Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: 482fLVMtZJJ9YOwshb/8w48EqXBTajde8FWGADgHR18=
Subject key identifier: 74:55:A9:63:59:E4:8F:29:04:03:88:3A:EF:D4:37:9A:33:39:E2:15
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019CAA8F6A0E18FE78424C9139A1ACB88E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0770
Signing time: Sun 01 Mar 2026 18:00:51 +0000
Manifest this update: Sun 01 Mar 2026 18:00:51 +0000
Manifest next update: Mon 02 Mar 2026 18:00:51 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: RoxV+t11KoUHWMcv7oiW6gcjcPdNuph7kk1RlODjANk=)
2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6a:0e:18:fe:78:42:4c:91:39:a1:ac:b8:8e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Mar 1 18:00:51 2026 GMT
Not After : Mar 2 18:00:51 2026 GMT
Subject: CN=7455a96359e48f290403883aefd4379a3339e215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:63:ba:c7:fe:bc:20:f7:2e:d6:a0:e3:bd:
f6:7b:c7:18:9e:31:42:d7:f7:15:26:80:2c:d1:04:
fe:0f:0b:a3:f2:a1:e7:32:ef:e7:21:06:dc:d2:ce:
8b:2e:7b:5f:93:44:76:1b:93:f7:c5:83:10:cc:37:
64:11:87:b4:32:1e:2d:8f:b7:03:c8:5a:5a:fd:12:
a4:10:4a:24:c0:dc:c5:fb:9d:0f:98:85:02:41:0f:
32:5c:9f:0f:b9:46:b3:9e:13:ef:34:26:8b:42:3c:
c1:ca:3e:2a:15:59:bc:dd:8e:41:ba:1b:59:11:4d:
92:72:ae:32:b9:ad:17:c1:53:74:f8:81:06:e5:f5:
c6:c0:ad:65:1d:3f:13:67:bb:d2:ff:f6:26:60:ca:
31:f7:ee:6a:0e:4a:14:a2:fa:1e:b9:03:3d:fb:89:
00:04:de:cd:8e:de:5f:95:cd:da:c7:d1:68:61:60:
1c:4c:e1:64:5e:53:75:22:79:4d:a3:54:cb:68:56:
e3:6f:b0:24:c9:87:90:be:76:68:d0:0f:01:19:c6:
28:d3:9c:ff:df:d2:87:49:2e:64:b6:61:05:b3:26:
f9:61:15:05:fe:2f:4c:fa:b7:4a:d8:59:b7:b4:65:
44:e5:65:31:fb:2c:40:ff:e0:f3:af:62:ff:06:f4:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:A9:63:59:E4:8F:29:04:03:88:3A:EF:D4:37:9A:33:39:E2:15
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:ec:7c:02:eb:4b:4b:90:cf:1e:ee:16:03:1e:0a:ff:b2:
56:fa:51:06:b2:1a:4a:97:81:00:79:13:5b:c8:da:2c:e1:d5:
be:ce:24:87:ef:ea:f8:55:0b:b5:a6:01:14:73:64:24:ac:b9:
8a:b3:b3:d4:b9:ff:4c:3b:09:63:37:77:3b:aa:bd:08:c4:f2:
f2:02:45:15:0d:15:51:32:cd:1d:07:f0:d9:f8:77:95:b6:8a:
48:e1:f2:85:c2:48:45:32:4f:8a:2d:d9:43:7c:ed:33:d5:de:
21:9a:12:17:ad:57:b1:6b:d5:6d:8e:fe:ab:22:f3:66:76:ab:
9d:38:49:dd:ec:fd:9a:10:c0:ab:95:63:6f:d7:a7:f7:5b:c7:
4d:51:38:e1:51:21:79:c2:7b:52:5a:a1:2f:64:c3:0c:9e:67:
6f:9e:65:f0:c5:b8:61:44:30:e1:b9:37:ff:93:15:88:c9:b0:
1d:f6:60:da:26:51:b6:67:09:a5:1a:d6:32:51:cc:e8:33:8d:
66:86:b3:e2:f0:93:74:dc:21:36:09:55:0f:1a:b3:7d:e4:df:
22:a2:31:95:51:30:58:44:7c:bf:a7:2b:a5:88:9f:ec:1a:1d:
32:8e:3e:c9:89:ea:50:1f:be:50:f2:30:7d:2a:23:5a:be:9f:
ac:10:d4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:43 2026 by rpki-client