Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: 5OdFdo4bn4arpSY7umYJYKnca8ENw7GKT6DoctSVFOc=
Subject key identifier: 9C:53:1D:89:F4:18:FC:45:4E:9B:94:3F:7D:2C:E0:D0:40:28:90:FC
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01A0C8580720D5FB40B38989A3DE844806F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 107C
Signing time: Tue 22 Sep 2026 09:00:07 +0000
Manifest this update: Tue 22 Sep 2026 09:00:07 +0000
Manifest next update: Wed 23 Sep 2026 09:00:07 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: Osb/Cqa0ZXLUcD3iTk7ZEqGDo7XzUPiUUnefYb6NPXg=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:07:20:d5:fb:40:b3:89:89:a3:de:84:48:06:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Sep 22 09:00:07 2026 GMT
Not After : Sep 23 09:00:07 2026 GMT
Subject: CN=9c531d89f418fc454e9b943f7d2ce0d0402890fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4d:96:81:25:7a:5f:88:da:f6:b6:ac:67:67:
3f:1f:f5:f5:5d:bc:c6:c7:67:f1:60:22:99:e2:40:
6f:f5:88:a3:72:5f:83:f8:bf:64:16:d9:20:94:a0:
64:2f:9c:d1:ee:89:c1:20:e2:0b:1b:70:d8:4e:fa:
30:24:91:77:a2:71:b5:ba:76:05:fe:05:6a:fe:9e:
bd:50:03:d6:1a:0c:68:1e:ff:0b:cb:76:99:34:55:
9f:dc:72:14:db:02:43:8d:cd:73:57:7b:ad:a0:40:
6e:dd:aa:9b:51:e1:9e:41:05:0c:55:7b:6c:70:a0:
11:d3:f1:63:49:98:ac:53:85:fc:6b:f8:19:29:1a:
d2:33:28:cc:38:40:50:52:11:74:49:b5:aa:e7:8d:
e5:a7:74:76:63:8f:2c:40:28:2e:bc:2a:02:56:4e:
d0:5e:d1:bf:1c:46:78:32:19:5f:cf:d5:63:d1:71:
73:db:44:56:4c:7a:1c:bd:c2:4e:cd:fe:4d:5f:e7:
a5:c4:ad:80:5c:79:dc:98:d0:2e:2c:f0:84:90:69:
63:7f:29:ad:7a:60:b7:39:ee:c5:58:29:f5:5a:9f:
ac:bd:1e:71:2e:d5:72:b0:7b:4f:bc:f6:6e:62:60:
26:87:bc:4d:57:4e:8b:94:c2:3a:a9:bd:17:01:b5:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:1D:89:F4:18:FC:45:4E:9B:94:3F:7D:2C:E0:D0:40:28:90:FC
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f3:7d:a2:e9:49:4f:3f:a5:dc:ad:0d:d9:bf:94:a7:0b:4c:
68:41:cd:70:06:97:65:21:0b:ce:07:b7:6c:35:ec:b8:51:d3:
6f:04:5e:4a:c1:92:d8:c1:9d:c0:37:c2:dd:78:74:f1:62:53:
bd:30:82:82:1e:ed:38:be:02:85:e3:d7:31:b6:03:b0:88:cf:
29:62:45:88:16:91:98:7b:16:f0:2a:28:f1:82:99:94:37:c4:
17:76:29:48:5c:39:d3:1c:b9:b6:6d:b1:79:38:57:b6:3a:c5:
bb:57:70:f4:76:b5:8f:92:ef:46:e0:bc:b2:45:2a:d5:ff:e1:
05:13:c2:81:6a:52:0d:3e:ff:11:3d:93:d5:8c:ed:5f:af:c2:
2f:fd:3d:0d:08:c3:c7:13:a6:eb:db:62:46:4f:79:af:8e:44:
75:1c:b6:f6:85:38:65:62:24:d4:cc:7c:8b:f5:da:a6:95:ad:
b7:75:15:55:9b:9a:c8:39:2b:f2:73:b4:e9:8c:ef:c8:59:3a:
70:69:07:6f:3a:1c:b6:2a:94:a4:b9:e5:6a:34:cc:c4:b4:85:
8e:8b:e7:db:a4:7a:21:f9:fb:e7:e8:12:56:10:30:bb:c7:d1:
11:38:b0:23:fb:2b:cc:f7:12:6c:a3:a1:36:83:7a:2c:26:38:
9b:0b:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:19 2026 by rpki-client