Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json)
Hash identifier: 8Mj1gmzBtt/35UASaeaucJuktaqRNr/rH22BMioLaPw=
Subject key identifier: E2:38:B0:AE:73:1F:A7:4D:1D:E7:55:CA:8C:BA:AA:F9:BC:33:CA:B2
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 019D38D2C74C90444997FCA7CC17BA298A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: jK6ZUPsNFkyKtYKTfMd87vm3Fl0.roa (hash: GUweVKKgWw2gQHZHD+EmHgTHUZnsZaLcXUcKT7YkfRk=)
2: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: zstIwC67eu7mCRu56z+WSHvSC7PioLETXyMvfkmB/SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c7:4c:90:44:49:97:fc:a7:cc:17:ba:29:8a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=e238b0ae731fa74d1de755ca8cbaaaf9bc33cab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:86:92:1b:52:b7:36:74:3e:27:56:02:83:
33:d2:7b:65:be:1f:e5:0e:e4:3a:63:f1:9e:a8:6f:
a1:4d:e5:14:1e:b0:df:78:c6:e3:85:9b:4b:35:2e:
8e:03:87:4a:2a:4a:59:ec:03:06:ec:1f:8f:3b:4e:
31:3c:ed:39:6e:63:15:e3:4a:65:dc:64:59:a5:27:
e5:78:c2:52:b2:62:31:5d:7e:64:d3:d3:59:05:75:
8e:0c:51:a0:6f:f3:77:0a:dd:ac:89:97:e4:c6:78:
3c:ed:ae:1f:af:e8:62:3d:6f:4f:b9:6f:f3:b4:d1:
7d:3d:f2:5d:9b:39:a9:90:a6:36:f5:11:82:03:2a:
50:a2:67:04:06:a0:d5:a2:7b:eb:5a:7b:93:cd:32:
8d:30:da:f7:3f:3f:42:a7:a6:12:0b:aa:6d:a5:4b:
1a:3d:55:59:0d:22:50:86:98:ca:cf:ba:46:6e:56:
9c:57:8d:42:31:a8:b6:d9:f4:9b:ed:79:d5:9d:bf:
f6:14:9d:5c:7a:3f:29:89:2c:d4:49:ae:2a:54:db:
45:0c:e0:aa:b2:41:a7:0d:3d:90:9a:4f:d8:d5:7a:
b4:8f:6f:c5:6a:d5:3d:a5:0d:18:92:ec:91:c4:bb:
6f:71:09:36:1b:5f:58:40:37:39:83:01:8a:3b:f7:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:B0:AE:73:1F:A7:4D:1D:E7:55:CA:8C:BA:AA:F9:BC:33:CA:B2
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:88:30:ba:b4:00:58:20:09:cd:f7:dc:54:99:8e:d6:10:7a:
6f:96:15:d5:e0:db:4f:aa:ad:43:0b:65:da:01:0c:ea:0f:72:
22:34:dd:3a:78:65:df:c4:73:d0:95:b1:3b:98:1d:fc:14:46:
dd:80:80:08:77:95:94:ed:55:12:a5:a2:bf:ba:7f:44:3d:1f:
a5:49:06:e9:f7:f6:fe:c0:8f:82:9b:7c:4f:01:65:c3:b5:8f:
fd:5a:9e:b7:48:2c:89:53:8a:a6:0e:8f:0f:b6:a8:eb:a5:83:
9a:ad:c4:33:fe:e3:c7:54:f9:b2:31:a1:24:7d:f1:bc:4e:24:
7a:90:67:15:4f:93:59:0e:6f:2d:66:12:18:c0:aa:22:8b:02:
f6:4d:e1:48:c4:d7:db:57:ec:35:a5:1a:57:ac:94:a5:8d:e7:
81:2e:d0:8c:d2:a6:85:9f:f9:cb:ec:fc:f1:7d:4b:90:f9:2a:
0a:94:3d:d4:27:a4:45:72:7c:c9:6a:a9:e6:bc:b8:4c:da:75:
90:54:71:b4:cd:4c:6d:6e:22:76:44:0d:b6:6c:63:3f:2f:71:
fc:02:6f:12:9b:6b:05:da:2b:da:3f:45:13:24:e3:36:15:13:
dd:7a:10:b2:ff:05:47:ec:8b:6b:0d:df:c4:62:3a:00:5c:f4:
15:cd:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:55 2026 by rpki-client