Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: rFiJxU+o1nsu9UjuJd1tI3Q9ndF+rTJjK459mxVVJ40=
Subject key identifier: 86:C2:DF:E9:94:3D:35:72:1E:7E:F2:E7:BC:BE:E6:5A:95:CD:2E:03
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019EBDA2C113CF49958EB57135781CE4E037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0883
Signing time: Fri 12 Jun 2026 21:00:20 +0000
Manifest this update: Fri 12 Jun 2026 21:00:20 +0000
Manifest next update: Sat 13 Jun 2026 21:00:20 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: Zex/njqfOwU5rnIIMXun57nmymZEPcfWhUwAFEH8yL0=)
2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:c1:13:cf:49:95:8e:b5:71:35:78:1c:e4:e0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Jun 12 21:00:20 2026 GMT
Not After : Jun 13 21:00:20 2026 GMT
Subject: CN=86c2dfe9943d35721e7ef2e7bcbee65a95cd2e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:d0:d0:47:b7:06:ef:b3:5c:48:cd:b8:ac:
00:77:81:7f:da:de:68:9b:ef:c3:74:e0:07:96:e2:
5c:f7:05:9c:dd:fa:fb:be:74:17:df:02:4a:bd:f3:
fb:34:e7:be:14:11:9d:ce:4f:91:bc:75:2c:50:ed:
81:41:9a:70:2e:56:a2:a0:f2:e0:b9:f8:26:49:f4:
83:e5:9c:89:cb:9c:43:27:5c:54:79:9d:98:1e:f8:
c4:8c:13:91:e7:a0:bd:a2:f0:58:c3:6a:46:80:24:
49:95:6d:12:29:2a:3e:5d:db:27:db:5d:43:5a:4d:
5a:9b:44:35:28:20:1f:55:89:fd:25:71:9d:98:41:
52:5c:1e:f6:4e:5b:89:4f:1b:39:f3:43:6c:92:17:
aa:36:bf:8f:97:55:f9:3c:f7:d1:a2:02:77:ac:f1:
d1:90:e1:e7:ff:c5:26:cc:29:ef:8e:7f:f4:30:f4:
87:b8:2e:80:6a:16:c2:54:ea:4b:3f:eb:9b:11:54:
31:7c:fd:43:79:c3:22:81:69:e9:e9:77:2b:a0:e1:
f2:9a:6b:4a:e2:04:3a:3b:ea:aa:3c:ea:87:a1:40:
ce:0b:17:35:ce:db:1f:15:59:d8:67:71:87:81:f2:
da:9a:c4:f8:4a:b9:ad:45:2e:74:81:b3:21:39:e4:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C2:DF:E9:94:3D:35:72:1E:7E:F2:E7:BC:BE:E6:5A:95:CD:2E:03
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0d:3e:55:7e:57:83:fb:e1:84:45:91:78:e1:33:4d:d4:3c:
e3:e8:d8:39:9a:78:59:b7:f9:6f:5a:fa:18:14:db:a1:58:a2:
e1:78:ec:6a:d2:27:57:a5:ca:61:31:32:c0:78:cb:67:8b:1e:
dd:e2:ff:00:cc:d6:f0:15:57:62:f4:84:d2:e4:5b:60:1b:0e:
5f:af:b4:a5:9c:ac:09:14:40:0c:1d:f0:78:d2:0f:6a:16:34:
29:67:8c:16:be:16:22:10:e2:00:34:e0:d0:b1:f5:4b:e1:1d:
07:55:42:de:72:7b:dd:78:c7:79:27:64:cb:6a:09:cf:3e:b4:
23:4f:65:ce:09:f0:de:52:1e:19:b7:31:45:b3:f2:cc:f4:27:
9d:24:a5:f0:d3:84:4c:1f:0e:91:77:98:0f:da:18:b9:ae:aa:
2b:22:2f:ae:69:01:b1:e9:1e:42:7a:c0:61:a5:d8:e8:d6:02:
36:0e:38:09:bb:0e:0e:df:03:99:ba:5f:db:7f:61:d2:30:23:
6a:0b:4f:a8:48:2c:f0:43:1e:c7:58:fd:40:93:72:49:32:1e:
c0:8b:61:0f:9a:25:d4:a0:c5:28:d8:c4:dc:44:b9:c1:41:73:
18:2d:4b:31:15:35:e9:f2:61:85:70:5c:fc:2f:9d:de:78:39:
1c:bc:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:01 2026 by rpki-client