Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: vC3mlIScX7pOBXUIQjJDohsLQJsf5tleoXvQ9NNrykc=
Subject key identifier: 46:72:C1:9F:9A:A0:7B:31:68:57:42:59:66:57:60:52:3F:BB:2C:ED
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 01A0D15BFD81261A525C84929EC3F0770F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0866
Signing time: Thu 24 Sep 2026 03:01:01 +0000
Manifest this update: Thu 24 Sep 2026 03:01:01 +0000
Manifest next update: Fri 25 Sep 2026 03:01:01 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: Ufj5aQWf3KHPkS1RBijWwjJhcrHW5zpGvVS6GVAnER4=)
2: MWM6QEDr90E-Gb18CyVaMUI1SUg.roa (hash: piGRt6COIMkm6UJI/Tww3fuE2c94SS0LGgDLgxHDNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:fd:81:26:1a:52:5c:84:92:9e:c3:f0:77:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Sep 24 03:01:01 2026 GMT
Not After : Sep 25 03:01:01 2026 GMT
Subject: CN=4672c19f9aa07b3168574259665760523fbb2ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:f9:0a:11:a4:4e:be:ee:89:56:7e:71:29:
2c:cd:19:16:a1:1c:93:dd:c9:63:d0:bb:5a:27:45:
10:50:43:ee:6f:8d:a3:c5:b9:99:4d:1b:06:2c:ce:
a1:e8:0c:20:ba:0d:03:52:de:89:42:28:22:35:8c:
d7:d6:56:86:54:5b:89:84:5e:6f:a4:35:32:54:7e:
a8:ff:38:09:17:b6:f0:fb:5f:9e:d5:58:c1:5d:77:
a1:50:74:72:b5:ab:4d:8c:d9:dd:f4:58:8d:58:fb:
e4:ec:50:30:96:77:f6:57:12:62:c6:b7:35:c0:30:
b9:54:3d:26:63:fc:16:89:8e:43:52:01:1b:61:d0:
60:a2:88:d4:cb:10:a4:56:81:aa:0d:7a:a6:aa:8d:
52:5a:27:c7:74:d5:d3:8a:7b:5e:d8:5b:36:b5:09:
b3:55:99:af:91:f2:22:55:1d:a7:76:49:00:37:be:
45:be:db:0e:9d:ca:f1:56:c7:13:0c:33:8b:57:ad:
a1:4d:55:de:cf:3d:8e:69:c8:17:14:29:e6:aa:ec:
01:25:a7:a1:7e:2e:c4:84:43:76:7d:81:47:92:d7:
57:b6:38:27:d5:a6:41:1b:a9:03:39:06:e5:ef:6f:
55:b4:6a:25:af:76:fe:94:47:3b:ef:3d:cf:88:f5:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:C1:9F:9A:A0:7B:31:68:57:42:59:66:57:60:52:3F:BB:2C:ED
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:28:38:9c:79:d9:8d:9e:fa:ef:bd:1d:1e:67:a4:c7:87:f2:
44:ee:b5:6c:79:74:bc:d5:3a:9a:3b:07:8f:76:70:e2:07:b2:
4c:7a:68:b5:88:ff:dd:cf:58:2a:5f:72:85:da:0d:b5:da:20:
7e:52:b9:f1:a7:76:e2:80:56:2e:cb:ec:1b:a0:16:dc:d6:6c:
82:f2:c0:6f:d5:c2:17:81:2d:e2:22:24:c4:f1:a9:69:f9:21:
b7:2e:e0:a6:dd:b1:a4:c1:f2:0d:4a:0b:39:d0:45:5e:d9:e4:
e1:ae:84:92:8c:cf:43:e7:e9:b5:e2:b5:e5:7e:67:2d:d5:eb:
08:d0:15:d6:63:f6:85:18:73:3c:73:de:ef:55:1d:8c:1f:bb:
82:e5:d6:fa:8c:14:0a:ef:93:62:9f:22:c4:6d:39:00:d3:5d:
45:91:e8:40:59:1d:d4:90:d1:3c:1f:97:16:f4:0c:5f:31:c1:
08:93:1a:4b:17:dc:71:b3:10:62:15:a8:dc:e7:7b:c3:7a:68:
7b:7d:e9:78:40:a2:81:ee:aa:66:11:57:f2:a4:59:73:7c:32:
2e:97:4b:a6:2c:5b:75:35:bb:1e:f6:57:22:76:b8:9b:9c:ee:
38:aa:35:7e:10:21:bb:58:33:bc:b1:c8:49:d0:16:e2:8e:42:
91:84:c8:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW/2BJhpSXISSnsPwdw9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0
OThiNjkwHhcNMjYwOTI0MDMwMTAxWhcNMjYwOTI1MDMwMTAxWjAzMTEwLwYDVQQD
Eyg0NjcyYzE5ZjlhYTA3YjMxNjg1NzQyNTk2NjU3NjA1MjNmYmIyY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnz5ChGkTr7uiVZ+cSkszRkWoRyT
3clj0LtaJ0UQUEPub42jxbmZTRsGLM6h6Awgug0DUt6JQigiNYzX1laGVFuJhF5v
pDUyVH6o/zgJF7bw+1+e1VjBXXehUHRytatNjNnd9FiNWPvk7FAwlnf2VxJixrc1
wDC5VD0mY/wWiY5DUgEbYdBgoojUyxCkVoGqDXqmqo1SWifHdNXTinte2Fs2tQmz
VZmvkfIiVR2ndkkAN75FvtsOncrxVscTDDOLV62hTVXezz2OacgXFCnmquwBJaeh
fi7EhEN2fYFHktdXtjgn1aZBG6kDOQbl729VtGolr3b+lEc77z3PiPUjsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZywZ+aoHsxaFdCWWZXYFI/uyztMB8GA1UdIwQY
MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt
YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0
LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSg4nHnZ
jZ76770dHmekx4fyRO61bHl0vNU6mjsHj3Zw4geyTHpotYj/3c9YKl9yhdoNtdog
flK58ad24oBWLsvsG6AW3NZsgvLAb9XCF4Et4iIkxPGpafkhty7gpt2xpMHyDUoL
OdBFXtnk4a6EkozPQ+fpteK15X5nLdXrCNAV1mP2hRhzPHPe71UdjB+7guXW+owU
Cu+TYp8ixG05ANNdRZHoQFkd1JDRPB+XFvQMXzHBCJMaSxfccbMQYhWo3Od7w3po
e33peECige6qZhFX8qRZc3wyLpdLpixbdTW7HvZXIna4m5zuOKo1fhAhu1gzvLHI
SdAW4o5CkYTI6w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:33:23 2026 by rpki-client