Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft
File: _cmkuOXbmY8RgGzH-d-PpZeZOMs.mft (raw, json)
Hash identifier: WDsoo42BliyRm/kwZAR84hELC4g0V3EaEF3xQDUg/mA=
Subject key identifier: 83:95:3A:14:5E:33:84:F7:D6:8A:29:D6:9E:75:8F:5E:64:AA:E4:8F
Authority key identifier: FD:C9:A4:B8:E5:DB:99:8F:11:80:6C:C7:F9:DF:8F:A5:97:99:38:CB
Certificate issuer: /CN=fdc9a4b8e5db998f11806cc7f9df8fa5979938cb
Certificate serial: 019D3909FC34937A1E899E9A219D746CE682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft
Manifest number: D7
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: _cmkuOXbmY8RgGzH-d-PpZeZOMs.crl (hash: 77t2nwe2yWgPvOQty0VCiXMEihnimOAO2RZ4aWI+4n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fc:34:93:7a:1e:89:9e:9a:21:9d:74:6c:e6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc9a4b8e5db998f11806cc7f9df8fa5979938cb
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=83953a145e3384f7d68a29d69e758f5e64aae48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:03:7c:0f:ec:3c:f8:de:b4:45:97:14:9a:
bb:e0:bd:6d:f1:6e:c6:3d:aa:f5:70:28:3d:69:3d:
6c:6a:1f:dc:2f:f5:63:85:97:1a:16:c6:b8:a4:f0:
33:4c:56:c2:ed:c0:41:90:1a:41:d9:f0:e4:6a:6c:
d3:e4:f6:e2:8e:d6:38:2c:0d:4a:28:a8:5e:13:4c:
7a:c2:6e:94:17:ac:1d:14:13:64:2f:ff:c5:69:29:
06:82:2a:ef:4a:2d:76:8f:3f:02:6c:b1:87:09:ca:
56:d6:6d:d1:20:47:48:6b:be:68:c0:92:6e:c5:07:
a5:fc:78:10:76:a9:93:d0:c8:77:47:97:77:a4:34:
df:5c:52:83:ba:9f:51:69:90:9d:59:66:4a:36:85:
14:d0:d8:68:30:dc:41:ff:5c:6d:31:0d:df:05:1b:
1c:70:0e:54:a1:9c:e3:7b:e0:39:df:bc:fe:18:66:
b8:55:80:7c:f1:9d:a0:ab:39:4f:7d:62:84:89:ba:
a0:ba:a5:7e:65:85:8a:88:be:45:de:3b:5b:27:98:
2d:99:61:c9:e7:b9:68:dc:aa:93:aa:96:41:86:45:
16:57:43:0f:14:4c:47:bd:c2:9f:74:05:54:25:f2:
07:9d:6d:95:9e:4f:f1:b2:30:5c:c4:39:11:1a:16:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:95:3A:14:5E:33:84:F7:D6:8A:29:D6:9E:75:8F:5E:64:AA:E4:8F
X509v3 Authority Key Identifier:
keyid:FD:C9:A4:B8:E5:DB:99:8F:11:80:6C:C7:F9:DF:8F:A5:97:99:38:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:64:42:ad:2b:11:6d:86:7f:6e:94:0f:ee:31:66:b0:2d:36:
5d:5a:4b:ba:a3:94:56:20:0c:a7:e6:7a:93:02:a5:b7:3d:2d:
c3:2d:8d:bc:4c:0b:8d:ac:10:25:2a:75:82:e1:44:08:63:3d:
df:68:d6:8a:62:2f:56:11:35:95:a1:a8:ed:dd:ff:e1:dd:0e:
70:c6:39:31:e1:b4:70:d5:1a:da:77:98:aa:dc:dd:1f:18:a7:
ed:14:2d:04:26:d8:72:25:5e:3c:b4:52:87:6e:28:34:2c:ea:
80:90:c3:ba:9b:66:83:aa:74:b3:81:3b:4b:03:e7:fb:e1:c2:
e3:29:2d:3d:92:90:63:1c:16:9d:e6:d8:a5:bb:8d:07:2c:a7:
b3:a7:06:f4:4e:7a:c9:df:4d:bb:b4:c0:7e:f5:bc:dc:a2:ef:
4f:ac:60:9d:ef:11:c8:69:2f:5a:63:d4:aa:25:74:c5:bb:e2:
20:4f:62:e7:cf:50:25:2c:bc:6c:c3:b5:fa:1c:00:39:42:10:
e1:51:40:49:19:91:8d:de:2c:4f:2e:55:92:d1:a0:38:bd:79:
f8:83:bd:97:95:40:20:50:cf:8a:e2:9d:91:fd:c9:16:6c:46:
e5:7e:40:95:6c:41:d2:2b:10:5b:95:cb:cb:1f:86:f1:6c:56:
11:a2:4d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cfw0k3oeiZ6aIZ10bOaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzlhNGI4ZTVkYjk5OGYxMTgwNmNjN2Y5ZGY4ZmE1OTc5
OTM4Y2IwHhcNMjYwMzI5MTAwMDQ4WhcNMjYwMzMwMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg4Mzk1M2ExNDVlMzM4NGY3ZDY4YTI5ZDY5ZTc1OGY1ZTY0YWFlNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEEDfA/sPPjetEWXFJq74L1t8W7G
Par1cCg9aT1sah/cL/VjhZcaFsa4pPAzTFbC7cBBkBpB2fDkamzT5PbijtY4LA1K
KKheE0x6wm6UF6wdFBNkL//FaSkGgirvSi12jz8CbLGHCcpW1m3RIEdIa75owJJu
xQel/HgQdqmT0Mh3R5d3pDTfXFKDup9RaZCdWWZKNoUU0NhoMNxB/1xtMQ3fBRsc
cA5UoZzje+A537z+GGa4VYB88Z2gqzlPfWKEibqguqV+ZYWKiL5F3jtbJ5gtmWHJ
57lo3KqTqpZBhkUWV0MPFExHvcKfdAVUJfIHnW2Vnk/xsjBcxDkRGhYljQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOVOhReM4T31oop1p51j15kquSPMB8GA1UdIwQY
MBaAFP3JpLjl25mPEYBsx/nfj6WXmTjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2Nta3VPWGJtWThSZ0d6SC1kLVBwWmVaT01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDhmMWEtMTU5OC00OGE4LWJhNzEt
NWQ4ODg2NmUzOGNhLzEvX2Nta3VPWGJtWThSZ0d6SC1kLVBwWmVaT01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NDhmMWEtMTU5OC00OGE4LWJhNzEtNWQ4ODg2NmUzOGNh
LzEvX2Nta3VPWGJtWThSZ0d6SC1kLVBwWmVaT01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmRCrSsR
bYZ/bpQP7jFmsC02XVpLuqOUViAMp+Z6kwKltz0twy2NvEwLjawQJSp1guFECGM9
32jWimIvVhE1laGo7d3/4d0OcMY5MeG0cNUa2neYqtzdHxin7RQtBCbYciVePLRS
h24oNCzqgJDDuptmg6p0s4E7SwPn++HC4yktPZKQYxwWnebYpbuNByyns6cG9E56
yd9Nu7TAfvW83KLvT6xgne8RyGkvWmPUqiV0xbviIE9i589QJSy8bMO1+hwAOUIQ
4VFASRmRjd4sTy5VktGgOL15+IO9l5VAIFDPiuKdkf3JFmxG5X5AlWxB0isQW5XL
yx+G8WxWEaJNrw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:04 2026 by rpki-client