Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: jd2clq6qsIws2TjxkueAbhPuAETO1jiWI1ODQv7gsdM=
Subject key identifier: E5:25:EE:55:AA:D1:2D:0A:15:84:FF:D8:58:D3:CC:75:71:59:BD:66
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019CAAC6C317D95BF2A73E6394A48E0FB812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0B3F
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: PX25nEblNLPeOx2NDe7f+HxNBAsRUSvxM1yPgRxAink=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c3:17:d9:5b:f2:a7:3e:63:94:a4:8e:0f:b8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=e525ee55aad12d0a1584ffd858d3cc757159bd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:42:58:58:73:25:14:21:83:87:2e:aa:2d:
86:5c:0e:b1:b7:75:da:01:3d:a0:b2:bb:54:97:6e:
0e:92:fe:3e:f0:e1:73:ba:de:90:70:b9:d3:8e:6e:
17:89:06:3f:49:5f:c5:11:ec:4c:c3:30:43:4c:15:
b9:40:b5:42:88:26:27:5b:27:de:13:d0:d5:44:d4:
f4:20:7e:2b:52:7d:c3:49:47:41:a8:41:4f:60:cc:
18:b4:f6:2a:e4:ab:06:76:32:22:fb:8d:bf:43:f9:
17:11:9b:14:ae:b6:86:22:4d:cf:9c:83:be:23:1d:
e6:fc:f6:c7:c6:33:ae:b5:e0:56:ed:7c:0e:f9:27:
1b:80:e9:50:4b:23:8d:2c:cb:8d:64:f1:82:0c:53:
d5:7f:03:7a:17:fd:46:30:b3:93:6f:0c:20:be:12:
79:ae:df:b5:eb:2a:c2:de:bc:e0:2f:72:d3:5f:e0:
61:68:d7:ed:07:59:e3:e8:4c:86:6c:38:76:08:94:
75:6d:1e:37:4e:08:08:da:fe:7e:a5:55:b9:fe:53:
db:b7:5f:35:33:54:65:94:26:cb:0c:90:0f:3a:9d:
ff:e9:57:b3:a9:74:80:44:1c:d4:a6:60:94:fb:58:
11:e9:dd:f3:5a:ee:f8:c9:c9:a8:8a:e2:55:1c:a1:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:EE:55:AA:D1:2D:0A:15:84:FF:D8:58:D3:CC:75:71:59:BD:66
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:92:83:36:4e:de:79:d9:2d:bd:1a:b9:8c:52:22:7b:4f:e9:
82:61:4f:ea:c3:1b:de:a8:25:15:55:8c:96:fc:58:16:ce:07:
91:f9:43:8f:5c:78:c8:3f:03:af:3d:17:7e:1c:4e:b5:1e:ad:
72:9c:21:e6:5c:0f:93:72:43:54:52:55:b4:af:a5:25:e4:35:
92:69:d3:47:ec:30:03:97:de:8b:62:46:77:39:70:7b:16:13:
c8:82:a0:a9:3f:06:44:2d:80:13:05:cd:fd:27:16:8f:51:2c:
f8:96:39:32:95:df:6f:23:1d:76:a6:5a:d4:c4:e0:3e:7e:2a:
ce:59:11:af:d7:f4:f7:4f:8d:8e:15:1a:46:a2:de:69:0f:59:
eb:93:5d:dd:27:e4:10:0c:a9:dc:2f:ba:b4:1d:c8:a1:76:9a:
4c:67:77:bb:49:ca:10:12:f8:5e:bc:75:ce:fd:67:f8:66:6a:
57:94:e3:0f:63:1c:eb:dd:71:5d:0e:f9:d9:15:ee:60:0e:50:
f1:51:f4:c1:89:4f:38:c2:c4:60:52:ce:8b:02:06:e4:2b:b0:
01:9e:cd:d6:69:ef:6f:f8:9f:6d:d2:ab:65:fe:ed:f0:3e:1f:
69:d6:43:43:da:0e:b8:4e:96:6d:23:3e:55:d9:36:f8:c9:c3:
c6:be:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:00 2026 by rpki-client