Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
File: CpPZnkkKNdkpsBpstzxYPxCvyvE.mft (raw, json)
Hash identifier: 4Wgp5qlyWJYSQkMn6Vub+MqPz42bpmHIkSgAwJLQ9zQ=
Subject key identifier: 9B:CF:4E:BC:09:FF:40:88:43:11:1F:F1:40:57:A1:1B:00:26:64:15
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 019FA2CE6F8BF4706312292C845983B5F13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:05 +0000
Manifest this update: Mon 27 Jul 2026 09:01:05 +0000
Manifest next update: Tue 28 Jul 2026 09:01:05 +0000
Files and hashes: 1: 5QoBwy08FxgB_afPPhW35rzgfWU.roa (hash: uERpJTLN6QfeTTT2yfUb2XxvlLw0q2GpMhWCfNcNS0U=)
2: CpPZnkkKNdkpsBpstzxYPxCvyvE.crl (hash: iig5YdhQkVOFBLeU/+QN//mKmta57BUuCecn7d+rfWk=)
3: v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa (hash: ycxrVcxT6hzdZ9cCnHhOzF1SYBYj+akBiGaWZrxA79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:6f:8b:f4:70:63:12:29:2c:84:59:83:b5:f1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Jul 27 09:01:05 2026 GMT
Not After : Jul 28 09:01:05 2026 GMT
Subject: CN=9bcf4ebc09ff408843111ff14057a11b00266415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:eb:a2:c9:f9:96:48:20:76:0c:ce:04:70:
2c:38:e8:f4:36:93:58:95:83:83:d3:65:cb:4f:bf:
99:c5:28:14:3d:ea:3e:e4:54:1d:d7:d9:26:57:d9:
26:97:17:28:1d:2d:72:62:93:c4:33:73:91:65:ca:
7c:dc:b3:7b:b9:43:a6:1d:83:68:ad:3e:f2:55:85:
29:ca:02:2b:38:b0:55:72:9b:f3:8b:87:f0:e5:0d:
36:20:f8:63:2d:bd:2e:e6:29:14:44:ef:e0:4a:55:
aa:ac:90:59:e4:59:b1:d1:da:ed:d7:d4:57:85:a7:
25:d8:0d:a8:19:f5:5f:35:ca:59:d9:bc:74:ca:c2:
de:ec:38:72:4c:b3:14:4e:3f:fc:13:02:f6:2c:d4:
6e:48:1d:c6:3c:9a:c8:ec:31:79:fc:ad:25:b0:7c:
a0:39:bd:b4:39:bc:aa:5b:0a:d5:ea:29:59:ef:c1:
48:b9:16:95:69:ec:40:a5:71:0c:31:94:b4:8c:4c:
85:66:66:11:e4:f0:4f:ad:fc:09:65:21:d4:2d:3c:
e3:20:35:b8:ea:af:22:ca:f9:bd:69:1f:4a:92:1e:
77:3c:ae:76:4f:3b:c9:18:66:f1:08:e7:44:58:40:
8f:98:a2:34:49:3e:78:ab:d0:af:19:03:39:7e:ef:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:4E:BC:09:FF:40:88:43:11:1F:F1:40:57:A1:1B:00:26:64:15
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:28:d4:bb:7d:8b:89:9a:9c:8b:b4:ae:31:06:0f:f1:3f:
10:7e:ea:50:29:06:31:8f:55:4e:2d:64:7c:9f:1b:68:53:67:
e0:17:f3:3c:a6:d1:34:f2:75:4a:ee:84:18:01:8d:b8:19:16:
00:06:ca:f6:25:f7:d2:4a:4a:5d:83:91:1a:d9:0b:f1:1d:22:
69:da:08:08:08:2f:fb:1d:f0:a3:6a:53:f1:8f:f8:8f:0d:d4:
cd:62:c7:11:0b:49:ea:68:04:44:6f:4b:11:d4:6d:a7:89:22:
c5:60:bc:37:d9:d7:03:fd:04:d6:d7:e4:20:7d:26:e5:b2:21:
44:6d:51:45:3b:d7:d6:5a:27:b8:0a:b3:55:20:13:f7:e0:6a:
f1:a5:65:ba:8a:f8:1e:9a:3b:cd:7e:10:ab:55:61:77:41:54:
9a:29:1b:5c:5f:86:4c:4a:f9:ee:e7:2b:4a:16:dc:ec:01:4e:
cf:42:c5:99:53:81:7a:3a:a7:8a:9a:cb:70:5d:7e:2c:e0:8e:
ba:09:87:a8:da:c8:7f:02:3e:c2:17:4f:cf:1c:b8:35:50:63:
24:07:9a:61:b0:1b:9d:c1:87:3c:33:f2:3a:2f:6f:3c:31:aa:
97:7e:10:a4:da:89:81:ae:ed:c3:a8:3f:4f:ed:db:9f:1e:88:
a0:a9:99:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izm+L9HBjEikshFmDtfE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOTNkOTllNDkwYTM1ZDkyOWIwMWE2Y2I3M2M1ODNmMTBh
ZmNhZjEwHhcNMjYwNzI3MDkwMTA1WhcNMjYwNzI4MDkwMTA1WjAzMTEwLwYDVQQD
Eyg5YmNmNGViYzA5ZmY0MDg4NDMxMTFmZjE0MDU3YTExYjAwMjY2NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5zrosn5lkggdgzOBHAsOOj0NpNY
lYOD02XLT7+ZxSgUPeo+5FQd19kmV9kmlxcoHS1yYpPEM3ORZcp83LN7uUOmHYNo
rT7yVYUpygIrOLBVcpvzi4fw5Q02IPhjLb0u5ikURO/gSlWqrJBZ5Fmx0drt19RX
hacl2A2oGfVfNcpZ2bx0ysLe7DhyTLMUTj/8EwL2LNRuSB3GPJrI7DF5/K0lsHyg
Ob20ObyqWwrV6ilZ78FIuRaVaexApXEMMZS0jEyFZmYR5PBPrfwJZSHULTzjIDW4
6q8iyvm9aR9Kkh53PK52TzvJGGbxCOdEWECPmKI0ST54q9CvGQM5fu+ukwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvPTrwJ/0CIQxEf8UBXoRsAJmQVMB8GA1UdIwQY
MBaAFAqT2Z5JCjXZKbAabLc8WD8Qr8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BQWm5ra0tOZGtwc0Jwc3R6eFlQeEN2eXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt
MmNiZDU1ZjlhOGVlLzEvQ3BQWm5ra0tOZGtwc0Jwc3R6eFlQeEN2eXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl
LzEvQ3BQWm5ra0tOZGtwc0Jwc3R6eFlQeEN2eXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfco1Lt9
i4manIu0rjEGD/E/EH7qUCkGMY9VTi1kfJ8baFNn4BfzPKbRNPJ1Su6EGAGNuBkW
AAbK9iX30kpKXYORGtkL8R0iadoICAgv+x3wo2pT8Y/4jw3UzWLHEQtJ6mgERG9L
EdRtp4kixWC8N9nXA/0E1tfkIH0m5bIhRG1RRTvX1lonuAqzVSAT9+Bq8aVluor4
Hpo7zX4Qq1Vhd0FUmikbXF+GTEr57ucrShbc7AFOz0LFmVOBejqniprLcF1+LOCO
ugmHqNrIfwI+whdPzxy4NVBjJAeaYbAbncGHPDPyOi9vPDGql34QpNqJga7tw6g/
T+3bnx6IoKmZoQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:17:45 2026 by rpki-client