Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: jLOoPYV2Th9vbCyOADLqaG0QlaVu4rFLQ+IzsA2UPfo=
Subject key identifier: 32:27:5B:F6:77:71:18:95:36:73:23:FA:34:55:C5:B7:DD:F4:56:6B
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 019E8D5B80FE606F325C1C905825B9D8C53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 194A
Signing time: Wed 03 Jun 2026 12:00:44 +0000
Manifest this update: Wed 03 Jun 2026 12:00:44 +0000
Manifest next update: Thu 04 Jun 2026 12:00:44 +0000
Files and hashes: 1: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: U894taw/w3d/k6TGzapKjY8WZV80diGzyKkAWYJexu8=)
2: dXM6fVvG98pEOtZgdKH4ko1DNoE.roa (hash: Juz8s3csuQdQaJVkSot0gXLBmWSHq7VP8RYl4ErQ9cQ=)
3: iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa (hash: Z7LmDISHgR4hvkBzhbrt82iLoWV0bIm5VCFXVRx3m9I=)
4: s_a0JO3ex3-5ZDMGwqCpSbvbnuI.roa (hash: JMIbNNgd33gdVxQwb9MZN65rvOB0PF/xYuksEln47Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:5b:80:fe:60:6f:32:5c:1c:90:58:25:b9:d8:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Jun 3 12:00:44 2026 GMT
Not After : Jun 4 12:00:44 2026 GMT
Subject: CN=32275bf677711895367323fa3455c5b7ddf4566b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:37:a4:e7:66:c7:a0:52:62:a6:3c:93:6d:
b6:79:3a:fc:79:6f:e7:b1:6c:75:57:90:95:26:e5:
c9:7c:39:ea:21:8d:1d:2a:8a:7d:60:e7:41:2d:e5:
82:7d:e9:e9:5e:0c:86:9e:f5:5b:65:3b:4e:01:4a:
34:be:73:c2:b9:95:9d:03:64:be:ee:0e:b6:4f:d0:
f0:4f:08:8a:3e:7f:0a:fa:4a:b1:e1:86:82:10:0d:
08:0c:b0:c0:02:6a:cc:0b:46:c5:f3:b6:e6:9f:2f:
bb:cf:34:a3:91:52:00:b1:92:b5:02:5b:cb:98:43:
ed:ca:09:b7:32:82:b9:f8:03:47:9e:8a:73:76:2f:
90:b4:04:cd:be:49:5e:67:f1:a7:84:cc:96:2f:77:
e9:0a:b8:db:d2:3e:68:46:06:c5:b2:63:38:e4:cc:
13:3c:d5:76:48:b0:3e:bf:f5:f3:cf:d5:e5:70:79:
38:4b:99:c0:87:40:41:e7:87:54:42:b8:36:f4:13:
ab:01:c2:4c:7c:43:65:2e:72:87:a2:4a:52:3b:33:
1f:8c:2b:1c:93:4f:95:35:80:ca:b7:c3:d1:f2:c1:
cf:59:f0:76:d8:7f:9c:ac:10:99:3d:3c:89:a1:19:
2e:33:41:2c:1c:9e:64:d7:88:49:ac:95:07:94:d8:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:5B:F6:77:71:18:95:36:73:23:FA:34:55:C5:B7:DD:F4:56:6B
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:66:96:26:c2:27:5a:67:bb:f3:fb:ac:a6:6e:94:95:53:1b:
3e:dc:ae:5d:ba:63:c8:6d:d9:46:c5:a2:dc:8b:8a:bf:bc:6d:
a6:22:cf:3f:63:39:d3:ff:2b:b0:b5:bb:3c:58:df:2a:ad:bd:
89:a7:e9:a6:b1:8b:34:31:a8:a8:8d:27:9e:f2:d9:43:21:c2:
37:d0:0c:a0:8d:61:23:b5:f8:4a:5a:d5:ac:30:ba:c4:f6:13:
9d:ef:0f:2b:b5:95:2a:39:c2:e5:c3:b4:ef:57:ed:ba:1d:f1:
96:a0:69:f6:2d:33:a8:c3:99:28:58:02:9d:f3:86:96:8e:1a:
fb:e2:66:0d:28:be:49:4b:af:c9:9f:8a:95:a3:09:e0:5e:17:
84:ff:0e:a7:f2:75:04:a6:8d:b7:d5:e0:62:61:49:82:12:45:
d2:b3:9d:7b:61:78:d8:3e:91:2a:c1:1a:f5:5e:d3:25:17:89:
41:11:64:8c:bb:94:03:a6:0b:d4:80:02:bd:0e:62:50:72:f2:
40:a6:a2:d7:a7:ec:29:a6:ff:43:9d:d4:36:a2:81:f1:66:fd:
9b:a7:a7:0e:85:b1:5b:d4:44:6b:3b:6f:35:38:c5:d2:15:a2:
a7:bc:60:51:f4:b7:09:7d:7e:7f:aa:6e:7f:49:b7:28:76:e4:
23:c5:92:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6NW4D+YG8yXByQWCW52MU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4
NzFmYzYwHhcNMjYwNjAzMTIwMDQ0WhcNMjYwNjA0MTIwMDQ0WjAzMTEwLwYDVQQD
EygzMjI3NWJmNjc3NzExODk1MzY3MzIzZmEzNDU1YzViN2RkZjQ1NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8s3pOdmx6BSYqY8k222eTr8eW/n
sWx1V5CVJuXJfDnqIY0dKop9YOdBLeWCfenpXgyGnvVbZTtOAUo0vnPCuZWdA2S+
7g62T9DwTwiKPn8K+kqx4YaCEA0IDLDAAmrMC0bF87bmny+7zzSjkVIAsZK1AlvL
mEPtygm3MoK5+ANHnopzdi+QtATNvkleZ/GnhMyWL3fpCrjb0j5oRgbFsmM45MwT
PNV2SLA+v/Xzz9XlcHk4S5nAh0BB54dUQrg29BOrAcJMfENlLnKHokpSOzMfjCsc
k0+VNYDKt8PR8sHPWfB22H+crBCZPTyJoRkuM0EsHJ5k14hJrJUHlNj+bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDInW/Z3cRiVNnMj+jRVxbfd9FZrMB8GA1UdIwQY
MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt
NjkzM2E5MGM1M2ZhLzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh
LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2aWJsIn
Wme78/uspm6UlVMbPtyuXbpjyG3ZRsWi3IuKv7xtpiLPP2M50/8rsLW7PFjfKq29
iafpprGLNDGoqI0nnvLZQyHCN9AMoI1hI7X4SlrVrDC6xPYTne8PK7WVKjnC5cO0
71ftuh3xlqBp9i0zqMOZKFgCnfOGlo4a++JmDSi+SUuvyZ+KlaMJ4F4XhP8Op/J1
BKaNt9XgYmFJghJF0rOde2F42D6RKsEa9V7TJReJQRFkjLuUA6YL1IACvQ5iUHLy
QKai16fsKab/Q53UNqKB8Wb9m6enDoWxW9REaztvNTjF0hWip7xgUfS3CX1+f6pu
f0m3KHbkI8WSrw==
-----END CERTIFICATE-----
Generated at Wed Jun 3 21:59:01 2026 by rpki-client