:ff:7c:c3:bd:96:61:64:42:cb:00:
ed:32:3b:32:d0:c1:68:35:02:4d:f6:47:74:ba:dd:68:3c:9f:
ab:01:30:cf:2d:ee:ff:ab:a8:67:61:28:30:61:fe:10:67:67:
e3:13:45:62:0c:e1:be:bd:11:85:9f:42:fd:64:2d:6e:d3:8d:
72:77:9a:48:0b:dc:6c:da:aa:6d:86:e8:ce:7d:a5:b7:e6:7b:
3e:18:0a:54:77:d0:6f:b3:a3:82:b3:8e:d9:e8:0d:39:19:ac:
0d:fe:12:e6:31:39:42:f6:a9:5b:43:ed:88:a8:a4:52:b0:f6:
b8:81:71:5c:e6:b7:86:90:04:58:ab:b9:5e:47:23:ef:e9:ac:
9e:45:44:e0:e7:5a:d9:a3:f5:a1:ac:17:9e:f4:ed:4f:85:1d:
a6:d6:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:33:42 2026 by rpki-client