Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: 4cNmVAYf3+pczfxc2n8ar8Rd2vyvSsIzrO6v0dw8UqU=
Subject key identifier: B3:9B:9C:86:18:B8:7C:3F:2F:7A:D1:C5:A0:F7:EA:3B:7F:5A:40:D1
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 019D37C04BC99F5E22E333F7EDFCB72B8360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:42 +0000
Manifest this update: Sun 29 Mar 2026 04:00:42 +0000
Manifest next update: Mon 30 Mar 2026 04:00:42 +0000
Files and hashes: 1: 5nmDWedoRcF89IGxn6kR7yQUydY.roa (hash: DNLQVQylwMtEltgALOyRkGll91wT7m92pc6PDpXziVc=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: bnvAeFFXHDEuy8Uu9VknjJN/3YdjanJNe2aewzLFWus=)
3: undQHaKT6czAToaH0ngpfA6qrow.roa (hash: dPBsqWDRKveHU3jcvCAMgjg8l0Q11jENskFPm5MGXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4b:c9:9f:5e:22:e3:33:f7:ed:fc:b7:2b:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Mar 29 04:00:42 2026 GMT
Not After : Mar 30 04:00:42 2026 GMT
Subject: CN=b39b9c8618b87c3f2f7ad1c5a0f7ea3b7f5a40d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:9f:55:40:57:27:6f:8a:05:59:e7:43:fa:
5e:2b:1b:52:11:8f:b0:3e:fd:6f:58:f2:1b:21:5c:
ba:aa:f9:c9:23:43:22:24:55:37:62:49:f6:49:f6:
ad:1b:1f:a3:a0:35:6e:49:98:e9:66:ee:0d:a2:15:
09:f2:7e:2a:7d:fd:2c:91:af:96:ed:b9:21:f4:da:
6e:fc:e8:ce:ad:98:93:5d:da:23:12:d2:e3:45:0c:
39:6c:4c:c8:23:d2:4f:ec:6b:d7:81:c8:6f:31:5b:
99:32:53:b0:4e:64:f5:12:22:3f:f7:a0:56:8c:e6:
05:da:2d:79:40:92:8a:e9:78:6d:a0:8e:fc:42:d2:
60:4b:15:39:78:b2:12:60:4c:93:fb:6b:69:ae:7e:
2e:3e:43:8c:c5:f5:ef:c7:3c:13:84:e6:13:98:3f:
b8:2f:8e:46:6d:23:4d:89:c4:73:a0:7b:20:28:34:
c7:be:5a:13:2a:a2:6f:96:97:6a:3c:49:70:80:44:
80:0a:c8:2a:d6:b6:a9:12:14:63:b3:0d:29:50:bd:
6a:3b:a4:27:5d:f9:01:6a:8a:3d:ee:97:a1:1d:db:
cd:fb:7f:6d:f3:43:0e:09:16:88:6d:a4:5e:03:9e:
95:bb:c8:c9:80:0a:b8:13:95:21:b8:16:16:35:70:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9B:9C:86:18:B8:7C:3F:2F:7A:D1:C5:A0:F7:EA:3B:7F:5A:40:D1
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:39:b8:f5:7f:b8:f9:5c:f8:64:a9:4b:19:0b:6f:4f:db:b5:
4c:3e:96:64:fd:e2:fa:c5:3d:cc:b6:a6:dc:4e:2b:8b:4f:fa:
ba:7c:55:ee:d0:97:13:70:44:d9:5f:10:72:d2:41:5c:9f:48:
e2:25:91:3d:8d:36:91:df:3f:5c:02:ac:f5:3f:7e:0d:8e:6b:
79:cb:52:24:c9:f9:e4:69:d9:34:0e:8c:b2:c7:53:ad:4b:12:
a6:15:f7:34:74:c2:5d:d4:ff:1f:3e:22:71:9a:b9:16:15:8d:
2f:83:68:d6:b0:90:15:98:4f:39:66:1e:00:da:8e:da:49:40:
8d:9f:a6:ac:7e:78:50:f1:01:5b:39:1b:26:64:ad:32:79:98:
7e:dd:ea:81:a9:bf:29:c2:ce:8f:fa:49:1c:af:da:41:68:39:
33:7d:32:f3:7b:bc:2a:15:53:85:c6:8e:3b:76:13:2d:fe:6e:
7e:46:68:bb:a7:6d:96:fa:96:ec:80:d8:66:12:26:06:4d:92:
11:81:36:d8:07:95:ea:2e:71:98:21:2b:65:c2:30:27:ec:90:
21:c6:f5:ba:64:96:1e:a5:6d:2f:84:9f:80:69:49:c8:8f:b5:
ea:a7:dd:2f:57:79:e7:cd:8a:e2:88:15:6f:b9:c2:a1:ba:9c:
7c:da:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:01 2026 by rpki-client