Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
File: CpPZnkkKNdkpsBpstzxYPxCvyvE.mft (raw, json)
Hash identifier: 40KJ1jE2vknJv7/evDvPJ55BmKhXTRhXCLyS3aSBGLQ=
Subject key identifier: EB:A2:16:9E:16:13:88:E6:23:A7:FA:34:55:4D:79:E5:23:62:08:ED
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 01A183E37914C8B8FDA63FAF647C27137B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
Manifest number: 0144
Signing time: Wed 28 Oct 2026 19:01:25 +0000
Manifest this update: Wed 28 Oct 2026 19:01:25 +0000
Manifest next update: Thu 29 Oct 2026 19:01:25 +0000
Files and hashes: 1: 5QoBwy08FxgB_afPPhW35rzgfWU.roa (hash: uERpJTLN6QfeTTT2yfUb2XxvlLw0q2GpMhWCfNcNS0U=)
2: BC8-gxQGaNtNuMGtT8eg-pMTJqM.asa (hash: NdaLJNEIEHtPW4J7gY+eYuCg/MLuqQfahpsv3r026to=)
3: CpPZnkkKNdkpsBpstzxYPxCvyvE.crl (hash: HO0ujB/8jE5Vrk164dWSBIBewHTZkM1N5I8JWB+wc7A=)
4: dgmHoNiuqjqiGsj7bwe8_eWWroY.roa (hash: VO0naFhixUwv2FL5oih55z8rsMN0ICEFpIJrweMi4Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:79:14:c8:b8:fd:a6:3f:af:64:7c:27:13:7b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Oct 28 19:01:25 2026 GMT
Not After : Oct 29 19:01:25 2026 GMT
Subject: CN=eba2169e161388e623a7fa34554d79e5236208ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:0f:f9:cb:d3:a0:dc:95:c3:cb:00:90:2f:
ef:4b:d4:5f:a8:84:a5:0d:5a:42:46:1e:74:2e:88:
17:88:bf:1c:ba:81:40:19:48:10:40:28:1b:81:71:
6b:88:76:46:bf:b4:b7:97:23:f9:c6:cc:0c:44:16:
9d:d4:bf:0c:13:af:4e:7a:97:12:99:a4:d1:c8:73:
93:3b:bb:ea:a8:da:b8:6e:62:bd:5b:3d:f9:4c:2e:
77:d5:8e:ee:7a:d3:59:34:77:1c:67:a8:1d:28:4d:
69:b5:e5:c5:87:c7:66:77:41:cd:8c:6f:8c:89:7f:
1b:56:7d:2a:ca:8b:55:c8:c7:f3:69:54:85:92:df:
a8:b9:34:e3:86:8c:4e:6b:11:8e:53:73:4a:58:2b:
f0:0c:b3:fc:3d:c9:75:0e:e8:a0:71:fd:5c:2c:93:
10:13:da:ad:1c:fa:da:0e:61:89:2b:a6:3b:a2:35:
bc:6d:6c:67:ab:c0:f4:ff:0e:93:03:bb:7d:62:f6:
6d:21:67:ca:d4:a9:fe:b9:3d:bb:9e:be:d2:c4:45:
5c:d2:d9:a0:09:4a:94:0f:cf:f4:33:41:47:13:87:
52:03:a4:d5:51:56:0d:98:1a:31:e2:cc:d8:cd:91:
f3:f0:32:e8:d7:44:8d:6b:2d:74:18:60:b9:aa:b4:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A2:16:9E:16:13:88:E6:23:A7:FA:34:55:4D:79:E5:23:62:08:ED
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:23:ad:35:41:d6:04:eb:00:6d:bd:9c:e0:85:3c:38:a1:27:
7b:29:c5:1b:a3:1e:72:d4:60:3a:03:9f:a0:db:86:3e:85:12:
9f:bd:74:cf:09:c5:fc:d0:b3:ec:5c:ff:3e:4b:ce:c9:59:7a:
7a:5f:ca:62:5c:da:9b:09:64:be:bf:92:1d:98:92:fa:65:82:
ce:6a:97:5d:b6:3a:17:01:ac:de:ac:08:36:1d:3d:b0:ac:50:
fd:ac:c5:61:16:77:e1:e8:4a:b6:76:56:b2:03:cb:d5:2d:77:
13:a5:b5:b8:46:b5:f6:cb:df:51:fd:c6:6c:8f:a5:3c:a2:1f:
8d:cd:53:bd:21:79:72:e2:5c:e4:4e:8b:c0:c2:ef:08:68:0c:
e7:b5:b9:fe:0a:6b:df:6a:f6:1c:a3:9f:33:8d:0a:6c:cd:71:
92:61:81:82:15:d6:9d:f9:0c:a7:eb:6d:6d:47:46:88:ca:3c:
d2:ce:15:3a:cd:a9:d2:77:c9:9e:18:81:1a:87:ff:bc:ae:12:
03:f3:f6:62:1c:fd:1e:39:a3:70:67:d9:96:4a:8e:19:85:e3:
36:73:9a:a1:54:b5:40:b3:4e:6d:37:8c:38:20:e5:0c:d9:d3:
61:e3:91:cc:a1:14:da:86:75:62:21:c0:6e:08:82:5d:91:92:
97:ad:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:48:18 2026 by rpki-client