Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: 7RAuMfBgJrW20wLYc5zv+1Nz5ySvfRuqvyMKMHeFw4A=
Subject key identifier: 99:6E:AA:F9:6D:73:CB:23:37:F6:2C:F5:69:A4:EC:F4:42:A3:D9:BB
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019D9962F0BDC6AEDE8EE0343E556C4DA283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0ED6
Signing time: Fri 17 Apr 2026 03:01:31 +0000
Manifest this update: Fri 17 Apr 2026 03:01:31 +0000
Manifest next update: Sat 18 Apr 2026 03:01:31 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: AWgOmLqIRRCxczU4PuvzrYEWNhhfaKq5epRtr+MJhuo=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f0:bd:c6:ae:de:8e:e0:34:3e:55:6c:4d:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Apr 17 03:01:31 2026 GMT
Not After : Apr 18 03:01:31 2026 GMT
Subject: CN=996eaaf96d73cb2337f62cf569a4ecf442a3d9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:95:63:ef:3a:6e:13:5a:0e:67:23:eb:35:5f:
e9:24:2d:3a:85:2e:b0:78:61:72:b1:f9:bc:46:43:
d1:3d:d2:5b:ee:0a:09:d5:56:7c:e4:53:9c:e9:1b:
68:f1:37:ac:ac:fb:46:20:d2:c3:3f:b9:14:0c:ef:
13:9c:62:9b:4c:7a:34:46:7e:9a:1c:5f:ae:bf:1e:
28:0b:49:f4:7f:78:37:0d:f2:2c:f3:1e:91:cb:d8:
75:b6:7a:c1:02:ad:87:e7:e6:ca:1f:87:5f:95:95:
d5:2c:7a:ce:8a:18:e1:9a:c5:d0:80:90:f3:ac:5f:
08:87:62:77:ab:be:10:79:cd:28:a0:02:e0:e1:c3:
b6:5e:a7:97:1d:c5:3c:10:60:ef:d9:2e:a8:d8:7d:
20:3c:1d:d6:95:1d:67:77:c1:3d:e6:7d:32:8f:7e:
87:3d:22:30:cb:79:c0:24:57:6b:a2:aa:5e:c4:c7:
8f:33:56:df:cd:87:e3:75:e6:09:90:bf:36:b6:36:
23:07:de:98:4f:ab:56:81:ad:4e:d8:67:56:f5:3b:
2d:52:19:c9:aa:bd:ab:6e:69:82:8c:1a:07:c2:d1:
a3:cb:06:56:26:61:44:13:5f:06:94:14:90:35:70:
37:ef:fc:b9:68:2b:6a:32:3b:d4:1d:b4:a4:b8:7d:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6E:AA:F9:6D:73:CB:23:37:F6:2C:F5:69:A4:EC:F4:42:A3:D9:BB
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1e:64:5c:dd:64:18:44:29:51:f9:3b:6c:78:c0:c2:82:4e:
1e:24:3c:50:8b:a2:5e:43:d2:10:cf:28:6a:9b:42:5c:3b:59:
2e:4f:ad:bc:c1:0c:9f:3c:fa:7b:9c:84:f5:e1:2a:cb:09:20:
12:ca:f7:d7:8e:7b:2d:15:41:4e:c1:b5:3f:c1:4e:ac:2d:56:
71:92:7c:e0:05:1d:00:34:16:4a:4c:9f:fa:23:91:e2:31:fc:
08:3a:39:63:7e:3e:c0:0e:69:f4:b6:4a:9a:f0:57:89:3b:ce:
f4:ea:8b:cc:13:70:ab:67:42:1a:1a:3b:49:5a:90:2c:15:9e:
8b:5e:ae:e7:a0:33:f8:d6:19:24:2f:aa:92:9c:49:3a:c0:7a:
9e:97:38:6d:2a:f0:54:07:4e:58:69:d2:8a:be:47:0b:02:8e:
a7:ee:66:d0:5b:16:c4:a2:0d:ab:c0:b3:cc:8c:33:c0:ed:cb:
b8:98:cd:81:e5:a6:04:54:6b:97:15:37:99:dd:05:7f:40:2f:
d7:0c:f0:21:0d:b7:91:08:09:a7:70:2f:7f:fc:4a:73:06:cf:
87:b7:97:3c:9c:ea:a4:d3:f5:89:c0:a6:77:db:cf:d4:ec:ea:
e2:28:ff:ec:9d:a2:b5:8f:88:58:50:f3:12:4b:7f:b0:49:48:
0f:74:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:49 2026 by rpki-client