Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: OIV3sPeSYG2x93EZ2gyQWF4iUArjVie/t72rcQXs4Zo=
Subject key identifier: E5:60:41:5F:37:E9:A3:66:10:EB:C1:3B:C7:E6:4A:4B:71:DB:6E:35
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 019FA9E2AEC983C44921E8AAD06A3A12C52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 07CD
Signing time: Tue 28 Jul 2026 18:00:33 +0000
Manifest this update: Tue 28 Jul 2026 18:00:33 +0000
Manifest next update: Wed 29 Jul 2026 18:00:33 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: k6fSedFs4pavo9v8Ae3w/Nl24o1ob9S9oX8cSKPfjc0=)
2: MWM6QEDr90E-Gb18CyVaMUI1SUg.roa (hash: piGRt6COIMkm6UJI/Tww3fuE2c94SS0LGgDLgxHDNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ae:c9:83:c4:49:21:e8:aa:d0:6a:3a:12:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Jul 28 18:00:33 2026 GMT
Not After : Jul 29 18:00:33 2026 GMT
Subject: CN=e560415f37e9a36610ebc13bc7e64a4b71db6e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:03:ee:e0:90:16:15:4d:a5:a8:a4:b6:e0:
2d:d7:d8:74:8e:76:c0:ec:d9:c9:bd:c7:21:b3:9a:
28:e4:39:98:47:72:e4:86:67:88:af:5f:4b:d2:a9:
a7:29:01:1f:a6:66:c8:a1:4d:0b:cd:c3:cc:a9:90:
88:23:c5:5a:f1:0e:e9:6c:55:4c:32:94:5d:92:a3:
8c:49:eb:94:6e:82:c5:dc:41:eb:7e:cd:1b:7d:b4:
f1:60:ab:3d:9e:61:b1:29:84:20:aa:15:9b:e2:a5:
84:77:e6:f8:f8:1e:b7:1d:ec:9a:b9:a8:b0:88:45:
6f:46:d5:24:f1:be:c1:b5:54:0b:77:5a:b0:58:be:
5a:c7:0f:f0:21:b3:72:62:d1:0e:a6:61:b8:9e:b4:
c0:4e:49:6c:59:24:10:26:47:41:23:65:56:d4:52:
5d:74:51:f0:df:56:13:9c:91:2a:fb:ba:1f:3e:5f:
bb:05:ed:40:65:49:ba:a5:d3:31:d6:3e:a6:22:0f:
f1:92:a1:77:9a:db:db:7c:64:7b:b6:68:fd:94:1f:
52:73:0b:ff:68:93:6f:35:cc:62:f2:3f:c1:47:12:
b2:5a:a6:b4:a4:eb:47:f4:07:14:3e:aa:ad:a7:ad:
ef:85:3a:cf:06:e9:49:b2:85:50:c8:34:54:ad:37:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:60:41:5F:37:E9:A3:66:10:EB:C1:3B:C7:E6:4A:4B:71:DB:6E:35
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:00:20:c8:18:e8:1a:40:6a:e0:b7:06:93:4e:6c:17:ed:d2:
66:96:eb:f8:a0:51:5b:b8:18:df:30:95:2b:fe:fa:db:8b:f3:
88:6d:8d:92:db:16:19:53:85:86:38:ea:7e:5f:c6:cf:2f:22:
21:2e:20:80:9f:84:c1:98:06:4b:53:4f:31:d4:d8:bd:fd:a7:
0b:a3:1c:f1:19:3d:1c:a6:80:a7:d0:1d:26:82:45:77:a9:9d:
e2:d2:57:c7:ad:bd:7c:62:15:83:35:48:66:c9:5b:f7:bb:de:
e8:e0:ad:c9:9c:b8:4d:db:ec:0a:f5:b4:b1:c6:90:7e:69:05:
3e:95:23:cd:fb:cd:93:fe:b9:eb:ea:7a:d5:fc:33:b7:0b:4b:
3f:87:8b:94:96:b8:2f:b9:c8:66:8c:7d:19:c7:0f:b5:86:c2:
07:17:8f:04:79:13:73:89:d9:49:0d:9d:e5:60:2e:50:31:e3:
24:f8:d6:e3:2a:3f:06:20:b2:b8:72:c7:c3:ee:63:e3:07:d2:
b4:59:9a:a2:3b:82:c9:0d:54:04:25:23:97:ca:45:18:37:38:
68:39:09:e6:76:46:8f:88:6b:8d:5c:f2:a5:b5:b4:8d:3e:24:
f5:d9:49:01:81:07:87:58:ac:b8:44:eb:f1:21:77:5b:5c:c9:
24:43:23:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:41 2026 by rpki-client