Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
File: cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft (raw, json)
Hash identifier: O6baKoZTuoCSOiRAWJUTy+9DYnUel+bFG5UsCCF+7cA=
Subject key identifier: 07:6D:F8:E8:1F:60:B2:FA:51:06:D1:84:E5:9A:85:67:99:14:4E:4B
Authority key identifier: 70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
Certificate issuer: /CN=70cee62b79472dcae51ead4d8ea06923870f5197
Certificate serial: 019CABD982DF7BC4034987FCC7181D05ECC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl (hash: BN9P8R3digGNTGE2pULP5U91LgpdASXH0Mxbd3IFCoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:82:df:7b:c4:03:49:87:fc:c7:18:1d:05:ec:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cee62b79472dcae51ead4d8ea06923870f5197
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=076df8e81f60b2fa5106d184e59a856799144e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:2e:5a:7a:2e:ca:26:40:85:98:33:e4:85:
a6:98:c5:9f:15:3d:ce:4b:cc:ae:d4:8c:a4:41:1e:
27:0c:61:07:46:77:30:16:79:92:e8:17:0d:7f:09:
d8:08:ce:92:d6:17:21:12:20:c9:25:13:9c:8c:af:
52:da:22:0f:83:c7:93:6a:bf:57:54:95:22:b7:1d:
b4:6f:fe:37:63:be:e6:d5:3d:6e:00:17:09:40:93:
7d:ff:f8:cf:21:ef:cc:3c:f7:ac:ef:84:eb:82:83:
9b:83:59:4c:f6:55:0f:c2:4b:14:cf:52:da:cf:3c:
94:ee:c1:d4:b8:04:d5:71:75:0e:da:7a:53:d8:15:
11:c5:ea:0c:4f:01:f3:ea:29:3f:83:c9:46:c5:84:
2d:45:5d:9c:cd:6f:43:04:2e:8d:6f:08:1f:f1:f5:
7e:45:0e:c9:be:f6:c9:b8:f4:d1:be:cf:ce:c8:51:
db:ae:f4:98:4b:96:5b:0b:03:22:db:3e:6b:2f:ad:
b6:4f:e6:be:b7:0c:83:2f:aa:cc:5c:ab:ac:95:cf:
ad:3c:77:97:f9:98:a8:2e:8a:e3:65:0a:c9:7f:7c:
34:ff:08:00:6b:6d:c6:a3:9a:af:5e:6c:70:c4:4a:
a9:3f:2f:0b:0c:21:6b:7d:52:07:dc:1b:30:ef:5c:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:F8:E8:1F:60:B2:FA:51:06:D1:84:E5:9A:85:67:99:14:4E:4B
X509v3 Authority Key Identifier:
keyid:70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a3:90:4c:d4:d4:6b:d2:a8:9b:81:fc:05:48:f1:c4:2f:b3:
2c:e9:71:db:bb:23:24:f7:cf:62:9e:14:b2:21:f0:0a:c3:d0:
ef:28:b2:b7:5e:ee:c7:e8:98:00:f4:45:92:32:e2:6d:68:29:
a0:af:be:38:16:d6:63:d6:86:21:53:b6:7f:73:04:fd:55:f7:
9c:47:3f:b2:b2:f1:a2:7b:72:19:0d:ef:62:2c:c0:5d:78:c5:
03:59:e5:23:e2:4b:1b:d9:8a:86:44:60:f3:55:e9:21:f4:d5:
3e:7f:27:87:61:ae:ee:79:af:5c:ef:d4:21:33:f1:30:f9:03:
16:97:3c:c2:0d:33:bb:1f:50:cc:21:d0:ff:a7:2f:4a:db:90:
42:77:66:10:46:64:94:08:01:fa:b0:ae:cd:43:fb:77:7a:ec:
4e:e4:52:ec:3f:a5:7a:81:7a:09:09:bf:c7:b0:46:a4:ef:79:
76:7e:dc:06:e6:46:5e:ec:e4:d4:95:42:34:c8:e8:c5:09:10:
47:35:71:9b:d3:5c:23:d8:c7:39:56:76:2b:79:70:42:9e:93:
35:a4:84:8c:2a:54:3c:b7:f6:d9:4f:1f:f5:b4:4d:82:c5:a9:
f0:53:1f:c1:bf:4c:6b:e8:de:75:1e:9a:ec:8c:77:e0:16:14:
b3:3d:4f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:16:55 2026 by rpki-client