Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: K+AU6z2Fv0Mw2L0HVVlYDGti/z1NkjawLgwSB5XEyh4=
Subject key identifier: 7F:C4:A0:2E:F5:44:62:4E:8C:4A:A3:5F:C7:C9:CF:EE:9E:D1:63:23
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 01A0C8FD048AF5CB1489C072C5584D7267D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0992
Signing time: Tue 22 Sep 2026 12:00:19 +0000
Manifest this update: Tue 22 Sep 2026 12:00:19 +0000
Manifest next update: Wed 23 Sep 2026 12:00:19 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: 82fuecIWgSnspHSLtSMkkNot3Pva8wayhA0CFnNIxrA=)
2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:04:8a:f5:cb:14:89:c0:72:c5:58:4d:72:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Sep 22 12:00:19 2026 GMT
Not After : Sep 23 12:00:19 2026 GMT
Subject: CN=7fc4a02ef544624e8c4aa35fc7c9cfee9ed16323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:17:cf:db:41:bb:e4:77:fe:65:37:0e:54:
be:0f:14:fd:dd:95:10:92:71:9e:6a:b9:8d:ca:a6:
c4:8d:2a:f0:5f:47:7a:30:c6:c2:14:f5:ba:3a:d6:
3c:c6:02:e4:b9:5d:67:36:59:b8:eb:67:29:db:3e:
2f:66:0e:90:8d:70:aa:b3:de:27:10:fe:3d:d5:c7:
87:39:a4:20:64:6a:23:4d:5d:50:41:6f:0d:dd:68:
7d:f0:c6:71:7c:9b:27:5c:a1:48:cd:04:46:e9:59:
af:20:bf:79:ab:59:91:2c:04:29:79:83:8f:19:f3:
60:d6:61:71:94:c2:22:46:b6:a3:2e:12:d7:71:19:
50:21:b9:72:bc:04:2b:73:db:55:b0:fe:3f:7d:1b:
01:3d:70:22:b2:5d:ac:a4:7e:6c:3b:eb:09:e6:5c:
58:f7:4b:98:ab:50:e8:6c:a9:e7:34:fb:d0:4a:c1:
dd:2b:a1:63:19:87:82:eb:75:f9:d8:54:af:81:c1:
21:f3:c4:f9:18:3f:ed:8b:ca:6c:7f:02:ba:48:24:
80:a6:dd:49:73:7a:be:57:b1:e5:ab:e1:9a:ce:a8:
77:79:c6:7f:05:fe:c8:07:b8:c4:b3:70:20:1e:4f:
18:fb:49:a4:4c:97:95:de:13:6a:a3:1f:3a:0b:a2:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C4:A0:2E:F5:44:62:4E:8C:4A:A3:5F:C7:C9:CF:EE:9E:D1:63:23
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4f:9c:5e:e5:4d:7c:aa:eb:4b:46:85:69:3e:69:3c:8b:f1:
78:d7:90:74:96:a8:de:1f:78:79:6e:b6:c0:a2:ef:3b:b7:a0:
9d:2e:bc:e8:68:3f:06:f1:97:55:04:bc:ae:16:4d:ed:54:fa:
6e:c2:c8:84:a6:56:e1:63:f9:00:8a:65:e0:ba:a8:f5:b5:ad:
1a:bb:87:8d:0a:59:41:61:e3:8e:e1:3e:81:84:75:9c:eb:4d:
80:59:a9:3b:79:0d:9f:9d:2d:39:aa:dd:b5:eb:85:a4:59:8a:
d1:ca:0f:d7:7e:ec:65:90:0d:67:48:85:15:b4:a5:8b:51:96:
26:e3:31:4e:04:61:29:fc:09:57:f9:a8:11:8c:77:c1:9f:1c:
bc:27:c5:1f:e8:97:29:3a:95:ef:cc:f5:48:e4:35:af:77:1f:
d9:03:b3:fa:41:9a:bb:d4:8d:44:a5:1e:56:86:ac:b8:1a:9e:
1b:af:91:2c:d8:3c:91:30:26:a4:fb:6e:76:ae:99:86:55:ab:
d7:8a:cd:60:7b:a6:56:c1:87:9d:63:ad:86:6b:40:0b:9c:f0:
c9:18:de:2f:64:49:82:a5:53:ea:80:ee:e6:8a:90:5e:76:79:
5f:01:ec:eb:97:cd:f5:23:30:d5:79:6e:58:87:e2:a8:7a:22:
fe:bc:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:18:57 2026 by rpki-client