Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier: +rvVMPj52xju26HZqC89rzJQtgh/cpYA1sQV5HbozQ8=
Subject key identifier: ED:36:F3:96:E5:39:01:AB:DC:58:4F:03:11:E9:A6:30:92:2D:9C:B4
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial: 019D389C10B655BCA8FA07FED730CC0F1CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number: 0D24
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: 5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa (hash: UBIs7KWUwprkJo3madxcKdCqiT7JAPNDlFNCNOeuufY=)
2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: ewoZCBbq1wWbi+c13F7ypbl+YDnup/WA7NG3NYs+jyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:10:b6:55:bc:a8:fa:07:fe:d7:30:cc:0f:1c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=ed36f396e53901abdc584f0311e9a630922d9cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:6c:03:53:74:76:3f:9b:2b:d2:e4:4d:00:
40:5b:2c:fa:fe:27:e4:28:9b:67:83:b3:78:86:e0:
2f:5f:b2:c0:13:28:e8:7c:4c:0b:4d:03:4b:46:e4:
00:ff:81:53:da:d1:a9:4d:6c:21:f5:d3:46:e5:5e:
6a:d3:da:da:c4:ad:cf:e5:07:c9:46:cb:a8:a3:35:
eb:56:af:d2:4f:eb:e5:2a:fe:c9:53:61:a8:e4:6e:
e7:30:22:01:d5:94:b5:bd:b5:57:9e:09:81:68:92:
5b:b4:4d:97:6f:64:34:5f:ac:cf:53:c8:00:29:61:
a9:c9:d3:43:95:fb:af:ee:52:89:7c:dc:47:50:47:
c7:d0:8c:49:10:7c:d3:02:7a:d3:71:fb:8f:6f:77:
51:9a:76:a9:1d:c3:bc:3c:2c:36:5d:ab:08:3a:c6:
ef:e5:90:a5:53:77:ac:a3:a0:0b:24:e6:f0:cd:bf:
c3:b0:12:07:b7:73:01:45:90:e3:81:89:c7:f5:5a:
10:e1:bb:f9:64:1f:0e:17:cd:15:af:cc:cc:d2:7c:
fb:01:22:e0:0c:73:9f:0c:f0:e0:68:b4:66:eb:ec:
f4:7a:73:8f:91:b9:28:1b:1b:ac:71:c7:71:7e:5d:
a8:9f:b3:91:3e:38:ac:92:77:ed:b3:ff:b0:0d:ce:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:F3:96:E5:39:01:AB:DC:58:4F:03:11:E9:A6:30:92:2D:9C:B4
X509v3 Authority Key Identifier:
keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:28:05:9c:15:11:c8:82:0f:ca:d7:d1:78:29:12:7e:36:5d:
09:45:e3:2c:9e:c1:e4:d5:06:47:63:99:a5:3a:61:15:5f:32:
dd:10:5d:a3:13:0b:38:6e:88:7f:52:0c:eb:f9:63:d4:cc:22:
ff:da:41:38:1e:60:f9:d0:e3:27:b5:6d:ed:6a:57:c3:65:1d:
bb:a2:9a:32:1d:9e:ad:86:35:ef:1c:2b:8f:26:d8:3a:f7:10:
f7:2a:93:17:c0:6d:9b:cf:fb:2e:46:34:9f:12:a9:3e:44:6a:
9a:a6:d4:a4:66:1a:eb:6f:f4:68:22:bc:f5:33:c9:5a:6f:ce:
bf:22:4e:3e:93:d3:b9:0f:23:a8:2d:a3:84:9e:95:b1:d6:c2:
4b:41:11:47:5b:60:ef:8e:8e:3e:a1:72:b5:0b:ff:ce:ab:9f:
3a:9b:9d:93:c8:a9:c5:89:c9:fc:bb:ff:52:f7:3c:4d:50:86:
2c:f7:be:4a:bd:7f:bc:6c:ba:a0:b2:a0:c6:55:70:70:f2:27:
37:8e:9d:72:e2:91:00:a3:f7:2d:59:a8:99:d7:87:f7:b7:2c:
1f:2c:c4:d2:e5:83:de:e9:07:92:24:aa:93:71:84:a9:eb:fc:
47:f7:aa:66:b1:5e:7d:54:67:7e:32:37:af:2c:fd:b2:a7:b1:
13:01:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:46:10 2026 by rpki-client