Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: yk1Ee5Niu1muQX2duNxXLGj+2HwKR5BFaCHyOwVy4pE=
Subject key identifier: 34:46:85:97:F2:4A:CB:E9:02:EC:18:66:AD:16:09:8F:DA:D4:4F:E7
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 019CAB344B0ED8E9A836A33CB6DD91FD286A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0640
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: FjsW7+ZdhOPam3y2MtgUWqeubi90Q9TxfHnzGZAnGIE=)
2: MWM6QEDr90E-Gb18CyVaMUI1SUg.roa (hash: piGRt6COIMkm6UJI/Tww3fuE2c94SS0LGgDLgxHDNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4b:0e:d8:e9:a8:36:a3:3c:b6:dd:91:fd:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=34468597f24acbe902ec1866ad16098fdad44fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:0c:e2:a1:cc:93:20:75:14:3f:55:2e:8c:
04:c0:de:c9:f5:e2:39:d5:ca:be:10:ef:2a:81:2e:
fc:15:a3:82:99:f7:56:48:54:c6:08:a8:e8:9d:87:
d7:24:ef:b7:de:8b:03:44:28:3c:03:2c:90:19:a6:
d0:ef:61:76:73:37:c3:a0:54:f1:fa:81:7c:b2:31:
12:39:c3:1d:aa:7e:e2:fe:e6:66:eb:5b:e9:8c:76:
7f:96:32:d9:09:3e:6a:19:86:6a:65:c9:05:a9:b9:
47:46:fd:89:ea:05:27:32:0e:a2:af:ea:a1:f9:e0:
51:f3:ee:b7:11:5d:9d:f7:84:36:83:cc:d3:80:00:
8e:5b:c1:15:e6:0e:d3:7e:0e:8c:83:1d:af:20:a7:
21:9a:58:48:53:16:46:2d:93:a7:cd:30:13:6c:a5:
0b:2a:03:e1:f5:62:b8:eb:b2:7f:8d:27:c7:b2:9d:
b8:67:76:a3:47:a5:78:92:de:85:b5:a8:75:86:eb:
9e:b7:0e:d3:15:c1:25:e1:36:37:fe:05:9a:04:f8:
c4:22:8b:ce:dc:05:60:1e:bd:86:39:6b:80:bd:8f:
17:44:94:4c:f5:0a:79:26:fb:80:9a:0f:17:60:9b:
df:09:79:7e:c8:bc:9e:a8:1c:51:2b:dd:1a:99:f6:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:46:85:97:F2:4A:CB:E9:02:EC:18:66:AD:16:09:8F:DA:D4:4F:E7
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e6:9e:0d:4d:5e:c2:ed:0f:b4:1b:39:55:6d:c5:12:12:33:
57:e5:92:68:4f:9a:c4:c8:42:5c:bd:ad:71:e8:f8:3d:c2:31:
9e:36:42:72:58:75:d7:33:fd:1b:a1:d1:01:68:56:c4:3b:21:
4a:37:27:95:25:94:b7:02:87:e9:7c:a1:3f:e2:93:24:6b:34:
7e:5d:45:0a:67:fd:f2:5c:89:83:73:9a:0c:75:37:84:13:f5:
f0:d5:de:80:8e:6f:61:a7:5c:2d:01:ca:f5:1b:03:7d:de:79:
c8:b6:8e:d1:3f:fd:33:cf:3e:2e:04:a0:b9:91:ed:93:f6:52:
9a:79:7c:19:a6:56:f5:d9:3a:31:e8:ab:27:a1:f2:f5:14:6a:
54:5a:9c:a0:ca:07:13:c0:31:65:85:21:cb:c7:53:25:16:a0:
d3:bd:47:df:1c:d3:80:22:10:e5:bf:17:da:17:a9:7e:fe:39:
d2:91:b4:f3:ea:36:78:b6:55:28:4b:e6:03:de:a9:93:05:66:
b2:c2:ed:9c:16:48:59:36:8b:8b:78:6e:9c:22:d7:e1:dc:0f:
be:b3:c0:d8:3b:e6:3c:33:f5:a3:fd:d7:c7:ee:fe:8b:29:d9:
48:18:25:14:b7:51:91:44:57:f6:39:7f:42:d6:d0:a4:f7:e3:
ba:02:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:54 2026 by rpki-client