Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: UpuhZzzhCnlGIZnUj2KsoO0kA1HcyAGa9N6PSRNoz4s=
Subject key identifier: EE:9E:7D:48:A8:EE:9F:17:30:6D:65:69:D8:6B:66:8E:09:59:68:BB
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 019DA37851B0B14345F3E8AE806BBB0AEA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:04 +0000
Manifest this update: Sun 19 Apr 2026 02:01:04 +0000
Manifest next update: Mon 20 Apr 2026 02:01:04 +0000
Files and hashes: 1: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: sv4ahRirRbrsb7WS/lCYRlOINGUs2F2V/RfjBRFarqc=)
2: j63EUh8bGw4gZtzU0DG1LH-FIc8.roa (hash: kCvXryD6WaHV5/dIFEy0J57c6GyyMioVokTE4Sd2Wd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:51:b0:b1:43:45:f3:e8:ae:80:6b:bb:0a:ea:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Apr 19 02:01:04 2026 GMT
Not After : Apr 20 02:01:04 2026 GMT
Subject: CN=ee9e7d48a8ee9f17306d6569d86b668e095968bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:3f:7b:2b:99:ce:55:fc:5b:c3:5d:4b:89:
ee:06:d8:6a:60:50:0d:3f:d0:27:41:61:93:52:60:
76:31:46:80:98:c6:79:da:24:99:ee:7f:ef:46:3b:
d3:bd:5d:23:e1:ae:38:f1:bc:7e:76:7c:16:e2:b2:
5c:1c:4c:d6:a2:e8:07:fe:87:9b:f5:51:7c:6f:d3:
6a:53:c1:38:fe:67:cc:85:06:94:ea:f4:3f:28:2d:
af:8d:7e:33:3f:02:a7:dd:d3:39:e9:1c:29:b7:9c:
3e:a6:9c:51:56:3c:66:9a:d9:ad:4f:9d:9a:7c:d9:
f4:ab:aa:9c:25:48:17:69:c2:3e:6c:14:04:ff:8a:
cf:ab:56:9f:0a:15:43:7f:bd:d6:6f:7e:a7:b2:ac:
df:2a:50:51:a9:3b:5a:fa:1e:a3:95:ed:f4:70:ca:
06:35:76:5e:54:0f:ee:4a:73:e2:f4:15:17:d4:42:
89:ea:26:a2:6e:84:4b:b2:b7:01:fd:24:f8:e0:7e:
ac:bb:6f:90:f8:bd:0b:a8:ab:c6:ce:75:be:63:ba:
4d:57:1c:41:11:81:0e:71:78:fb:32:f2:5c:17:15:
d8:7b:d0:e0:80:d7:05:fe:9e:7e:ce:6d:55:8c:c4:
96:76:ec:6f:2c:12:99:1d:53:64:4f:b6:0a:77:c1:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9E:7D:48:A8:EE:9F:17:30:6D:65:69:D8:6B:66:8E:09:59:68:BB
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:24:8b:b4:6b:05:ad:6c:4e:be:db:6f:6d:ca:f2:85:60:45:
15:6e:a2:16:13:49:46:2b:d0:b2:35:45:4f:10:79:0e:64:a4:
09:60:21:3e:43:d0:95:69:26:32:ed:9d:b3:44:81:87:d3:42:
bd:3a:94:b2:fc:91:02:46:2d:84:b2:53:e4:19:4e:61:ef:b4:
53:77:66:23:45:81:0a:c1:f9:0c:c2:45:3a:66:f3:79:d9:ac:
6c:20:5b:e8:bd:84:06:82:39:a5:bc:ca:ab:09:a5:4a:65:d7:
57:a7:ef:8f:2d:a7:5d:95:3d:de:a9:ab:bd:c1:ba:79:41:8c:
7e:8e:e2:37:f1:ea:8d:f0:e2:13:59:b2:af:f0:8d:0e:61:81:
82:3f:1c:a6:f2:6e:32:7d:82:3b:60:74:93:03:e7:e0:f9:d9:
ec:ac:e6:e6:0e:54:79:5a:fe:cc:7b:c0:2a:fa:00:45:0b:79:
0e:71:ab:ee:ef:d0:80:62:fa:21:77:a7:70:c9:a2:80:c4:76:
3f:f5:58:c5:44:64:3b:1d:e3:53:d8:cc:8a:54:4a:c3:b1:cf:
92:98:08:c9:72:73:f7:c2:7f:ae:3f:06:f6:9d:c4:2c:41:ad:
75:a8:35:4f:53:70:8f:a2:4a:93:bf:16:b1:e0:b6:60:14:8d:
1d:1c:b3:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeFGwsUNF8+iugGu7CuobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNjczMDU4ODU5Y2ZkNzAxMjk0MWQ4OTYzYWRjY2Y2MzAw
YTE5ZWYwHhcNMjYwNDE5MDIwMTA0WhcNMjYwNDIwMDIwMTA0WjAzMTEwLwYDVQQD
EyhlZTllN2Q0OGE4ZWU5ZjE3MzA2ZDY1NjlkODZiNjY4ZTA5NTk2OGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3I/eyuZzlX8W8NdS4nuBthqYFAN
P9AnQWGTUmB2MUaAmMZ52iSZ7n/vRjvTvV0j4a448bx+dnwW4rJcHEzWougH/oeb
9VF8b9NqU8E4/mfMhQaU6vQ/KC2vjX4zPwKn3dM56Rwpt5w+ppxRVjxmmtmtT52a
fNn0q6qcJUgXacI+bBQE/4rPq1afChVDf73Wb36nsqzfKlBRqTta+h6jle30cMoG
NXZeVA/uSnPi9BUX1EKJ6iaiboRLsrcB/ST44H6su2+Q+L0LqKvGznW+Y7pNVxxB
EYEOcXj7MvJcFxXYe9DggNcF/p5+zm1VjMSWduxvLBKZHVNkT7YKd8EVIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6efUio7p8XMG1ladhrZo4JWWi7MB8GA1UdIwQY
MBaAFHJnMFiFnP1wEpQdiWOtzPYwChnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDkt
NGFhMmVlYjUyNjdjLzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDktNGFhMmVlYjUyNjdj
LzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiSLtGsF
rWxOvttvbcryhWBFFW6iFhNJRivQsjVFTxB5DmSkCWAhPkPQlWkmMu2ds0SBh9NC
vTqUsvyRAkYthLJT5BlOYe+0U3dmI0WBCsH5DMJFOmbzedmsbCBb6L2EBoI5pbzK
qwmlSmXXV6fvjy2nXZU93qmrvcG6eUGMfo7iN/HqjfDiE1myr/CNDmGBgj8cpvJu
Mn2CO2B0kwPn4PnZ7Kzm5g5UeVr+zHvAKvoARQt5DnGr7u/QgGL6IXencMmigMR2
P/VYxURkOx3jU9jMilRKw7HPkpgIyXJz98J/rj8G9p3ELEGtdag1T1Nwj6JKk78W
seC2YBSNHRyziQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:15 2026 by rpki-client