Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: NoIFfICjPxXlCdG2XTAb+jEZs4On8s1yxhVNl6e5/d4=
Subject key identifier: 59:9C:21:21:0D:5A:0E:84:49:D8:8C:B8:39:A2:5A:22:E1:F7:3B:5E
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 019CAAC606D46F412A54A7FB472F43AB5EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: 8Fs5afin0mcSPN8irPkAzAIwgnPiTeQicKg6l2o3O8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:06:d4:6f:41:2a:54:a7:fb:47:2f:43:ab:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=599c21210d5a0e8449d88cb839a25a22e1f73b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:c6:62:e7:a9:5a:27:e2:77:36:6c:33:84:
bd:20:37:b4:7c:6e:3c:3a:8c:7d:b0:12:68:b2:d5:
dc:8a:d9:81:f3:05:16:cf:34:f7:60:d4:81:cd:14:
6b:c9:4d:47:50:ef:c4:48:e8:ea:50:2c:2c:6d:ea:
77:c7:d5:b9:9f:b6:81:69:52:a5:ee:ec:a2:87:c5:
86:73:99:94:12:81:a2:2d:5b:46:c5:1b:a8:6f:3c:
90:9f:23:cb:83:4b:71:cb:be:67:38:78:ba:7f:bc:
49:01:c9:80:a8:9a:98:ad:f9:b3:15:b3:0e:f0:81:
f8:3d:8b:38:4b:88:66:91:5c:0b:02:bc:6e:eb:1e:
ea:3c:be:c2:cb:36:bf:89:59:de:de:af:4a:f5:fd:
20:98:a9:1f:86:b3:6f:9a:c9:46:0d:7a:90:da:a1:
28:b2:7a:b9:18:ec:fe:1e:76:77:d1:d2:c1:75:a9:
cb:03:fe:00:08:75:43:e6:a6:83:e8:b0:e6:27:7f:
61:6d:d1:c8:ba:83:ac:38:64:36:77:d2:4e:d8:39:
04:47:f3:c4:7b:c9:4a:b8:b0:5c:e5:88:be:a3:c1:
29:16:8a:60:c5:66:a6:70:9a:85:31:68:ab:01:cf:
70:fb:a1:f3:e8:ee:22:e7:5e:62:7d:34:cd:66:35:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:21:21:0D:5A:0E:84:49:D8:8C:B8:39:A2:5A:22:E1:F7:3B:5E
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4c:22:72:14:1b:75:68:e6:8b:9e:48:83:05:7e:b4:e9:67:
7f:99:65:c5:b4:38:7c:21:20:92:f2:99:55:3c:73:d6:8f:fd:
b1:da:a8:2d:11:2d:5b:96:6c:77:d2:0b:02:2c:94:29:0f:b7:
1e:a1:e8:d5:0a:cf:b5:f2:12:35:1e:df:48:e5:99:e9:cd:92:
11:4d:af:a7:46:1b:ff:22:63:38:20:e1:4e:d2:ed:38:4c:f6:
5a:4d:9a:65:68:32:f3:97:9f:b4:b5:05:5c:ec:56:f5:02:cc:
e4:e2:d2:f4:ef:36:5b:48:29:d1:d3:a4:5f:be:2f:1c:89:9b:
76:a5:7a:da:96:d8:7a:c3:1c:c5:7c:72:8f:31:c2:1d:3f:ff:
bc:0b:99:a7:36:cf:f9:1a:fb:34:02:5b:4c:2f:f0:29:45:c0:
9a:54:79:b4:b4:b6:c8:d5:68:25:9c:9c:78:6c:a0:bb:37:11:
3d:83:ca:95:d1:05:aa:05:f8:93:96:76:6c:93:53:6a:69:77:
3c:37:20:ee:e9:33:3c:66:cf:7b:72:d6:ae:65:42:b2:34:00:
ed:4f:5d:94:85:a7:f6:6b:03:04:39:8c:c0:34:ab:40:bf:4d:
61:fc:2a:a9:1f:5e:05:ac:fd:c9:65:dd:99:73:7e:e3:4e:a8:
8b:bf:49:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxgbUb0EqVKf7Ry9Dq165MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmY5NDQ4YTkxMGQyNTc0MTU3YTMwNDAzZjQ2YzExNzJh
ZWVkYjYwHhcNMjYwMzAxMTkwMDMwWhcNMjYwMzAyMTkwMDMwWjAzMTEwLwYDVQQD
Eyg1OTljMjEyMTBkNWEwZTg0NDlkODhjYjgzOWEyNWEyMmUxZjczYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYfGYuepWifidzZsM4S9IDe0fG48
Oox9sBJostXcitmB8wUWzzT3YNSBzRRryU1HUO/ESOjqUCwsbep3x9W5n7aBaVKl
7uyih8WGc5mUEoGiLVtGxRuobzyQnyPLg0txy75nOHi6f7xJAcmAqJqYrfmzFbMO
8IH4PYs4S4hmkVwLArxu6x7qPL7Cyza/iVne3q9K9f0gmKkfhrNvmslGDXqQ2qEo
snq5GOz+HnZ30dLBdanLA/4ACHVD5qaD6LDmJ39hbdHIuoOsOGQ2d9JO2DkER/PE
e8lKuLBc5Yi+o8EpFopgxWamcJqFMWirAc9w+6Hz6O4i515ifTTNZjUG4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmcISENWg6ESdiMuDmiWiLh9zteMB8GA1UdIwQY
MBaAFHJvlEipENJXQVejBAP0bBFyru22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYt
NjZiMTQxMTk0ZmQyLzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYtNjZiMTQxMTk0ZmQy
LzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEwichQb
dWjmi55IgwV+tOlnf5llxbQ4fCEgkvKZVTxz1o/9sdqoLREtW5Zsd9ILAiyUKQ+3
HqHo1QrPtfISNR7fSOWZ6c2SEU2vp0Yb/yJjOCDhTtLtOEz2Wk2aZWgy85eftLUF
XOxW9QLM5OLS9O82W0gp0dOkX74vHImbdqV62pbYesMcxXxyjzHCHT//vAuZpzbP
+Rr7NAJbTC/wKUXAmlR5tLS2yNVoJZyceGyguzcRPYPKldEFqgX4k5Z2bJNTaml3
PDcg7ukzPGbPe3LWrmVCsjQA7U9dlIWn9msDBDmMwDSrQL9NYfwqqR9eBaz9yWXd
mXN+406oi79Jew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:12 2026 by rpki-client