Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: 9zZOFMMJDbXbH9W/UTDLul4cggxjaWdH34StjUmUVQg=
Subject key identifier: F1:5E:00:C8:94:E0:09:5C:54:4B:5F:25:5B:79:04:A7:B1:62:45:E5
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 019CBAA6FCFC9528701062EBF71F1A60CAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0648
Signing time: Wed 04 Mar 2026 21:00:31 +0000
Manifest this update: Wed 04 Mar 2026 21:00:31 +0000
Manifest next update: Thu 05 Mar 2026 21:00:31 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: fv3yJ09XIL4MPrq3eMzRw8PkmXdbpT0+lqMJhSfBoGQ=)
2: MWM6QEDr90E-Gb18CyVaMUI1SUg.roa (hash: piGRt6COIMkm6UJI/Tww3fuE2c94SS0LGgDLgxHDNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:a6:fc:fc:95:28:70:10:62:eb:f7:1f:1a:60:ca:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Mar 4 21:00:31 2026 GMT
Not After : Mar 5 21:00:31 2026 GMT
Subject: CN=f15e00c894e0095c544b5f255b7904a7b16245e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:66:52:32:fa:a1:2b:91:28:55:a4:dc:f9:
d8:e0:d6:3f:df:24:30:a3:c1:5c:c0:5b:d0:dc:05:
a2:02:ad:a9:d4:79:41:eb:ce:e7:b0:14:8e:66:75:
6a:8f:bb:aa:74:22:8a:1f:18:ee:00:46:57:c9:de:
8b:0c:83:f1:a0:5f:3f:6f:48:9d:eb:e0:d1:e1:9f:
0f:de:0a:b2:ce:61:c4:35:d1:2b:49:70:77:11:b5:
07:8c:d5:c7:76:e6:d7:23:fe:17:32:8e:23:16:78:
61:a7:1a:08:90:4d:6d:9c:73:e1:39:3a:94:38:e0:
2e:81:2a:23:02:bc:34:6b:51:e4:98:7d:0a:91:47:
09:b7:4b:37:e2:38:bd:13:36:66:fd:b8:25:b6:93:
c8:71:e8:62:65:70:8d:5e:b3:cf:e3:01:76:92:7b:
95:25:e7:fc:45:fe:3a:86:b6:c3:a9:a6:0d:a0:17:
3c:a0:c7:e4:51:b4:55:7e:ec:09:67:b0:b8:fa:76:
fa:ab:9b:bc:a8:93:83:29:d8:36:b5:c4:19:08:75:
dc:db:1c:9c:63:fe:fa:19:71:3a:04:2e:48:06:2b:
3b:df:43:c1:8a:61:c7:c6:f2:1f:eb:36:ef:12:88:
86:60:6f:11:28:10:2c:91:3d:9f:10:4e:66:d3:23:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:00:C8:94:E0:09:5C:54:4B:5F:25:5B:79:04:A7:B1:62:45:E5
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:9e:98:f5:0e:1b:b1:b1:04:20:ca:23:7c:76:ea:0a:85:
7d:07:f7:51:61:0d:d1:df:78:5c:9e:87:c6:69:86:ec:13:39:
b1:e9:aa:61:1e:20:8c:02:29:3a:7d:19:5b:bd:a3:f6:23:c4:
b1:88:df:05:d9:ba:55:1d:7b:be:28:71:36:9d:7a:f6:15:d5:
03:74:3c:04:59:d9:e2:eb:bb:02:49:7a:00:8b:2e:36:20:f6:
42:2d:88:2a:16:24:18:3c:09:1c:e1:77:57:5d:8d:8e:37:7e:
b7:bf:ff:50:c9:7a:81:1e:44:04:4b:31:a5:07:1a:23:f0:eb:
68:6f:ac:4c:56:88:cb:62:da:08:cd:3a:ca:24:fa:77:ec:e9:
c4:b1:7b:83:e3:3c:62:5c:3a:a8:1f:e0:77:12:65:a0:05:c8:
48:96:05:1a:89:5a:7b:a4:10:9d:2c:28:7b:83:44:b4:03:13:
a3:0a:a2:35:ef:f1:73:85:09:b3:81:b8:83:09:ea:0b:d0:6b:
d5:7e:d8:98:80:fc:15:05:04:e9:d0:b4:f4:f9:5d:f4:b1:3e:
32:ae:6b:16:7c:ff:99:ce:20:d5:48:d9:83:ba:b9:9d:e0:bf:
60:c3:84:ca:8a:64:17:f8:a4:3d:74:31:99:72:d7:55:5b:0b:
c7:df:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 06:51:27 2026 by rpki-client