Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: IZR7069lXGMnssuwddFa+Ut4z5y2EmfDFcdDPlsvZKs=
Subject key identifier: EB:07:64:80:9B:CD:83:4C:3E:1B:59:D5:C1:63:D2:4C:F1:DD:73:EB
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019D984FC73FD02D2B4CFD5C890AFBE4DEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0BBA
Signing time: Thu 16 Apr 2026 22:00:58 +0000
Manifest this update: Thu 16 Apr 2026 22:00:58 +0000
Manifest next update: Fri 17 Apr 2026 22:00:58 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: iFMQr4mwobFqoTrqptRYLbSQdHgEs0Cfhsi9fcgwkFc=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:c7:3f:d0:2d:2b:4c:fd:5c:89:0a:fb:e4:de:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Apr 16 22:00:58 2026 GMT
Not After : Apr 17 22:00:58 2026 GMT
Subject: CN=eb0764809bcd834c3e1b59d5c163d24cf1dd73eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:86:88:d0:c7:ed:53:89:57:c2:28:a0:14:
c4:22:ca:e6:50:3f:ed:0b:78:c7:42:a2:d6:3d:3e:
51:b3:61:7e:79:56:9d:1b:c9:05:aa:e8:c7:41:9e:
41:39:91:e0:c6:23:fb:d2:5d:37:e6:85:5c:f9:b5:
14:32:14:92:b0:96:ae:0b:b3:73:8e:d9:07:4d:39:
ae:2b:d0:b4:08:26:53:06:5d:59:41:fb:b1:2e:fb:
61:f4:9c:27:fe:99:67:35:47:03:59:13:20:77:92:
69:b5:87:8a:a3:10:5b:50:ab:a5:e6:e3:e7:ce:48:
9d:b4:a7:52:67:e8:6b:51:ab:16:d0:23:cb:a3:cd:
b4:c5:2b:59:a9:a3:ab:e7:7b:0c:2b:27:0a:0e:27:
2b:34:b7:db:f3:62:88:2c:4c:93:fa:d2:e1:de:30:
54:ba:63:2d:3d:c7:44:2b:56:f9:c5:b4:c2:88:75:
ad:67:fe:00:99:bf:a3:31:25:43:d8:9d:7a:b2:a3:
df:24:7b:23:c0:4c:27:be:67:51:e8:e1:e5:3f:c0:
93:d4:13:b0:9d:4e:c5:64:7c:83:97:b2:f6:a0:08:
70:8a:13:35:9d:4a:72:57:83:e8:29:7c:bd:e2:39:
f7:46:37:05:57:32:d2:73:44:28:ea:83:7a:d2:e9:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:64:80:9B:CD:83:4C:3E:1B:59:D5:C1:63:D2:4C:F1:DD:73:EB
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:dd:6c:31:d4:23:a7:0f:18:f5:4d:c3:03:ad:fd:5f:4b:bf:
5f:90:b8:b2:55:2c:c6:a8:87:90:e6:33:89:71:fb:aa:86:71:
62:e5:47:e4:c4:de:d8:19:22:af:f1:39:34:76:69:d1:38:25:
e4:63:9a:60:25:40:7a:3f:2d:ad:da:f9:a0:f2:25:6b:ef:7f:
9a:66:db:6e:7a:24:ea:88:6f:99:58:29:99:95:25:01:66:9a:
ae:f6:98:cf:7a:99:63:f2:20:6c:14:b6:74:06:20:2b:0f:14:
b2:e7:9e:10:2f:9d:d9:d4:64:fe:8d:0f:ab:ed:f2:25:01:79:
5e:ec:37:2d:64:27:c3:50:38:37:32:55:bc:4e:f8:f1:6b:c8:
d3:1d:ea:d5:8e:43:82:a3:14:d5:f7:21:2f:b0:fd:64:84:a9:
17:07:25:a8:ed:f8:a5:83:7f:78:27:92:10:72:47:c4:a9:5e:
02:2d:81:9d:25:55:a0:b7:c3:63:f5:92:24:a1:92:82:9d:49:
c4:76:47:53:ff:c6:b6:8f:ca:1f:da:cc:51:69:0c:68:9c:0f:
a7:78:e9:35:a3:18:59:9f:1d:0d:68:4e:d3:74:d6:00:67:e9:
0f:0c:68:92:c8:d4:0d:ae:09:59:10:46:ee:b0:22:d1:23:a4:
19:a3:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:04 2026 by rpki-client