Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: 3MfK4tDvfkSv/wpm87Ub1Um8yBE/t8EvYsNdNY3LXaQ=
Subject key identifier: C3:94:B5:35:C1:23:F9:0E:A1:F4:BB:38:29:96:37:93:E6:A7:91:79
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 01A17326EFC722B6051CE85D562B3217C20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 1753
Signing time: Sun 25 Oct 2026 13:01:33 +0000
Manifest this update: Sun 25 Oct 2026 13:01:33 +0000
Manifest next update: Mon 26 Oct 2026 13:01:33 +0000
Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=)
2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: YdRJ1/k6lrZMukAPrqJC/ZdwXjl4IU9j3nm4BeMmNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:ef:c7:22:b6:05:1c:e8:5d:56:2b:32:17:c2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Oct 25 13:01:33 2026 GMT
Not After : Oct 26 13:01:33 2026 GMT
Subject: CN=c394b535c123f90ea1f4bb3829963793e6a79179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:93:5e:b6:72:e0:d1:6e:a6:fe:e8:bf:25:
cf:a1:3b:5b:a5:36:7a:9a:5f:eb:ea:2f:cc:74:e3:
d5:48:d6:03:a6:7e:f7:5b:c0:c9:b3:e4:4e:4d:ec:
46:9e:ba:43:c9:ee:ef:0f:47:90:ec:62:fc:c9:4d:
8c:47:ac:30:28:94:92:6b:cd:90:e4:5c:49:26:89:
1f:4e:6c:dc:0c:b9:58:e6:aa:b5:25:e0:dc:50:03:
2d:16:27:29:f3:19:3d:ac:8e:dc:3d:ac:16:62:70:
2d:9e:b6:8f:8a:8c:da:69:0b:8c:2e:76:ea:ac:0e:
0e:c3:b6:31:41:e5:21:2b:ef:94:1b:68:73:d2:53:
99:c0:d3:d0:41:8d:d9:8f:2e:6c:77:4b:a4:23:70:
f1:5d:dc:fc:79:45:c0:64:13:f5:21:5f:a7:8d:4d:
7e:42:1c:7e:3e:f5:63:79:21:20:9f:83:8b:c7:d9:
f4:82:3b:2a:0f:2c:54:d5:6d:75:d6:30:ec:47:95:
ca:b5:86:03:44:56:01:36:e7:08:5b:67:99:db:9b:
98:e9:f1:f0:53:6b:88:42:c1:8e:c4:59:07:13:56:
7b:1b:1e:05:ba:bb:18:1a:a4:fe:a8:35:16:b7:01:
2e:d1:40:c9:e3:a5:e0:96:11:02:a7:02:6a:fd:a0:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:94:B5:35:C1:23:F9:0E:A1:F4:BB:38:29:96:37:93:E6:A7:91:79
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cf:fb:eb:30:3a:35:ac:27:da:ea:13:b6:ea:d0:32:1b:10:
31:b1:1c:47:0a:8e:27:e8:5c:1e:5f:b2:9f:74:58:50:6e:fb:
e6:cc:1b:43:39:86:7b:8f:21:a5:69:35:c9:ba:cc:75:48:db:
18:e5:fa:09:de:5c:7a:f0:9b:c4:37:29:7d:b9:d6:e4:cb:64:
ea:1d:04:a6:54:2a:1d:9f:7b:d2:2d:05:a3:45:b0:e5:dc:b2:
64:2c:b0:40:a2:62:64:7a:f6:fe:b0:0f:04:57:18:d0:86:22:
fe:1c:a2:f0:c2:50:07:56:37:5f:88:0d:8a:47:15:22:ce:0a:
21:a8:8c:7d:4f:51:42:f8:7a:e6:84:fc:38:d8:a2:df:3e:42:
12:fb:dd:3e:0f:cd:72:96:2a:71:14:30:43:a8:41:49:cc:ff:
52:ce:4d:f4:c4:28:13:85:b0:d7:f0:d2:dd:33:f8:30:de:51:
48:59:bf:71:bf:71:d0:b0:2c:f9:3e:94:4c:c4:61:8c:a6:52:
58:f2:93:cd:1d:87:da:dd:a2:b9:3a:2a:6d:cc:01:52:b8:64:
1c:c1:8c:9d:56:3b:b3:e5:8d:5f:2a:95:94:ed:62:82:16:9a:
aa:c5:ff:f6:25:19:da:11:46:32:bb:6e:7d:4b:02:fc:19:fc:
53:32:5f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:28:30 2026 by rpki-client