Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: HEJ1KXpVXvYI95a6vv1kbz50YqC1felW7uqNr8wIMNA=
Subject key identifier: A5:88:6E:21:A9:F6:B8:69:54:C7:E4:68:AD:40:D4:04:3F:51:EA:2A
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019D3752C026BCBB8239F8D6254D4D3D8191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 042E
Signing time: Sun 29 Mar 2026 02:01:03 +0000
Manifest this update: Sun 29 Mar 2026 02:01:03 +0000
Manifest next update: Mon 30 Mar 2026 02:01:03 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: U6fZyFHu33U0Fd2r2KTcas6kncZp8hLinnoiHOTJTKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c0:26:bc:bb:82:39:f8:d6:25:4d:4d:3d:81:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Mar 29 02:01:03 2026 GMT
Not After : Mar 30 02:01:03 2026 GMT
Subject: CN=a5886e21a9f6b86954c7e468ad40d4043f51ea2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:e0:ae:be:db:77:d0:76:ce:84:21:06:f0:
1f:ce:02:c6:4d:4b:98:64:2f:fe:7b:d3:d0:ca:08:
83:62:8c:21:3b:4f:c8:35:fc:3e:41:be:c8:fa:20:
c7:8f:a2:12:a6:20:e0:12:1a:15:35:10:49:e9:ed:
3e:d0:98:81:fc:f6:15:a9:25:f8:39:f1:d6:a9:d0:
c4:47:4c:87:66:db:de:c6:f1:e9:50:fd:32:ea:09:
3f:31:09:35:a0:29:f1:30:02:a5:fc:5c:1d:a5:53:
86:d3:88:03:60:81:cb:bf:bf:37:51:9e:16:fa:a6:
dd:e3:d7:2c:0f:19:dc:a9:c7:95:da:ce:29:4b:28:
e9:4f:5e:82:b6:83:d8:93:e1:f6:d7:bc:dd:a3:59:
7b:8f:f1:78:c5:89:9b:80:a5:d0:4d:c7:13:c8:8a:
1d:e7:72:74:d9:54:4a:18:d3:54:ef:c2:e6:cf:5f:
ce:cf:f1:98:cf:d0:39:f7:ab:5b:8b:90:a2:45:06:
c5:12:65:3d:87:21:68:fd:d0:e0:b0:c4:20:0d:a6:
48:42:e9:ad:b0:c3:70:eb:17:10:cb:10:69:33:92:
6a:48:26:54:1f:29:25:26:ff:3f:0a:55:70:a4:19:
fb:fd:1c:cc:55:4a:2c:86:53:a3:0a:6b:af:97:04:
1b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:6E:21:A9:F6:B8:69:54:C7:E4:68:AD:40:D4:04:3F:51:EA:2A
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ec:c8:c1:d6:79:a8:05:cd:53:9f:c2:fe:97:98:d8:29:8e:
0d:a2:f4:bd:55:d0:ba:06:03:5f:9a:ec:cf:30:1b:61:c9:d7:
a5:2d:8b:0b:b2:0c:b1:78:9a:c9:55:98:d1:35:53:a9:89:f4:
68:2e:b2:1f:cf:ae:49:6a:a1:fc:2c:92:d2:cd:d2:a6:25:57:
0d:b2:d6:c4:ab:8f:6b:f4:37:74:58:5b:1c:63:b0:57:c5:a0:
b1:fe:78:16:f7:cf:7d:22:3c:53:13:d0:c5:d7:ef:30:54:b2:
ca:e3:8b:3b:df:b0:43:d4:bf:7d:72:2c:2a:b9:c6:b7:1c:fc:
c7:76:ee:20:ea:c6:b9:86:54:a9:bf:70:fa:4c:e6:68:bd:8b:
12:38:ce:82:67:72:1e:98:e5:30:19:6b:d5:23:bd:42:62:fc:
85:b4:82:79:fa:69:61:fc:03:33:2f:35:ad:b0:98:af:21:9b:
12:12:cb:96:a2:ac:64:58:dc:04:f0:c3:23:14:a6:db:49:67:
56:12:77:b6:6b:fb:a0:a1:c0:2d:dd:27:25:a5:28:fb:93:ad:
9f:f7:6f:f3:e3:fe:a3:a7:5d:82:fb:70:a9:a6:30:f7:f4:4c:
0c:23:b7:ef:d7:1d:59:1b:29:64:4f:be:10:b4:0b:51:11:f7:
4b:09:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:26 2026 by rpki-client