Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: mF8cj9wm8mweAykDj9r9tVX2oijq1wEeCz6A4QO86TA=
Subject key identifier: BC:8D:5B:4B:D2:66:FB:83:4D:3C:A5:46:8A:C1:F6:1C:83:96:0C:D5
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 019CAA58A0B1552F5A1DDE1A641E8B9D7CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: viXO+/gc6gwmrSia1Y4yBPJkxp8A2ARNKJf/HG31adA=)
2: j63EUh8bGw4gZtzU0DG1LH-FIc8.roa (hash: kCvXryD6WaHV5/dIFEy0J57c6GyyMioVokTE4Sd2Wd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a0:b1:55:2f:5a:1d:de:1a:64:1e:8b:9d:7c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=bc8d5b4bd266fb834d3ca5468ac1f61c83960cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:17:18:63:6f:04:1f:0c:c3:df:58:cb:d1:
b3:89:ee:27:cf:35:71:73:46:15:44:b7:02:c0:3e:
d9:e8:98:b3:be:aa:ff:11:c1:1e:36:38:b2:ba:3f:
27:aa:07:db:56:b9:b0:2d:eb:4d:f8:84:3a:5c:a0:
24:eb:76:ad:2d:8f:89:01:1d:a4:89:88:ac:e8:73:
df:3e:70:85:1f:19:0f:89:50:39:e7:0b:14:7e:b1:
3f:80:bb:78:aa:f2:43:c7:0e:47:f9:cd:95:ca:e9:
39:87:a0:96:04:b8:4c:b1:53:46:97:b7:2c:59:13:
98:e9:21:9d:6b:95:a3:50:4a:88:b7:d1:74:bf:ff:
09:39:e3:1f:89:36:cd:43:37:22:f1:38:c7:38:a6:
86:a6:d2:80:36:4c:64:62:be:6f:43:72:b5:56:3c:
5b:2c:52:91:fa:5f:fc:d6:e2:3c:53:f0:f3:5f:01:
f2:cb:b7:c4:ab:e8:7d:1a:fa:65:96:9c:dc:20:c5:
22:c1:56:01:85:3f:dd:4e:fa:1a:61:9d:73:34:c2:
a2:15:17:b1:d6:9d:a1:3c:9e:b5:08:56:21:c5:38:
99:27:84:a5:bd:14:18:a8:83:35:3d:3e:c3:50:5b:
5f:07:e6:8b:ac:dd:14:1f:e0:47:d8:90:a6:92:cb:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:5B:4B:D2:66:FB:83:4D:3C:A5:46:8A:C1:F6:1C:83:96:0C:D5
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:db:0e:9c:7a:c0:36:e8:71:e2:19:ec:0c:5a:79:03:95:45:
92:2b:41:9c:c9:ad:b8:98:9c:bc:7e:be:61:df:2b:27:78:f6:
29:98:b0:a5:ab:13:31:48:59:af:5f:0b:0d:b2:37:2a:aa:9d:
b6:07:51:04:b1:34:d9:3a:a5:04:92:5e:19:30:10:ca:c5:91:
87:8a:8a:32:11:b9:21:19:6d:6e:47:9c:f1:7c:7d:e3:0a:c8:
af:65:f9:3f:80:4c:de:3c:18:ed:b3:ba:10:ed:f3:05:70:72:
a7:20:78:c4:2d:fe:08:70:ea:6b:e1:3d:a6:89:1f:a7:f0:2c:
b2:55:50:ac:fd:4c:c2:01:c2:5f:0d:e1:fb:36:40:74:94:16:
14:eb:a8:6a:85:db:a1:3f:50:7e:e3:bb:52:a7:a0:41:3c:c1:
eb:cf:44:05:d1:79:5c:c2:ab:36:86:45:0a:96:82:ff:0e:2e:
97:e7:fa:20:05:28:60:61:ac:81:83:5d:fb:56:31:75:6e:cf:
76:df:18:f5:a0:4d:e4:dd:51:6b:12:fe:65:a4:2c:39:86:2b:
53:66:a0:ef:33:4b:03:5a:f3:bb:98:e1:55:a2:4c:fb:46:f4:
7e:4f:5c:bd:5b:c9:e3:66:33:d5:f0:9a:09:60:6e:5c:bd:50:
c7:23:ac:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:37 2026 by rpki-client