Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: ihArZ2k39MB2RcHBFF8ZGjJAIbUsJra7KRFCCFsDlyM=
Subject key identifier: FE:E3:F6:4E:77:99:77:8D:D2:C9:F2:95:C1:33:39:0E:64:BF:25:71
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 019D37F6F49B0E410F8D0C298243860C6B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 05:00:24 +0000
Manifest this update: Sun 29 Mar 2026 05:00:24 +0000
Manifest next update: Mon 30 Mar 2026 05:00:24 +0000
Files and hashes: 1: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: Z/9RWdy7/6ZkF01hIyWETM2FnFNe4FwCAeATEN8H0WY=)
2: kghyh_nxdTf25rPoKF6M0zemjIY.roa (hash: ngurKcfdQu5xMulMoMEszSDNjnNbW5VunkobEE1hVdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f4:9b:0e:41:0f:8d:0c:29:82:43:86:0c:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Mar 29 05:00:24 2026 GMT
Not After : Mar 30 05:00:24 2026 GMT
Subject: CN=fee3f64e7799778dd2c9f295c133390e64bf2571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:59:73:0a:0d:63:2b:3a:6a:10:4f:a8:4b:
70:c3:31:12:35:18:22:8b:f7:d2:3b:ea:6b:5a:9a:
df:65:b2:9e:66:d1:40:a4:57:3a:7f:65:73:38:b8:
48:fa:1f:38:b0:83:d5:8c:15:33:7a:0f:d1:7c:4e:
61:a1:ba:6a:05:a5:2d:77:de:4b:58:12:f7:f7:08:
15:7b:7c:91:74:03:29:81:8a:c0:db:33:26:74:93:
5e:ed:5f:d7:ce:29:b3:9a:ec:ef:8a:a6:9a:1a:f0:
cd:44:58:f9:0f:c1:7a:6f:3c:22:ba:d4:a7:b1:10:
af:0f:bf:84:4d:ea:00:e4:e2:d8:7d:c0:b6:41:9a:
59:a5:19:01:e6:de:ee:d5:d1:7a:76:97:0b:2c:aa:
dd:6f:0c:be:89:b1:af:06:d1:1d:af:8a:f1:24:4a:
08:ad:70:f9:b1:aa:c1:ad:6f:e2:70:4b:d6:c3:55:
8f:c7:8d:b5:66:f6:ed:87:ae:c5:78:a3:6b:43:30:
47:05:5c:54:83:9f:cc:69:f2:a6:f9:f3:18:86:ab:
28:d8:0f:2a:10:86:c3:fa:6d:e7:b0:ae:9f:2e:e4:
b3:33:88:29:f5:7f:5d:07:24:e6:fe:d7:79:f8:10:
1b:78:33:f8:3e:69:19:dd:99:b7:ae:20:50:ef:ba:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E3:F6:4E:77:99:77:8D:D2:C9:F2:95:C1:33:39:0E:64:BF:25:71
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:68:44:e8:aa:05:8e:fa:de:3b:1a:25:78:3a:02:d9:b4:5b:
dc:86:b9:1d:46:9b:aa:f0:a9:b1:18:ec:d9:ad:e6:34:cd:d4:
38:84:de:f1:c4:54:6b:8e:df:09:14:50:14:33:65:6e:72:e2:
26:8f:ea:c3:59:d6:45:fa:86:fb:4b:ea:05:94:52:cb:2a:6b:
f0:11:ad:02:5d:b7:32:6b:eb:ee:de:8a:d7:da:9e:19:50:97:
d4:25:33:7c:9f:7f:0a:50:6d:69:52:66:13:c0:72:9e:64:ce:
d6:97:b5:23:7f:e8:e8:da:56:46:e2:fe:98:89:12:6a:97:98:
18:59:b5:a2:1a:9d:ed:0c:37:b3:b6:31:d9:27:bf:15:2f:aa:
46:20:57:f5:a9:39:6f:2d:e1:d8:45:2c:41:56:9b:87:80:e4:
69:aa:14:7d:e6:06:e7:43:b4:08:7e:2c:16:1d:d4:b6:2c:4e:
55:83:1c:85:04:4d:83:84:1d:c6:80:36:3d:39:b9:f4:8e:9f:
71:61:5e:40:7e:ba:42:98:02:80:86:00:d9:93:43:9b:1a:09:
14:cd:9a:dd:b7:b9:59:07:7b:d5:e1:cb:ac:a5:ee:c8:a1:b9:
da:33:34:33:87:da:36:e9:99:d5:e0:6a:ed:fa:06:cc:85:0c:
60:61:c2:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vSbDkEPjQwpgkOGDGt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMzliNjkwNzhmOTZjYWJhZjcxOGEzOWJiNTg2NzhhZWFj
MWNjYzIwHhcNMjYwMzI5MDUwMDI0WhcNMjYwMzMwMDUwMDI0WjAzMTEwLwYDVQQD
EyhmZWUzZjY0ZTc3OTk3NzhkZDJjOWYyOTVjMTMzMzkwZTY0YmYyNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlxZcwoNYys6ahBPqEtwwzESNRgi
i/fSO+prWprfZbKeZtFApFc6f2VzOLhI+h84sIPVjBUzeg/RfE5hobpqBaUtd95L
WBL39wgVe3yRdAMpgYrA2zMmdJNe7V/XzimzmuzviqaaGvDNRFj5D8F6bzwiutSn
sRCvD7+ETeoA5OLYfcC2QZpZpRkB5t7u1dF6dpcLLKrdbwy+ibGvBtEdr4rxJEoI
rXD5sarBrW/icEvWw1WPx421Zvbth67FeKNrQzBHBVxUg5/MafKm+fMYhqso2A8q
EIbD+m3nsK6fLuSzM4gp9X9dByTm/td5+BAbeDP4PmkZ3Zm3riBQ77oU+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7j9k53mXeN0snylcEzOQ5kvyVxMB8GA1UdIwQY
MBaAFHE5tpB4+Wyrr3GKObtYZ4rqwczCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWIt
MjBiMDI0YzZmYzJmLzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWItMjBiMDI0YzZmYzJm
LzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2hE6KoF
jvreOxoleDoC2bRb3Ia5HUabqvCpsRjs2a3mNM3UOITe8cRUa47fCRRQFDNlbnLi
Jo/qw1nWRfqG+0vqBZRSyypr8BGtAl23Mmvr7t6K19qeGVCX1CUzfJ9/ClBtaVJm
E8BynmTO1pe1I3/o6NpWRuL+mIkSapeYGFm1ohqd7Qw3s7Yx2Se/FS+qRiBX9ak5
by3h2EUsQVabh4DkaaoUfeYG50O0CH4sFh3UtixOVYMchQRNg4QdxoA2PTm59I6f
cWFeQH66QpgCgIYA2ZNDmxoJFM2a3be5WQd71eHLrKXuyKG52jM0M4faNumZ1eBq
7foGzIUMYGHCjw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:36 2026 by rpki-client