Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: RdRiBj9od431KVvVARxp50UXYJYmYSSA8icniEz77fg=
Subject key identifier: 0C:67:D4:96:97:2A:17:72:55:28:E0:AE:7C:A7:3A:39:8D:65:B1:FF
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 019CABD9D16725280C1D315897B25990070C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: F99ntdp2qRkWyX4GCUSsxJD7WV8.roa (hash: XZkkSfzBXZ21L3XovvCMvlzirbHA8+n/5A9z1OK+IY8=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: F3wRigs24kLE1SJV3ixOeDLhyTB90PJT9KfQDvZnD70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d1:67:25:28:0c:1d:31:58:97:b2:59:90:07:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=0c67d496972a17725528e0ae7ca73a398d65b1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:1a:e9:23:4f:21:bc:42:37:8a:45:28:6a:
ef:b5:f5:53:69:fc:77:87:4d:a5:70:bb:a8:bc:c4:
31:02:b2:f8:e2:72:82:d0:e7:3b:38:6f:e4:b9:ea:
a4:14:f5:b8:8e:43:81:56:41:72:aa:a6:17:71:57:
94:fd:d0:6f:8d:a8:5c:5a:6d:7a:2f:8d:ec:ac:2a:
0a:d4:01:3d:23:58:b4:23:38:2d:8e:51:29:6a:22:
3a:27:50:01:77:4b:03:53:84:77:e6:e7:59:e5:af:
9e:71:79:13:d8:f3:b5:29:09:61:4f:4f:d0:69:e1:
29:fa:77:25:6e:d5:c0:6a:e7:57:17:9d:b2:7e:78:
bb:24:06:49:24:02:1e:33:2e:77:95:b5:64:b3:02:
0d:93:74:74:65:a8:c2:65:e0:91:7a:79:b7:4b:26:
95:b3:a4:a2:d6:4e:23:71:b0:53:b7:e4:aa:4b:f4:
e0:5c:27:bf:67:10:c6:3a:5f:93:a7:64:fe:96:9e:
f4:4c:01:91:0d:3e:c9:a8:1b:ee:74:2e:73:c4:33:
89:4f:6f:85:f6:be:8b:8f:0f:87:93:74:4e:6f:61:
fe:28:77:37:15:c9:db:e1:9e:b7:ce:30:4f:d5:a5:
87:45:5a:8c:d9:90:75:24:4d:f6:74:82:f6:f9:78:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:67:D4:96:97:2A:17:72:55:28:E0:AE:7C:A7:3A:39:8D:65:B1:FF
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fe:9a:bc:00:ed:42:9c:dd:1e:eb:fb:24:83:96:7a:37:8f:
85:d7:76:59:d9:25:4d:e6:09:b1:cb:2f:24:1c:37:06:31:c3:
a0:e5:97:4b:e7:f4:24:e7:8e:3b:2d:05:52:5f:21:55:df:94:
fa:5b:90:56:85:c2:bc:99:1d:b2:f8:30:f8:8e:96:a2:b7:b1:
8f:dd:39:5b:4c:2b:32:d1:1b:bb:ce:28:66:a3:30:a9:3e:e8:
35:33:ba:46:0f:fe:c5:72:f2:a1:4f:a7:80:1d:e2:e8:0f:69:
f7:a1:2c:af:12:44:04:77:35:d9:1b:8f:5e:19:9a:85:56:a7:
9c:24:91:76:40:65:76:e1:f3:52:7e:27:de:00:24:c1:ab:c3:
bb:4c:8e:b6:06:a5:d8:de:3c:5c:a4:51:36:fa:1a:ba:34:da:
ac:cd:ca:66:4e:2a:b9:59:e1:4d:8f:0e:ed:03:30:20:97:11:
ed:d1:5c:9a:c6:d2:ef:a4:ff:59:bc:ff:f9:6b:64:9b:32:d2:
76:24:5d:16:c1:30:2f:84:9d:38:bf:73:07:ee:3d:a3:44:4b:
48:15:51:46:58:46:26:24:26:d9:81:3f:4f:2f:64:aa:bb:d3:
c4:93:09:fd:36:07:75:a9:8e:c7:7d:dc:88:aa:06:58:38:ed:
ca:2e:27:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:22:01 2026 by rpki-client