Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: G+2cdfND6DQpn3zmrFGyWLpxqmOk45k6wg4YyZnwi6M=
Subject key identifier: 0E:CF:BE:34:C1:7C:76:CF:DE:ED:C2:1A:73:29:E6:BC:25:30:57:D0
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019E3A1ACCB06D920D5F3304CB64D1305A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 04B4
Signing time: Mon 18 May 2026 08:01:35 +0000
Manifest this update: Mon 18 May 2026 08:01:35 +0000
Manifest next update: Tue 19 May 2026 08:01:35 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: JjagKlnw34OtDpHrA7w4gEqc2rHRFJ+W/oT06FwuO9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 19 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:1a:cc:b0:6d:92:0d:5f:33:04:cb:64:d1:30:5a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: May 18 08:01:35 2026 GMT
Not After : May 19 08:01:35 2026 GMT
Subject: CN=0ecfbe34c17c76cfdeedc21a7329e6bc253057d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:43:5f:42:dc:0b:ab:d1:84:fc:1d:d4:8a:
10:ad:35:20:26:69:54:12:7b:15:e6:ba:6c:bc:e2:
93:87:ea:b1:78:34:28:2f:19:3e:9b:4f:a2:69:5a:
77:c5:2a:41:52:9f:e6:d6:3d:58:9a:ee:62:b7:af:
e8:fe:94:81:5c:d9:6b:59:a0:ad:84:e2:78:0c:22:
8c:6e:1a:52:c1:2d:00:8e:bc:e7:4c:eb:4f:a7:80:
98:08:e0:9b:a3:49:92:66:1d:e0:d5:8e:28:99:97:
56:ff:2f:fc:ec:bc:64:ff:4d:56:4b:1b:be:89:39:
d6:a1:ab:53:98:8d:54:ff:ee:1f:85:f0:19:35:73:
91:c2:94:60:b1:2c:be:c7:1b:04:ec:0c:b9:35:ef:
59:2c:aa:93:bc:b6:73:50:ef:69:ef:20:9c:5e:e6:
51:f2:76:44:06:4c:89:f9:36:c1:a0:58:e7:d0:f2:
2a:51:ba:2f:75:95:5c:45:53:87:d3:7e:ac:e0:8e:
dc:53:b5:58:54:7c:8f:2b:91:bd:bc:6d:00:cb:a9:
bd:df:88:b3:24:5b:51:c7:0d:28:fd:d4:0a:cc:ad:
5e:89:bb:53:3b:91:17:81:00:92:40:13:7f:08:d9:
82:f3:d7:75:a2:69:0b:f4:02:27:f6:7b:c1:8e:4f:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CF:BE:34:C1:7C:76:CF:DE:ED:C2:1A:73:29:E6:BC:25:30:57:D0
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f9:f7:6e:07:ce:02:4f:83:84:bf:d9:e4:0c:60:3e:90:13:
29:87:76:ec:af:1a:22:4e:40:07:77:e4:ac:14:59:7e:b3:21:
89:33:d1:0a:55:33:ae:cf:1a:c0:aa:cc:eb:4e:b1:8d:85:cb:
5e:e7:8f:99:da:63:8b:51:4c:bf:32:22:8a:06:3d:01:0f:17:
1c:54:a5:24:20:d6:ea:24:39:bf:8e:b6:d4:fe:5b:d6:46:4d:
34:a4:11:4e:db:14:06:5a:ed:c2:90:56:ac:4a:92:7e:91:c7:
2e:ff:3d:4b:9b:50:f4:fd:91:fd:85:42:dd:90:e8:9c:67:13:
ae:e1:75:16:8c:4d:26:ab:22:f2:0a:90:48:94:a9:ef:9e:ca:
62:81:0e:05:68:83:74:c2:9a:1c:cb:29:72:86:29:71:25:71:
86:75:4a:83:80:cd:b4:ab:7d:61:07:ce:5e:87:a9:98:89:f9:
f7:c7:a1:3e:86:5e:01:47:ea:d2:57:f5:f5:db:44:60:ae:9a:
61:96:45:80:4e:61:34:39:f6:d3:4e:14:49:75:d9:80:c0:ab:
e5:4b:36:51:8e:57:35:db:69:e2:fa:7a:b9:15:b9:a5:65:f7:
29:43:52:4a:02:a0:26:11:6a:4b:cd:e0:a2:77:b2:73:75:b5:
eb:e8:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 09:59:08 2026 by rpki-client