Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
File: CpfAyBiGg3PEAUcVBTra9hrx2h0.mft (raw, json)
Hash identifier: 27kIcmJPAXJsj0O4xCrvQsxzBxODKKgQ2exZeaMwHcQ=
Subject key identifier: ED:0D:47:26:CC:43:E2:5F:B8:CC:17:63:BA:27:57:49:57:EA:D3:3C
Authority key identifier: 0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
Certificate issuer: /CN=0a97c0c818868373c4014715053adaf61af1da1d
Certificate serial: 01A13D815BFB60570CB25B11CB5D582F810A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 03:00:50 +0000
Manifest this update: Thu 15 Oct 2026 03:00:50 +0000
Manifest next update: Fri 16 Oct 2026 03:00:50 +0000
Files and hashes: 1: 24AsigLbaKArrRhQpNvzkLuNdsw.roa (hash: Y6cso1vmOQRNAQC+IgTQnFt9A6yD7HrC8YdvTQc2P8Y=)
2: CpfAyBiGg3PEAUcVBTra9hrx2h0.crl (hash: hFh9WYlw5ipZFaZjqXI0DqlQR/qHshNd/Adyk09+pZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:5b:fb:60:57:0c:b2:5b:11:cb:5d:58:2f:81:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a97c0c818868373c4014715053adaf61af1da1d
Validity
Not Before: Oct 15 03:00:50 2026 GMT
Not After : Oct 16 03:00:50 2026 GMT
Subject: CN=ed0d4726cc43e25fb8cc1763ba27574957ead33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:e9:71:6c:a6:df:c3:f4:ed:60:82:6b:fa:
94:89:d1:6f:f6:0a:03:1b:fc:d3:b3:7b:8b:77:b4:
8b:ed:1c:49:13:28:1f:15:93:82:74:35:7c:40:b6:
5d:95:b2:d6:76:fb:ed:f5:f2:7b:bb:7b:be:83:3b:
4b:50:03:d6:8d:47:0b:40:80:38:62:78:ff:3c:04:
2e:38:58:5d:43:50:3a:1f:95:85:e6:17:ce:07:77:
71:b6:05:5f:69:b5:c6:e0:47:64:0c:65:f4:09:44:
8d:bb:b6:e9:c7:c1:5b:4d:75:d1:2b:8b:3f:f4:43:
3b:69:b4:8b:b3:33:75:6a:aa:13:8c:21:17:00:fe:
60:7f:e2:04:a9:64:7f:31:7f:0b:87:92:74:93:7f:
ee:94:af:cf:3d:f7:7d:5d:ad:dd:1d:51:0b:14:cb:
38:ad:e8:a6:43:5b:6a:bc:0b:44:ce:42:a8:3c:05:
a5:bd:60:5b:01:0a:bd:34:d2:ee:d1:e8:bb:52:ca:
bc:52:07:06:ae:76:29:85:e4:14:28:b0:38:04:b8:
e2:3b:d1:e6:78:7e:f1:b4:a7:29:7e:14:9b:c5:05:
d3:89:7d:4e:b4:14:03:b1:f2:48:3e:13:7a:4d:10:
93:ab:66:25:ba:8e:11:12:e5:c4:af:4b:44:76:09:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0D:47:26:CC:43:E2:5F:B8:CC:17:63:BA:27:57:49:57:EA:D3:3C
X509v3 Authority Key Identifier:
keyid:0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:58:6c:5c:01:4a:fd:dd:67:c6:58:0c:56:c1:1a:12:69:1d:
72:4f:63:5a:7f:f4:e8:fe:e5:91:1a:af:66:4d:60:72:c9:de:
b6:0d:6d:48:a2:f8:02:f3:9c:c8:02:5e:0d:35:57:c4:90:b8:
71:7f:f0:7c:c4:14:ac:79:19:f0:38:7b:07:fc:e9:6e:23:66:
a3:bb:20:19:b0:b9:74:96:ee:7e:4a:d4:ba:cf:95:e6:a0:b0:
83:0b:ee:4c:6e:e0:7b:4e:d0:ac:9b:e8:51:30:bb:7e:17:b9:
55:ee:16:89:57:de:81:bf:44:f0:9e:4f:32:cb:ae:63:a1:23:
b5:56:1d:7e:10:2d:be:c5:5f:13:21:bf:7e:e9:dd:5a:65:2d:
66:4b:2b:ed:35:23:49:6f:17:00:ee:67:ed:b1:66:e6:6d:b1:
00:f8:4f:44:6f:0f:01:ff:3b:bd:de:fa:05:98:f9:bd:f9:ea:
c6:46:aa:e5:c1:e5:3d:37:71:a8:b6:f0:73:41:3d:5d:38:23:
d2:79:03:7b:00:cf:62:14:91:df:36:c6:6d:d0:3a:27:6f:ae:
ab:4e:fa:83:6a:e9:08:0f:cd:f0:ea:33:a3:34:d6:d2:25:95:
09:ed:1b:dc:92:3e:ab:9c:76:54:64:3d:8b:f8:a3:4a:8b:61:
43:c0:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:51 2026 by rpki-client