Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: IBW0eMTlQ1H6pRxoA8ZbrhHfZGAFNp1Rj189agVPaF4=
Subject key identifier: F1:5B:7F:7D:42:12:0F:CD:D1:1A:A4:A8:AB:2C:64:CC:47:F4:C9:50
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 019D38D37358751B960A73F89BF19634A3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: F99ntdp2qRkWyX4GCUSsxJD7WV8.roa (hash: XZkkSfzBXZ21L3XovvCMvlzirbHA8+n/5A9z1OK+IY8=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: TZgBgBRecNMI3rGddP9Ch6ZX5uz63Xs0nVBKToRr8b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:73:58:75:1b:96:0a:73:f8:9b:f1:96:34:a3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=f15b7f7d42120fcdd11aa4a8ab2c64cc47f4c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:7f:46:61:b2:7d:4d:23:c0:d4:f7:b0:1f:
82:50:0c:6a:c3:7b:9e:8c:dd:89:e6:c7:7d:c0:81:
86:3f:d0:03:9d:50:ad:04:33:f4:4c:37:2d:6d:ad:
d5:9d:76:d6:c9:b3:36:e6:b4:83:6f:26:d2:42:2c:
17:7c:1e:da:8e:ce:0a:1b:d2:1c:dd:8c:58:2a:98:
3b:fb:e0:d5:39:5c:3e:dd:a9:b6:1b:6c:91:b9:26:
0a:5e:6d:fd:70:07:6a:24:df:59:ad:6c:72:f7:29:
bf:d5:6e:2e:33:36:45:36:a9:ff:45:4c:d5:e4:db:
d0:d1:4f:c8:24:ca:c7:b7:af:61:ce:e9:15:1d:33:
36:f2:b6:a5:53:ba:0c:b9:87:d8:77:e2:a6:0a:35:
b5:9a:8e:16:3c:e9:a6:ef:83:ee:56:3c:c8:63:c1:
de:6d:fe:34:b9:4a:e3:8b:47:ad:0e:9e:c5:7d:90:
f6:28:f1:23:33:16:2f:57:27:17:d3:39:dd:ef:cd:
3d:c7:76:0b:7a:46:67:df:33:84:ed:1c:89:26:02:
2f:49:0d:10:fc:f6:fa:53:07:7f:3f:d2:dc:b1:53:
a2:a6:44:99:07:3c:eb:d0:b5:14:c2:65:f7:24:25:
1c:a8:bd:5c:e6:d9:25:5e:02:81:dd:08:44:f4:03:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5B:7F:7D:42:12:0F:CD:D1:1A:A4:A8:AB:2C:64:CC:47:F4:C9:50
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b3:7c:62:db:f2:a8:84:f3:af:4d:3d:86:79:dc:a1:0f:43:
3e:64:b5:02:2d:da:e6:39:7f:a3:c8:e9:0e:56:3a:59:fa:66:
b1:ed:5f:48:10:c1:21:25:c1:e3:09:ac:32:d8:70:ae:f6:4d:
ac:90:ae:09:c6:da:04:0e:05:71:45:72:e9:1b:13:49:35:62:
25:d7:9f:8e:8b:6e:b4:64:6e:4f:90:71:aa:96:5a:1a:dc:6d:
da:6d:ba:50:0a:90:9b:27:f4:a1:ba:e5:5b:15:78:62:3a:a3:
22:f3:1d:d9:ea:02:96:19:ed:ba:0a:58:cd:d1:ec:05:8c:0d:
d5:aa:03:cf:a4:e9:b6:c1:00:45:f4:84:e2:1a:46:4e:68:c0:
c9:6f:14:fa:11:66:b4:0c:54:13:27:ee:df:81:2c:fb:78:1b:
a2:5e:22:71:ff:9e:0d:39:1c:e5:6c:cb:b3:0e:0d:25:70:4c:
8c:5f:f8:21:1c:58:26:d3:6e:e8:3f:3e:8f:77:0a:0e:7b:b8:
89:93:3b:04:6b:6e:d7:78:ee:43:d8:cf:62:e5:d5:da:16:56:
b5:8f:7e:f9:af:97:1a:dc:0a:5c:8b:d2:74:28:56:a7:3a:69:
ab:9c:48:1b:a7:ce:84:e7:c1:21:ec:2b:b5:f8:22:55:f0:b8:
c7:25:63:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403NYdRuWCnP4m/GWNKPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzEyMzA5ZWU5OGQ0NDJlYzhhNzY1MDEyN2ViMGU2MjE4
OTRkZjEwHhcNMjYwMzI5MDkwMTE0WhcNMjYwMzMwMDkwMTE0WjAzMTEwLwYDVQQD
EyhmMTViN2Y3ZDQyMTIwZmNkZDExYWE0YThhYjJjNjRjYzQ3ZjRjOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E1/RmGyfU0jwNT3sB+CUAxqw3ue
jN2J5sd9wIGGP9ADnVCtBDP0TDctba3VnXbWybM25rSDbybSQiwXfB7ajs4KG9Ic
3YxYKpg7++DVOVw+3am2G2yRuSYKXm39cAdqJN9ZrWxy9ym/1W4uMzZFNqn/RUzV
5NvQ0U/IJMrHt69hzukVHTM28ralU7oMuYfYd+KmCjW1mo4WPOmm74PuVjzIY8He
bf40uUrji0etDp7FfZD2KPEjMxYvVycX0znd7809x3YLekZn3zOE7RyJJgIvSQ0Q
/Pb6Uwd/P9LcsVOipkSZBzzr0LUUwmX3JCUcqL1c5tklXgKB3QhE9APgDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFbf31CEg/N0RqkqKssZMxH9MlQMB8GA1UdIwQY
MBaAFHDBIwnumNRC7Ip2UBJ+sOYhiU3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUt
ZmIyMzVkYmE3YjE4LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUtZmIyMzVkYmE3YjE4
LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrN8Ytvy
qITzr009hnncoQ9DPmS1Ai3a5jl/o8jpDlY6Wfpmse1fSBDBISXB4wmsMthwrvZN
rJCuCcbaBA4FcUVy6RsTSTViJdefjotutGRuT5BxqpZaGtxt2m26UAqQmyf0obrl
WxV4YjqjIvMd2eoClhntugpYzdHsBYwN1aoDz6TptsEARfSE4hpGTmjAyW8U+hFm
tAxUEyfu34Es+3gbol4icf+eDTkc5WzLsw4NJXBMjF/4IRxYJtNu6D8+j3cKDnu4
iZM7BGtu13juQ9jPYuXV2hZWtY9++a+XGtwKXIvSdChWpzppq5xIG6fOhOfBIewr
tfgiVfC4xyVjTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:07 2026 by rpki-client