Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: 2ODVYvMGRMnhrND8v6t3HR+cxvCDpvfS8WU62bzO5Gs=
Subject key identifier: 4D:9B:96:0F:67:E2:0A:9A:1E:64:FE:BF:D7:A7:F1:ED:7A:DC:98:02
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 019CACB54AF248D5576CC25CE0670B918194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 14DA
Signing time: Mon 02 Mar 2026 04:01:28 +0000
Manifest this update: Mon 02 Mar 2026 04:01:28 +0000
Manifest next update: Tue 03 Mar 2026 04:01:28 +0000
Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=)
2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: wt+AizJlPjMEUX7Nti+pEWYr7VFTG2uEPIduupAKw7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4a:f2:48:d5:57:6c:c2:5c:e0:67:0b:91:81:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Mar 2 04:01:28 2026 GMT
Not After : Mar 3 04:01:28 2026 GMT
Subject: CN=4d9b960f67e20a9a1e64febfd7a7f1ed7adc9802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:3d:67:35:37:c5:2f:d5:cf:8f:ee:28:33:
61:ce:13:17:b8:d2:20:0d:92:f5:f2:23:aa:e0:20:
e5:a2:2c:a7:2b:3a:07:1c:09:e6:5c:9d:32:d1:87:
f6:0a:0e:31:8e:de:9d:24:b8:bc:51:af:e6:3f:18:
92:40:88:68:cc:bd:38:bd:20:37:6d:fa:2a:1a:7a:
91:52:33:97:da:a5:ea:1e:e1:46:48:e3:7b:3d:08:
02:ee:a9:78:88:03:a6:cd:1e:35:2b:3b:cd:e9:ea:
82:cd:61:98:fd:8b:4a:8f:0e:cd:fb:35:d5:a4:48:
37:1e:3c:0d:57:db:d5:92:a4:cc:c6:fa:64:2b:d6:
ec:58:cd:1b:b3:e5:09:da:c8:ca:31:54:69:77:37:
1c:06:a9:89:6d:6f:2b:8a:c1:5d:43:58:7f:be:1c:
a5:14:48:44:18:7c:2a:d0:5e:5a:01:32:1a:9c:47:
29:a2:26:9b:7f:34:01:7a:a5:e2:eb:95:8d:06:73:
61:dc:64:46:5e:6f:bc:34:ef:d5:8e:98:3f:7e:aa:
cc:43:af:d4:fc:b5:97:c0:2d:09:21:3b:d4:c9:5f:
97:c0:a2:66:99:65:df:b7:6d:d4:24:d1:17:2e:44:
5a:fc:df:e9:8a:6e:90:d8:44:80:2e:80:ed:21:3d:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9B:96:0F:67:E2:0A:9A:1E:64:FE:BF:D7:A7:F1:ED:7A:DC:98:02
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8b:c8:04:d7:93:fd:06:3b:a0:eb:1f:dc:dd:b4:dd:23:5d:
30:51:32:6f:dd:ba:21:24:e2:28:a7:dd:9f:ce:be:4d:bd:17:
d4:5f:44:b8:7c:18:b0:a2:76:b1:01:06:b8:f0:ea:81:af:4f:
ac:45:09:23:81:0c:ae:c5:5f:db:f3:c3:16:4b:6f:7b:a6:50:
08:93:e4:bf:2c:83:ff:54:7a:3f:ce:15:f8:72:63:4a:fa:7e:
0d:d4:94:6c:fd:c3:c0:88:e6:47:c2:bb:c1:ed:4c:45:c4:4f:
9a:fa:9d:5b:01:41:c0:8b:6f:1b:60:5a:37:3f:20:f9:da:b6:
28:28:75:90:09:0c:e6:87:86:3a:9d:09:59:81:3a:e6:38:45:
43:bd:d8:8f:8f:c9:8f:db:80:69:95:12:8b:50:6e:5c:b3:e6:
c1:47:0a:14:7f:7c:51:75:2f:94:14:a6:90:a9:cd:b4:17:a4:
c8:d3:45:48:8f:74:00:52:2c:85:26:22:ce:1d:1e:24:00:7c:
27:6c:6a:1a:54:3f:04:af:40:52:66:50:a6:a2:01:17:06:eb:
92:10:9a:59:b7:4e:5e:84:00:62:97:3b:95:f7:50:b2:e0:0c:
50:4d:cb:95:29:5a:2e:c7:e7:aa:50:86:bf:bb:7f:67:f1:9f:
6a:f3:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:27 2026 by rpki-client