Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: bqtNvqgAsnJu6LYn3ZfiMVLqErv1TXkME09WVUE557A=
Subject key identifier: 67:48:C2:D9:0A:9D:8B:15:33:45:D8:5B:3B:72:B1:01:6A:A5:6D:48
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 019D9A3E11C513ED53DCE65515339510E2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:00:51 +0000
Manifest this update: Fri 17 Apr 2026 07:00:51 +0000
Manifest next update: Sat 18 Apr 2026 07:00:51 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: Yj1MziMzBX5801icc94o40gNJDO80OrZw5EtLGTbaGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:11:c5:13:ed:53:dc:e6:55:15:33:95:10:e2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: Apr 17 07:00:51 2026 GMT
Not After : Apr 18 07:00:51 2026 GMT
Subject: CN=6748c2d90a9d8b153345d85b3b72b1016aa56d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:0f:41:00:fc:4e:c6:76:83:24:36:64:aa:
e0:bc:15:48:b1:e7:76:de:7b:d3:5f:da:fa:b8:1a:
3e:00:1a:2d:ca:c1:95:b1:c4:34:9a:06:d9:d1:26:
a2:e3:ba:be:33:8c:f6:74:f5:07:11:3f:d8:bf:77:
11:1f:e3:f5:39:1a:3c:69:c5:d4:57:31:2d:0a:85:
4f:5a:de:59:ee:59:a3:b3:14:d8:45:8a:5a:19:7a:
03:0a:53:20:9a:a7:2c:41:06:ae:30:03:e0:30:54:
ef:e1:3e:80:3f:5a:f0:62:8e:af:2a:c4:91:57:26:
3d:1d:ed:cc:af:bc:81:8f:6d:61:3c:af:cc:a2:11:
be:ec:f0:be:c3:14:96:5a:bf:01:57:e5:3c:1c:58:
10:04:5c:f6:1b:99:3f:1b:8c:69:38:b9:e0:5e:fe:
82:18:db:b4:84:5f:0b:c8:bf:9e:bb:aa:c2:17:76:
83:e2:6d:31:dc:e0:73:fa:b2:24:62:a0:31:33:a0:
f7:5a:56:9f:bf:30:86:d5:94:01:80:97:a3:51:0a:
94:4e:be:2a:f4:71:56:a7:bf:51:3a:29:cf:14:73:
49:9b:44:90:ce:d8:01:31:24:26:bf:fb:60:ca:4c:
74:a4:58:e7:fc:da:a1:03:a7:12:da:6c:ae:64:6a:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:48:C2:D9:0A:9D:8B:15:33:45:D8:5B:3B:72:B1:01:6A:A5:6D:48
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6d:68:b0:4d:01:49:df:d0:9a:15:02:b2:63:d5:64:04:b5:
7c:e3:2d:4b:21:93:87:16:8e:e3:fb:54:fe:5e:a3:c3:00:90:
39:c5:a4:cd:2c:c2:4c:65:2c:aa:71:30:76:21:bb:28:1c:54:
68:a7:03:36:bd:15:bc:fa:61:3c:2b:52:4a:a1:88:dd:ce:36:
db:d0:8a:59:b5:56:d6:c0:a6:3f:59:86:30:1c:c9:d9:fc:e8:
54:c8:fc:d1:10:ed:6f:56:e7:4c:47:2d:02:3f:b1:46:1b:6f:
60:fa:ba:37:de:58:14:ea:b8:3b:af:1e:83:23:98:4b:29:62:
9f:77:a5:22:33:cc:ba:cb:63:0d:4f:5b:dd:c3:67:a9:05:a4:
ab:b6:8b:b5:79:c8:64:de:86:53:cd:86:ef:a8:2f:e5:7b:44:
09:d6:50:ee:70:7b:19:4b:ae:66:51:10:a1:0c:7a:c9:ee:9f:
6d:2b:51:0c:26:0e:c0:7d:7a:d3:a3:68:90:9d:fe:16:44:b2:
2e:85:36:5e:08:22:62:45:73:88:3b:c9:f3:de:0b:da:29:fe:
3a:b6:d6:91:19:df:66:04:ce:28:7b:0b:cb:f3:db:95:36:c4:
00:a0:fb:6b:58:bd:7e:83:51:a3:57:e3:7c:d0:3b:cd:70:2a:
14:9f:3a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPhHFE+1T3OZVFTOVEOL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmY5NDQ4YTkxMGQyNTc0MTU3YTMwNDAzZjQ2YzExNzJh
ZWVkYjYwHhcNMjYwNDE3MDcwMDUxWhcNMjYwNDE4MDcwMDUxWjAzMTEwLwYDVQQD
Eyg2NzQ4YzJkOTBhOWQ4YjE1MzM0NWQ4NWIzYjcyYjEwMTZhYTU2ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3oPQQD8TsZ2gyQ2ZKrgvBVIsed2
3nvTX9r6uBo+ABotysGVscQ0mgbZ0Sai47q+M4z2dPUHET/Yv3cRH+P1ORo8acXU
VzEtCoVPWt5Z7lmjsxTYRYpaGXoDClMgmqcsQQauMAPgMFTv4T6AP1rwYo6vKsSR
VyY9He3Mr7yBj21hPK/MohG+7PC+wxSWWr8BV+U8HFgQBFz2G5k/G4xpOLngXv6C
GNu0hF8LyL+eu6rCF3aD4m0x3OBz+rIkYqAxM6D3WlafvzCG1ZQBgJejUQqUTr4q
9HFWp79ROinPFHNJm0SQztgBMSQmv/tgykx0pFjn/NqhA6cS2myuZGrSlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdIwtkKnYsVM0XYWztysQFqpW1IMB8GA1UdIwQY
MBaAFHJvlEipENJXQVejBAP0bBFyru22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYt
NjZiMTQxMTk0ZmQyLzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYtNjZiMTQxMTk0ZmQy
LzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtm1osE0B
Sd/QmhUCsmPVZAS1fOMtSyGThxaO4/tU/l6jwwCQOcWkzSzCTGUsqnEwdiG7KBxU
aKcDNr0VvPphPCtSSqGI3c4229CKWbVW1sCmP1mGMBzJ2fzoVMj80RDtb1bnTEct
Aj+xRhtvYPq6N95YFOq4O68egyOYSylin3elIjPMustjDU9b3cNnqQWkq7aLtXnI
ZN6GU82G76gv5XtECdZQ7nB7GUuuZlEQoQx6ye6fbStRDCYOwH1606NokJ3+FkSy
LoU2XggiYkVziDvJ894L2in+OrbWkRnfZgTOKHsLy/PblTbEAKD7a1i9foNRo1fj
fNA7zXAqFJ86Bw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:01 2026 by rpki-client