Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: RgAQpcJRUmm8tRqH307D1pfN08dzFXcJoSgphPetolg=
Subject key identifier: 48:C9:F1:B2:27:82:D1:DA:57:79:B3:91:0E:9B:EC:9C:EE:8E:27:DF
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019EBFC880F594BB75C7A6F775D92CD183CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0C53
Signing time: Sat 13 Jun 2026 07:00:48 +0000
Manifest this update: Sat 13 Jun 2026 07:00:48 +0000
Manifest next update: Sun 14 Jun 2026 07:00:48 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: mlm8yqoS0ut1fTur/iUXOlyvHp3WCu4it61c7UaO+Cs=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:80:f5:94:bb:75:c7:a6:f7:75:d9:2c:d1:83:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Jun 13 07:00:48 2026 GMT
Not After : Jun 14 07:00:48 2026 GMT
Subject: CN=48c9f1b22782d1da5779b3910e9bec9cee8e27df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:55:60:5d:11:a4:f5:64:14:10:da:f4:4a:
65:eb:84:b5:59:cc:35:33:28:d3:fc:46:a8:b2:a8:
a0:fb:34:49:47:c5:3a:5d:b9:83:47:7d:d1:99:93:
53:93:4c:71:46:b7:36:2d:76:03:fe:dc:39:42:94:
a1:5c:83:fe:5c:41:31:1a:b3:ac:ba:fa:e5:79:a1:
16:2e:54:85:02:34:49:6e:f5:1c:29:33:d8:ca:0f:
3f:4b:dd:1c:6e:3b:09:d6:77:d1:78:33:ac:93:02:
ef:ab:70:fe:72:1d:06:79:a4:83:04:d9:e6:6a:5c:
e4:7a:1a:db:fd:5e:c0:d9:03:83:69:ae:ad:56:f5:
21:23:5b:6a:6c:cc:48:3e:75:8e:fd:fa:72:1b:b0:
4a:f3:fd:76:62:97:dc:4c:7b:4f:a1:13:66:79:9c:
91:44:e6:cc:e4:63:10:6e:39:4a:21:2e:ce:80:d0:
68:b0:d2:80:98:f0:31:33:c1:f3:e7:a5:2b:5f:b7:
2a:30:b8:8e:a3:a6:06:c3:3f:82:de:29:ee:07:86:
2e:13:db:16:3b:2b:2c:56:11:37:12:63:bc:fd:2b:
ec:d6:2d:51:c7:6d:ea:e8:55:c6:27:44:6f:58:30:
1e:6c:54:29:91:ee:c6:e6:25:af:0b:c0:77:fd:56:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C9:F1:B2:27:82:D1:DA:57:79:B3:91:0E:9B:EC:9C:EE:8E:27:DF
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:98:7f:a2:90:9b:ab:9f:17:79:69:49:33:1f:3d:8f:3c:09:
40:36:35:74:71:c6:61:7d:b0:b2:ce:3d:9b:f5:6c:10:b4:fc:
52:d9:5e:02:f6:ed:36:a4:c1:50:37:f8:af:f1:8d:6c:80:83:
f9:69:a0:bb:e5:17:89:31:af:24:80:46:50:3e:26:9c:2b:71:
fc:8f:c8:4f:70:8e:91:5a:c4:84:86:e5:b1:92:bc:e1:fc:1b:
f9:f0:17:12:6b:e0:bb:83:45:72:90:03:80:0a:58:e4:a7:d7:
6a:cd:96:05:2c:33:a5:14:3b:38:2d:8e:7b:1a:d6:04:9b:ec:
1d:03:5d:70:91:6b:32:2a:47:13:b5:99:5a:72:6b:fe:ce:37:
05:e3:50:2d:d4:c5:d4:6a:be:c1:5e:26:c0:4f:57:f7:85:66:
ba:67:53:e3:77:ba:fd:6a:d5:fc:cf:ed:22:11:8a:81:c7:51:
60:9d:5f:d0:aa:87:2c:7b:9b:d4:3b:90:2f:5a:17:94:7b:5a:
84:04:36:ec:84:9a:03:77:79:d9:e8:f5:44:a6:82:13:ea:01:
de:13:9b:02:d1:39:bf:6b:bc:fd:cb:38:b5:c7:c9:ef:d1:1b:
cf:10:5b:2a:6b:01:65:ab:e1:3a:fc:71:f4:cf:3b:1c:e7:28:
ec:6b:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:27 2026 by rpki-client