Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier: x/+36yJJmhrrYsvBey0y+7Yob2ZLrLcEGx6xaMEmZZ0=
Subject key identifier: 76:7C:BF:2A:A0:09:98:A0:8B:90:93:48:0E:5B:C8:25:FA:8A:E8:CC
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial: 019D992B8AB844C512FA50EA33E5B449A58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number: 1320
Signing time: Fri 17 Apr 2026 02:01:00 +0000
Manifest this update: Fri 17 Apr 2026 02:01:00 +0000
Manifest next update: Sat 18 Apr 2026 02:01:00 +0000
Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: AyqmaR2t67cn341VDm84SYQ8qvpKvRpz3OQHvCAdxFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:8a:b8:44:c5:12:fa:50:ea:33:e5:b4:49:a5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Validity
Not Before: Apr 17 02:01:00 2026 GMT
Not After : Apr 18 02:01:00 2026 GMT
Subject: CN=767cbf2aa00998a08b9093480e5bc825fa8ae8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:f7:d3:2b:25:7c:7a:50:d5:1d:c2:3b:94:
b1:f8:6e:02:cb:f1:32:94:d8:14:a2:3d:8d:ee:d4:
ad:ce:7a:8f:53:0d:02:90:55:5a:05:91:fa:e1:98:
b5:0a:2a:32:45:b2:4a:a1:2d:7d:a9:59:78:a7:fc:
40:d0:74:e0:50:31:73:f3:8a:30:c6:22:d3:15:9d:
9c:03:73:5d:6e:89:fd:d6:56:75:4b:a2:13:11:8b:
e2:50:70:4d:db:78:db:c7:a5:6c:8e:89:cb:01:24:
8d:44:a9:23:61:50:16:10:38:93:2f:fd:27:77:31:
3e:00:11:fb:f1:92:78:84:52:5c:fc:de:ec:1b:e2:
2c:89:32:ee:5b:e7:96:a1:f8:12:f7:e2:29:67:f3:
81:72:67:c6:ef:40:4b:fa:cd:8d:03:10:0c:6e:5d:
c0:17:a5:a5:7a:a9:55:06:db:6f:61:94:42:ff:a7:
8c:84:e9:99:8b:2f:fa:16:2c:e0:ec:22:55:0c:16:
a1:79:aa:50:8e:84:6b:e1:51:f6:ce:4a:0f:9b:c0:
a4:23:e7:20:be:af:2d:08:2b:cf:3a:d0:80:fb:24:
13:f5:84:7a:31:27:e7:55:6e:0c:ab:de:2b:28:5f:
bd:9d:57:8f:0f:c8:d5:50:73:14:1b:57:50:02:ff:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7C:BF:2A:A0:09:98:A0:8B:90:93:48:0E:5B:C8:25:FA:8A:E8:CC
X509v3 Authority Key Identifier:
keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d0:80:bb:42:11:4d:46:a6:ce:c7:5b:5c:91:be:6a:64:6b:
44:9f:7a:bd:4f:68:56:f0:1a:20:32:4a:33:9b:aa:fb:aa:00:
d2:a9:a1:28:7e:d5:5b:44:1b:17:f8:9c:48:2e:66:d9:10:8f:
99:73:53:94:8e:87:03:72:ed:ef:66:50:bd:86:46:81:1c:4c:
eb:c7:08:b9:e7:ce:1a:7d:7e:c9:b2:7f:db:25:a4:fc:f7:45:
d9:c5:73:0b:40:b5:52:e8:54:b8:6c:25:cc:eb:93:c7:ca:4a:
64:41:78:0a:4c:07:d3:eb:c6:fe:54:27:31:e6:6c:a0:ec:50:
1e:af:e0:ae:35:0d:3d:cb:67:cd:af:3a:19:66:c3:6f:10:7f:
eb:48:dd:7c:e2:ff:23:9c:91:b3:4b:12:0c:44:a6:8a:ee:5b:
90:82:a5:56:11:aa:dd:cf:aa:40:76:07:43:3a:67:9f:b3:ab:
d6:5f:f5:26:4b:f2:b5:7a:c5:b5:b6:f8:fb:7d:4e:91:4e:d5:
30:66:cb:b8:4c:5b:23:27:1d:c4:67:bd:18:90:e2:f8:37:42:
67:7a:cc:41:99:a0:d5:dd:93:99:d3:ff:3f:8e:b1:c9:94:c0:
06:92:f0:38:3a:ed:e8:45:80:07:d6:38:aa:25:12:c1:e5:56:
cc:60:46:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK4q4RMUS+lDqM+W0SaWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmJkZjZkZmE2NDk5ZTJjNGFhZGVlZTEwNjY0M2RhMDFj
MGZmOGIwHhcNMjYwNDE3MDIwMTAwWhcNMjYwNDE4MDIwMTAwWjAzMTEwLwYDVQQD
Eyg3NjdjYmYyYWEwMDk5OGEwOGI5MDkzNDgwZTViYzgyNWZhOGFlOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWr30yslfHpQ1R3CO5Sx+G4Cy/Ey
lNgUoj2N7tStznqPUw0CkFVaBZH64Zi1CioyRbJKoS19qVl4p/xA0HTgUDFz84ow
xiLTFZ2cA3Ndbon91lZ1S6ITEYviUHBN23jbx6VsjonLASSNRKkjYVAWEDiTL/0n
dzE+ABH78ZJ4hFJc/N7sG+IsiTLuW+eWofgS9+IpZ/OBcmfG70BL+s2NAxAMbl3A
F6WleqlVBttvYZRC/6eMhOmZiy/6Fizg7CJVDBaheapQjoRr4VH2zkoPm8CkI+cg
vq8tCCvPOtCA+yQT9YR6MSfnVW4Mq94rKF+9nVePD8jVUHMUG1dQAv+eMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ8vyqgCZigi5CTSA5byCX6iujMMB8GA1UdIwQY
MBaAFHJr3236ZJnixKre7hBmQ9oBwP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEt
NzViNTQ5ZThiYjRkLzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEtNzViNTQ5ZThiYjRk
LzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtCAu0IR
TUamzsdbXJG+amRrRJ96vU9oVvAaIDJKM5uq+6oA0qmhKH7VW0QbF/icSC5m2RCP
mXNTlI6HA3Lt72ZQvYZGgRxM68cIuefOGn1+ybJ/2yWk/PdF2cVzC0C1UuhUuGwl
zOuTx8pKZEF4CkwH0+vG/lQnMeZsoOxQHq/grjUNPctnza86GWbDbxB/60jdfOL/
I5yRs0sSDESmiu5bkIKlVhGq3c+qQHYHQzpnn7Or1l/1JkvytXrFtbb4+31OkU7V
MGbLuExbIycdxGe9GJDi+DdCZ3rMQZmg1d2TmdP/P46xyZTABpLwODrt6EWAB9Y4
qiUSweVWzGBG1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:58 2026 by rpki-client