Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: TgqD0aoxJw9fS25q9RrNxlg1UCx2R/ZSTKkCiIIwB24=
Subject key identifier: 6F:D4:81:92:27:FF:D8:B4:F6:1D:B3:7A:BB:E3:13:4D:47:C3:C7:7B
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01A06D952EC570FFF511EBE105B9EACCAD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 104D
Signing time: Fri 04 Sep 2026 18:01:28 +0000
Manifest this update: Fri 04 Sep 2026 18:01:28 +0000
Manifest next update: Sat 05 Sep 2026 18:01:28 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: e257SzYy/t1+5k0AE7gAaQTbYLedRBo8+2muxuer2M8=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:2e:c5:70:ff:f5:11:eb:e1:05:b9:ea:cc:ad:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Sep 4 18:01:28 2026 GMT
Not After : Sep 5 18:01:28 2026 GMT
Subject: CN=6fd4819227ffd8b4f61db37abbe3134d47c3c77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:51:53:ab:cd:70:c2:0c:f8:51:ca:72:e1:
a3:a5:22:e3:d8:98:c7:13:3a:e4:32:3c:d4:97:db:
2e:04:97:a7:87:e3:69:91:b4:a1:c7:44:78:a2:af:
d9:85:23:f2:f7:85:67:2f:39:fe:9b:0a:c9:7c:d2:
90:9f:5f:a6:c6:37:4a:3c:fc:42:b1:26:c7:41:e8:
61:81:9d:a0:c7:a4:d6:48:c0:2b:7d:e3:8a:7f:91:
c3:e6:9e:df:66:0d:c5:58:c8:82:14:b1:0b:f5:de:
dc:0c:10:a0:be:c0:55:44:53:7c:f7:0a:b9:4b:47:
4c:68:b1:d2:d6:87:50:1d:ea:93:d6:8f:1e:83:ba:
ed:94:28:82:fd:cb:9b:54:af:d9:fe:d9:bc:b8:73:
70:b3:8d:78:89:07:64:4f:a7:e8:36:3b:a9:b2:c6:
17:66:42:24:f5:59:16:5e:23:06:05:c9:e6:4d:a8:
c5:cc:e7:76:cf:3c:ec:b3:c8:d9:d8:d6:3c:8b:8e:
a7:a6:ab:4a:8f:1f:f8:c9:69:41:48:9d:92:67:3f:
1e:4c:bb:d7:a9:f0:f1:e7:03:f2:08:17:ef:d4:1b:
5c:e4:33:be:ae:ee:42:5a:60:ad:fc:98:7b:2d:5b:
f1:af:34:e0:48:ec:a1:5c:be:b7:c8:a0:86:f6:24:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:81:92:27:FF:D8:B4:F6:1D:B3:7A:BB:E3:13:4D:47:C3:C7:7B
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5e:3d:d0:d6:df:1b:8b:13:a1:e6:eb:be:54:02:0f:52:e1:
6b:80:60:d5:83:aa:c8:bc:fa:b1:78:d3:07:56:7d:ef:dc:17:
1b:58:44:4b:e2:70:80:fe:fa:80:2e:be:65:cb:a6:ec:4b:93:
59:d1:e3:e6:c2:6b:8e:1d:98:a2:1d:4c:15:aa:a8:01:e7:55:
d1:60:75:96:53:33:84:a2:24:11:e1:0f:d7:03:b5:74:a4:23:
82:1e:62:0c:3d:64:68:6d:db:b2:e8:d8:c5:13:b3:40:ad:f3:
55:74:b7:3b:60:66:94:a8:0d:b6:f0:7a:37:a0:97:81:f5:6f:
26:4b:b7:02:0d:b9:50:a1:04:fb:e7:5f:ff:94:b9:85:6f:ac:
f3:38:9f:2f:5a:cd:3c:27:e9:dc:d9:75:b5:4e:9f:2f:ec:6b:
98:2f:82:cd:aa:2f:73:38:8a:71:bf:79:26:a3:f8:56:f9:2e:
19:a8:d2:f5:4f:ce:5c:3f:76:75:ce:fc:c5:e1:20:dc:17:9f:
79:c4:7d:f3:97:bd:9f:0f:c5:68:9c:39:ff:1c:aa:1f:36:67:
3c:e9:9c:84:a4:9d:9e:d0:dd:15:81:6f:73:9e:c1:3c:ad:f8:
2a:13:3b:c0:f3:79:9d:b8:a6:da:a9:51:6c:fb:84:d7:97:ab:
d3:c1:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:44 2026 by rpki-client