Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
File: CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft (raw, json)
Hash identifier: dwk5ZbjhvBzEDvIw4fBIUIrzn3cC/miMlQLGBPpJsBo=
Subject key identifier: 7C:8F:59:A8:94:6B:C9:CD:89:96:40:6C:B2:96:30:0B:61:09:37:5F
Authority key identifier: 08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE
Certificate issuer: /CN=08c7b65ba6659e27570773c508558754eb490dde
Certificate serial: 019D39E55C28042A450BFEBBE5E0C9A93DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
Manifest number: 0200
Signing time: Sun 29 Mar 2026 14:00:25 +0000
Manifest this update: Sun 29 Mar 2026 14:00:25 +0000
Manifest next update: Mon 30 Mar 2026 14:00:25 +0000
Files and hashes: 1: CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl (hash: T8cJ5GPvcJ/Os1wq6kGjKq1oVaq9j7czud0uCZm9EPk=)
2: SRXdpHT57ULX4WKXkvYrazem0ic.roa (hash: ee1vZ+vWObcfNj4Y7l+2NN7pUFsGmvTOn9r3vlBcOP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:5c:28:04:2a:45:0b:fe:bb:e5:e0:c9:a9:3d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08c7b65ba6659e27570773c508558754eb490dde
Validity
Not Before: Mar 29 14:00:25 2026 GMT
Not After : Mar 30 14:00:25 2026 GMT
Subject: CN=7c8f59a8946bc9cd8996406cb296300b6109375f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:ff:16:12:3a:84:01:a4:8d:99:a6:fe:73:
82:8d:2a:50:74:c2:ab:9a:cc:f1:a7:8b:b4:74:49:
9a:37:20:48:91:be:42:6e:8f:38:3a:ec:86:61:e3:
bb:1a:2f:fe:83:a0:1a:fb:1e:bf:0b:85:c9:28:7e:
0b:3b:18:e0:27:0f:dc:88:9e:e0:24:ea:08:ed:6f:
5f:8d:12:a1:b2:57:af:bd:fd:12:5f:16:1f:c6:2a:
91:18:ce:26:6e:b5:f5:e8:b1:bb:fe:99:58:7f:cc:
32:b6:b6:9a:ad:84:0d:ee:4d:88:ca:a3:31:80:36:
60:e7:e8:19:ab:36:fc:43:9e:96:f3:f2:68:e1:b7:
96:71:ed:5c:d7:e3:89:06:d6:2a:cb:57:11:f3:c6:
0b:17:30:5f:f9:c4:f9:ee:af:04:4b:9c:b2:7f:53:
b5:75:9a:6a:d1:5d:f7:a7:50:81:22:92:7a:37:17:
c6:23:6f:7f:3f:89:d0:cc:e2:d3:97:bb:02:76:f1:
de:ef:2b:6a:a7:84:24:ec:66:a1:73:68:a2:70:f3:
09:58:38:48:81:36:4c:c1:71:6f:84:85:08:2d:6e:
1d:14:60:74:9c:86:79:4e:ac:41:14:75:fd:c1:b9:
cf:52:0c:93:87:aa:fe:cb:82:26:bb:98:fd:f2:86:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8F:59:A8:94:6B:C9:CD:89:96:40:6C:B2:96:30:0B:61:09:37:5F
X509v3 Authority Key Identifier:
keyid:08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e9:05:15:4b:9e:d2:dc:e4:81:37:38:34:44:06:70:49:2e:
1d:47:a9:6b:df:f5:25:e6:b2:e4:37:8e:bf:86:17:32:47:2b:
09:a0:8e:56:2c:c3:59:91:be:74:74:3c:de:a5:5b:2f:db:0d:
7b:ed:d4:c6:d5:ff:9e:79:1c:c1:6f:d1:20:dd:77:25:92:cd:
73:fb:48:a9:09:6e:95:63:b5:fc:38:86:36:24:62:98:3b:cd:
93:d0:d6:a9:61:25:85:73:23:19:e0:ef:16:33:3b:f5:ba:7b:
fa:dd:fe:e7:63:20:a8:c6:a8:be:16:10:28:c9:a0:52:47:28:
97:18:f0:1e:ee:ad:60:37:d1:da:f8:0a:4b:83:b6:99:0a:67:
e8:15:7d:5c:2b:1d:2f:7d:a2:f4:3a:1f:19:26:3a:55:d4:49:
a0:f9:e7:b1:58:fb:42:15:cb:44:fa:81:56:a5:f0:83:49:22:
54:88:08:cd:f8:90:d4:b6:e7:17:c9:fe:11:a9:ce:b2:71:82:
db:23:b5:3d:de:16:2d:44:9c:dc:ed:35:ec:a5:7d:3d:50:1f:
95:e3:6a:a8:5e:f8:6f:c4:93:a4:03:c3:3c:f2:a8:3f:97:b9:
7b:1e:5b:14:da:a7:29:79:04:96:be:7a:30:f1:b0:aa:fa:47:
1c:6d:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:24 2026 by rpki-client