Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: lMHG0fGiwaG5s6aBpDc5oRJhKfYjuRQbAgTu0StxtOQ=
Subject key identifier: 8E:40:CE:E8:83:87:25:B8:C0:4B:36:FF:C7:7F:51:F0:C6:F7:F6:A6
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019D98187D2AC443BCBE76CB1F9943B23098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 07EB
Signing time: Thu 16 Apr 2026 21:00:34 +0000
Manifest this update: Thu 16 Apr 2026 21:00:34 +0000
Manifest next update: Fri 17 Apr 2026 21:00:34 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: QWNlmV6EO4YemXKXhVr/OcsNWFs4CUsOuiRR2LGMPSQ=)
2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:7d:2a:c4:43:bc:be:76:cb:1f:99:43:b2:30:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Apr 16 21:00:34 2026 GMT
Not After : Apr 17 21:00:34 2026 GMT
Subject: CN=8e40cee8838725b8c04b36ffc77f51f0c6f7f6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:1d:d7:ef:08:fb:85:67:82:8c:a0:e5:d5:
a1:bc:8c:7b:ff:b6:b6:ce:af:b2:04:b6:21:9c:54:
ee:d0:9d:31:49:c8:77:63:d0:5f:15:73:b8:05:af:
11:bf:9a:a9:26:80:31:a2:a1:8c:66:62:61:45:d6:
e9:e9:b6:8b:97:bf:ad:d9:d6:74:d2:c0:1a:06:d4:
29:e9:4a:ae:86:fc:c8:17:a0:a2:9c:f3:4c:3e:b9:
8e:dd:6d:54:cb:37:a7:47:e3:89:d8:21:a1:32:51:
f1:88:86:ce:83:78:60:9e:1f:9a:c2:38:b6:b2:56:
c7:d1:b2:0f:74:f7:b0:7a:3f:fd:5f:4d:80:16:1d:
c7:dc:22:1f:27:28:f3:48:c9:05:49:f2:58:b1:1d:
d6:55:0e:ef:df:be:02:2f:5a:2b:4a:c9:f0:92:c9:
d1:85:d5:5e:9d:69:e3:ca:61:e1:2c:6c:f2:7f:7d:
e4:35:8c:97:2d:47:63:24:f2:ad:68:89:0d:ce:20:
b1:f1:35:fa:f5:77:36:f6:af:b7:2c:fa:3a:b9:f8:
94:8f:d8:4d:6d:13:5a:fa:8e:88:f6:46:24:00:8a:
16:e0:be:51:25:81:31:8c:b7:f3:90:a5:3f:33:81:
cd:30:b9:05:42:39:93:8a:d9:0d:41:5e:6d:8b:f2:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:CE:E8:83:87:25:B8:C0:4B:36:FF:C7:7F:51:F0:C6:F7:F6:A6
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:de:71:ab:cb:70:25:a1:d2:e4:f1:7e:5e:0e:dd:fe:78:59:
77:83:c5:f6:3f:9d:1e:14:7b:f2:a1:36:af:cb:b7:10:17:ac:
89:6a:34:10:f2:21:2c:9b:57:56:9a:b4:65:00:de:0e:18:73:
d5:cf:89:c5:a3:a3:71:57:10:5f:67:59:c3:53:d0:84:22:2c:
d7:7a:24:cd:f3:f0:a3:d5:18:c2:35:04:08:aa:42:44:de:f6:
50:52:38:5a:e7:81:ca:99:a1:aa:32:d1:9f:ff:dd:d1:1b:ec:
b6:5e:10:51:09:21:b8:dd:bd:55:0b:81:31:27:24:e0:70:e2:
df:35:83:e5:f4:4e:a7:e3:72:70:e6:76:76:d8:cb:f0:65:0a:
28:8b:e7:06:38:91:03:07:6b:a8:2c:fb:4f:cb:50:a2:c9:af:
5a:32:e8:c9:db:2d:78:a2:f4:f3:22:00:56:d8:9d:5b:0a:bc:
02:a5:3d:c7:d0:d9:66:7a:19:fd:c0:78:3d:26:be:d1:19:b5:
cb:44:4c:21:e4:c1:49:d1:4f:91:94:c2:9f:15:e0:05:bf:b8:
a5:63:82:24:cb:76:87:c7:9e:fb:94:f3:69:6a:7a:c8:20:19:
7a:b5:f2:58:be:2b:42:a3:97:cd:76:29:4d:63:81:01:e6:68:
f4:26:fe:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGH0qxEO8vnbLH5lDsjCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj
YjFkYzkwHhcNMjYwNDE2MjEwMDM0WhcNMjYwNDE3MjEwMDM0WjAzMTEwLwYDVQQD
Eyg4ZTQwY2VlODgzODcyNWI4YzA0YjM2ZmZjNzdmNTFmMGM2ZjdmNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVkd1+8I+4Vngoyg5dWhvIx7/7a2
zq+yBLYhnFTu0J0xSch3Y9BfFXO4Ba8Rv5qpJoAxoqGMZmJhRdbp6baLl7+t2dZ0
0sAaBtQp6UquhvzIF6CinPNMPrmO3W1UyzenR+OJ2CGhMlHxiIbOg3hgnh+awji2
slbH0bIPdPewej/9X02AFh3H3CIfJyjzSMkFSfJYsR3WVQ7v374CL1orSsnwksnR
hdVenWnjymHhLGzyf33kNYyXLUdjJPKtaIkNziCx8TX69Xc29q+3LPo6ufiUj9hN
bRNa+o6I9kYkAIoW4L5RJYExjLfzkKU/M4HNMLkFQjmTitkNQV5ti/KeJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5AzuiDhyW4wEs2/8d/UfDG9/amMB8GA1UdIwQY
MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt
NTc0NjJjMjgzMjk0LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0
LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQd5xq8tw
JaHS5PF+Xg7d/nhZd4PF9j+dHhR78qE2r8u3EBesiWo0EPIhLJtXVpq0ZQDeDhhz
1c+JxaOjcVcQX2dZw1PQhCIs13okzfPwo9UYwjUECKpCRN72UFI4WueBypmhqjLR
n//d0Rvstl4QUQkhuN29VQuBMSck4HDi3zWD5fROp+NycOZ2dtjL8GUKKIvnBjiR
AwdrqCz7T8tQosmvWjLoydsteKL08yIAVtidWwq8AqU9x9DZZnoZ/cB4PSa+0Rm1
y0RMIeTBSdFPkZTCnxXgBb+4pWOCJMt2h8ee+5TzaWp6yCAZerXyWL4rQqOXzXYp
TWOBAeZo9Cb+Mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:11 2026 by rpki-client