Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: s4EnDJXDlQLwrMXKKSP6T42KTqGJs2qksiiOa9B5FJc=
Subject key identifier: DB:DD:90:2F:19:93:7E:32:CE:66:E1:B6:E0:DF:96:A8:03:3F:A4:09
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 019DA41CFCFEA42C2F49C704C1C724F20BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 12C2
Signing time: Sun 19 Apr 2026 05:00:56 +0000
Manifest this update: Sun 19 Apr 2026 05:00:56 +0000
Manifest next update: Mon 20 Apr 2026 05:00:56 +0000
Files and hashes: 1: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: Rjcp8c46Fn3q0jssA5zd7Nee1N9jd4O+vQLwM9cUog8=)
2: kghyh_nxdTf25rPoKF6M0zemjIY.roa (hash: ngurKcfdQu5xMulMoMEszSDNjnNbW5VunkobEE1hVdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:fc:fe:a4:2c:2f:49:c7:04:c1:c7:24:f2:0b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Apr 19 05:00:56 2026 GMT
Not After : Apr 20 05:00:56 2026 GMT
Subject: CN=dbdd902f19937e32ce66e1b6e0df96a8033fa409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:8d:d0:9c:b2:0c:9a:dc:3a:be:98:ee:a2:
21:3a:a2:e8:41:24:fe:03:47:21:f6:b2:cc:2f:fb:
53:03:06:41:89:79:6f:d6:45:e9:55:89:4a:27:a5:
b8:64:ff:3d:da:b7:61:2a:96:c5:5e:a3:fe:a8:b7:
4a:ed:d2:d5:3d:4e:67:d8:e9:02:13:b6:9a:a9:1d:
f5:10:a7:05:26:ad:9b:0c:70:ca:b8:bb:c3:c0:77:
f0:84:b4:1e:ff:d8:3b:fc:c5:b8:a4:b6:2e:b5:93:
61:47:83:fa:d2:66:cd:19:c4:8f:2b:2f:32:35:48:
53:c3:04:fa:bf:d7:53:b0:d2:12:bd:64:38:b6:f7:
76:af:ab:7b:87:4d:35:ab:54:b1:b6:48:fc:72:2b:
7a:77:77:dc:45:e3:3d:89:54:f9:e1:e2:87:ac:5e:
41:d8:4a:3a:b3:1a:30:26:0e:50:8d:4b:2a:04:42:
58:a9:be:e2:c0:36:9c:ac:e3:a7:66:f1:49:4a:e3:
83:e1:ea:94:50:01:a0:78:f0:54:57:d7:d1:ae:5c:
79:58:0a:4f:4c:2f:d5:4d:73:b6:74:ad:33:36:31:
bf:70:4c:a8:27:4b:6d:d1:9f:02:b5:7a:8f:cd:5a:
6f:21:2f:1c:66:46:79:fc:f6:e5:6b:d1:88:e4:04:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DD:90:2F:19:93:7E:32:CE:66:E1:B6:E0:DF:96:A8:03:3F:A4:09
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1e:aa:ec:34:c0:90:c2:4c:27:91:e0:8f:0d:76:d9:2e:53:
f4:e4:5c:01:e0:f0:4c:18:93:3b:1b:b7:9a:ee:56:51:37:52:
c9:a0:e6:76:22:d1:71:e1:5f:f4:a8:b8:34:87:6f:7e:aa:8f:
29:0f:54:29:9a:89:53:c7:bf:7a:24:e7:83:62:b2:5b:b4:d0:
6f:f8:53:3f:26:bc:98:a7:aa:20:4b:b6:55:bb:b7:24:b6:84:
3d:8d:71:35:fe:69:77:06:61:0b:9c:70:d7:2f:bc:23:1c:cf:
63:af:fd:3f:1b:e5:05:67:cf:37:1c:14:26:08:7d:77:7c:4e:
74:c8:21:01:ac:f8:53:f0:5f:e9:a1:f7:01:d4:da:2a:e9:cb:
46:d4:43:be:75:55:cb:80:73:99:16:41:f0:be:f7:2d:c9:19:
73:b1:54:53:d9:91:06:44:1b:39:04:3d:56:63:28:34:bd:da:
d5:75:80:7d:f5:a0:72:eb:37:8e:84:16:d1:f5:fa:8c:44:39:
e7:0d:3c:3c:0c:f6:56:cd:f0:97:87:b6:47:0b:1d:48:78:98:
af:ff:ee:e7:d1:a6:24:14:ef:f2:1f:e2:08:fe:e3:a7:14:9b:
52:cf:dd:e5:70:e8:75:cd:80:69:54:8f:fc:3c:c2:e8:d9:7d:
3c:53:a2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:56 2026 by rpki-client