Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json)
Hash identifier: 9qgeUAtov0k4GmVFbv5KUxGhv9mqrhzA60FV4p1TXiQ=
Subject key identifier: A2:98:F9:02:FC:14:FD:80:BB:08:1B:46:41:18:E8:34:C6:3B:FF:F8
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 019D97745174AFE13CD0C26DE23F3BF6B156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 18:01:15 +0000
Manifest this update: Thu 16 Apr 2026 18:01:15 +0000
Manifest next update: Fri 17 Apr 2026 18:01:15 +0000
Files and hashes: 1: jK6ZUPsNFkyKtYKTfMd87vm3Fl0.roa (hash: GUweVKKgWw2gQHZHD+EmHgTHUZnsZaLcXUcKT7YkfRk=)
2: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: XMupwoaLbUKkRPbjnlsAOa3HfwePk5v2M/McZlc3r1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:51:74:af:e1:3c:d0:c2:6d:e2:3f:3b:f6:b1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Apr 16 18:01:15 2026 GMT
Not After : Apr 17 18:01:15 2026 GMT
Subject: CN=a298f902fc14fd80bb081b464118e834c63bfff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:a5:2a:99:a3:d1:1a:5c:40:a8:8e:57:36:
71:20:8e:90:18:ff:08:4f:6a:fb:45:92:f1:e7:41:
7c:db:db:bf:e4:3f:fc:d5:0b:94:e0:e5:b5:e5:4e:
82:4e:cf:a8:0e:d3:20:6f:64:83:fc:da:0c:e3:ad:
20:33:a3:ef:b5:1e:ca:1b:6a:fb:2f:ba:35:91:f1:
05:bb:f1:7c:67:7c:b9:9e:04:1c:27:21:dc:58:f1:
4a:97:08:c9:69:ee:ff:ab:58:bb:78:93:d7:fc:52:
e3:fc:b4:ca:eb:f5:f3:cc:81:41:30:6c:dd:de:35:
15:84:97:29:45:41:c4:2d:cf:45:59:e1:44:ce:48:
c3:2b:ac:fa:99:ff:3a:7e:63:37:43:3a:16:b4:a5:
4e:2d:c3:24:f9:70:9a:8a:9e:a4:11:63:6b:c4:7d:
fc:da:59:28:76:99:5d:64:15:7f:5e:ca:2f:e1:4b:
e4:b2:9a:38:ce:5d:99:6c:9d:a4:4f:a8:45:02:6a:
5f:cb:e2:8e:fb:ca:62:8c:44:96:97:05:6d:c0:b1:
ac:4f:c7:f6:e3:bd:57:26:9c:f8:2f:73:53:59:22:
c5:bd:07:06:0d:d1:6c:5e:b1:b4:c3:6e:41:31:a1:
8c:d7:c7:b1:62:64:93:c6:55:e9:18:61:b5:60:50:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:F9:02:FC:14:FD:80:BB:08:1B:46:41:18:E8:34:C6:3B:FF:F8
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bd:70:32:30:2e:0c:2b:f0:d5:de:b6:fe:b9:58:e1:d8:37:
48:0e:15:b1:64:19:6e:0b:d1:67:b6:54:db:7d:57:88:e1:ca:
b0:fd:1a:4d:90:cd:b9:fc:61:ac:79:68:9d:64:89:92:59:63:
31:f5:2c:0c:71:90:73:c6:54:91:bf:86:3a:0d:dd:ac:df:e8:
ca:32:f5:00:96:17:6c:23:46:e0:72:03:af:f5:b4:c0:be:3d:
61:f3:76:7d:97:98:9e:1d:cf:4d:ff:31:ed:22:a3:bd:7a:d2:
f0:ee:8a:eb:a5:27:b1:ad:da:be:cd:71:0c:e4:e6:99:55:d6:
6e:72:0c:9b:ac:42:13:b4:31:0a:76:a9:de:8f:a7:2a:9b:1d:
e5:7e:3e:db:49:75:e3:45:30:2a:b9:97:ba:25:20:45:2d:37:
bc:f8:cb:04:cc:00:5c:1b:69:67:92:3f:f2:7e:80:e6:dd:04:
08:b7:a2:29:56:b5:55:d0:ac:39:aa:89:b2:2c:1b:b7:46:2b:
53:b6:21:06:0f:d7:64:bd:37:42:72:9e:81:13:9b:d0:26:10:
46:e1:7b:76:74:38:99:ec:46:3f:50:2f:f6:1e:94:37:af:49:
6a:be:1a:c9:ed:52:a1:14:06:9e:e9:6e:ad:57:9c:e9:50:3c:
d7:6c:0c:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdFF0r+E80MJt4j879rFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTBhNjExZTA2NzhiOGQzMjllZTU1MDMxMmIyNDZlMGRj
ZjQ2OTgwHhcNMjYwNDE2MTgwMTE1WhcNMjYwNDE3MTgwMTE1WjAzMTEwLwYDVQQD
EyhhMjk4ZjkwMmZjMTRmZDgwYmIwODFiNDY0MTE4ZTgzNGM2M2JmZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRylKpmj0RpcQKiOVzZxII6QGP8I
T2r7RZLx50F829u/5D/81QuU4OW15U6CTs+oDtMgb2SD/NoM460gM6PvtR7KG2r7
L7o1kfEFu/F8Z3y5ngQcJyHcWPFKlwjJae7/q1i7eJPX/FLj/LTK6/XzzIFBMGzd
3jUVhJcpRUHELc9FWeFEzkjDK6z6mf86fmM3QzoWtKVOLcMk+XCaip6kEWNrxH38
2lkodpldZBV/Xsov4Uvkspo4zl2ZbJ2kT6hFAmpfy+KO+8pijESWlwVtwLGsT8f2
471XJpz4L3NTWSLFvQcGDdFsXrG0w25BMaGM18exYmSTxlXpGGG1YFDICwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKY+QL8FP2AuwgbRkEY6DTGO//4MB8GA1UdIwQY
MBaAFJvgphHgZ4uNMp7lUDErJG4Nz0aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAt
ZWFkMWFmODY5MWJhLzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAtZWFkMWFmODY5MWJh
LzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASb1wMjAu
DCvw1d62/rlY4dg3SA4VsWQZbgvRZ7ZU231XiOHKsP0aTZDNufxhrHlonWSJkllj
MfUsDHGQc8ZUkb+GOg3drN/oyjL1AJYXbCNG4HIDr/W0wL49YfN2fZeYnh3PTf8x
7SKjvXrS8O6K66Unsa3avs1xDOTmmVXWbnIMm6xCE7QxCnap3o+nKpsd5X4+20l1
40UwKrmXuiUgRS03vPjLBMwAXBtpZ5I/8n6A5t0ECLeiKVa1VdCsOaqJsiwbt0Yr
U7YhBg/XZL03QnKegROb0CYQRuF7dnQ4mexGP1Av9h6UN69Jar4aye1SoRQGnulu
rVec6VA812wMnA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:40 2026 by rpki-client