Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: oMgzqh+E+HKdQ4oGB3FOao8V0CWEOVEU50o5bC10q84=
Subject key identifier: 42:3E:8C:4F:1F:FC:A7:D6:EC:2F:5F:AB:87:FD:CD:76:CC:44:22:1E
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019F6F18767A3132F4C4C9B1DA8F22309367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 0554
Signing time: Fri 17 Jul 2026 08:01:41 +0000
Manifest this update: Fri 17 Jul 2026 08:01:41 +0000
Manifest next update: Sat 18 Jul 2026 08:01:41 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: e/8P+7V1lYe5JUGPqelJPdYuGQdVcb6R9pcmpk5ILVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:18:76:7a:31:32:f4:c4:c9:b1:da:8f:22:30:93:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Jul 17 08:01:41 2026 GMT
Not After : Jul 18 08:01:41 2026 GMT
Subject: CN=423e8c4f1ffca7d6ec2f5fab87fdcd76cc44221e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:08:e5:7a:e8:d0:8f:e4:df:a4:c9:e7:05:
d9:39:02:9f:16:9b:9a:c3:24:d8:89:bf:ce:d1:90:
0c:42:e6:09:9e:5f:b9:05:69:56:80:18:6a:14:4f:
e5:93:ef:8f:e0:46:dd:31:f1:7e:a7:7c:a8:45:14:
ef:48:57:bd:36:55:28:68:84:fe:a4:6e:0b:43:2c:
06:6e:b8:39:f8:ea:0d:0a:29:8c:17:3c:73:4a:f6:
8f:ad:42:02:8b:6c:27:ab:19:40:2b:4f:02:2f:15:
f2:97:3d:23:28:c8:80:38:83:d1:88:64:ae:36:13:
c2:80:f8:9a:81:f1:a0:d6:35:3e:3a:0b:0f:25:45:
88:16:24:d7:9f:4e:75:7f:4e:c6:98:9d:8f:f3:2d:
cb:95:22:8b:33:dc:c9:f6:e4:89:1a:2d:1c:ee:73:
a2:28:97:8a:5f:e1:df:52:a9:3f:2a:32:16:4f:7f:
ce:7c:36:e2:98:6f:16:17:98:7f:5c:04:4a:c0:51:
bd:fb:28:58:ab:34:c5:b0:02:8f:97:73:e3:8c:06:
64:80:2c:5b:cc:39:24:65:ed:5c:d0:21:9d:6f:e1:
25:34:5e:2d:78:8f:4b:3f:dc:18:a3:16:30:b6:11:
dc:1f:6f:05:84:74:8e:79:e5:a9:56:c1:97:44:aa:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3E:8C:4F:1F:FC:A7:D6:EC:2F:5F:AB:87:FD:CD:76:CC:44:22:1E
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6c:51:30:9c:1b:80:46:56:a9:dd:89:d2:cf:33:21:2c:52:
cf:71:77:91:80:74:e4:02:6c:b6:ea:cc:86:a2:10:5b:43:95:
54:d5:98:e4:70:fe:6b:66:e7:67:f6:9c:11:a0:f0:c5:cd:e6:
6d:e2:3f:94:1f:7e:7a:45:c2:2d:b4:58:bc:a6:38:6c:da:1f:
b9:f9:78:0c:14:a2:6f:75:d6:69:86:a5:e3:bb:fd:91:89:35:
0d:b6:6b:a5:87:86:a8:8b:24:5f:7f:98:ca:35:ca:0a:58:98:
df:1b:04:d2:db:ab:17:ec:b4:2b:1e:02:5a:a5:45:0a:7d:fc:
27:5f:45:5c:ff:37:44:fa:44:a4:94:1c:ce:3c:bd:08:f0:34:
a7:9a:53:2d:bf:98:48:3c:8e:89:c2:50:38:d1:e2:78:89:85:
33:88:87:75:f4:90:54:c5:69:1f:bb:10:67:7e:85:7d:2e:f7:
b5:bd:ba:2f:99:40:4d:54:a0:d9:94:bb:22:6f:08:9c:b9:67:
fe:a2:11:78:1e:96:14:92:52:96:0f:e5:93:b2:83:89:16:a3:
39:17:e2:ad:fe:f7:86:34:fb:89:41:ea:80:1a:11:ae:13:f7:
4f:8c:16:d6:a6:61:04:dd:b7:a1:60:86:29:17:25:dc:d4:f2:
25:96:f9:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9vGHZ6MTL0xMmx2o8iMJNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTM0ZmMzY2FkYWRlNmYwNzkwN2FlYjZlMGJlNWE5ZWM0
NDA3YjkwHhcNMjYwNzE3MDgwMTQxWhcNMjYwNzE4MDgwMTQxWjAzMTEwLwYDVQQD
Eyg0MjNlOGM0ZjFmZmNhN2Q2ZWMyZjVmYWI4N2ZkY2Q3NmNjNDQyMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR0I5Xro0I/k36TJ5wXZOQKfFpua
wyTYib/O0ZAMQuYJnl+5BWlWgBhqFE/lk++P4EbdMfF+p3yoRRTvSFe9NlUoaIT+
pG4LQywGbrg5+OoNCimMFzxzSvaPrUICi2wnqxlAK08CLxXylz0jKMiAOIPRiGSu
NhPCgPiagfGg1jU+OgsPJUWIFiTXn051f07GmJ2P8y3LlSKLM9zJ9uSJGi0c7nOi
KJeKX+HfUqk/KjIWT3/OfDbimG8WF5h/XARKwFG9+yhYqzTFsAKPl3PjjAZkgCxb
zDkkZe1c0CGdb+ElNF4teI9LP9wYoxYwthHcH28FhHSOeeWpVsGXRKo3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI+jE8f/KfW7C9fq4f9zXbMRCIeMB8GA1UdIwQY
MBaAFHKTT8PK2t5vB5B6624L5ansRAe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAt
YzA4Y2YxOTdhMTBjLzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAtYzA4Y2YxOTdhMTBj
LzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWxRMJwb
gEZWqd2J0s8zISxSz3F3kYB05AJsturMhqIQW0OVVNWY5HD+a2bnZ/acEaDwxc3m
beI/lB9+ekXCLbRYvKY4bNofufl4DBSib3XWaYal47v9kYk1DbZrpYeGqIskX3+Y
yjXKCliY3xsE0turF+y0Kx4CWqVFCn38J19FXP83RPpEpJQczjy9CPA0p5pTLb+Y
SDyOicJQONHieImFM4iHdfSQVMVpH7sQZ36FfS73tb26L5lATVSg2ZS7Im8InLln
/qIReB6WFJJSlg/lk7KDiRajORfirf73hjT7iUHqgBoRrhP3T4wW1qZhBN23oWCG
KRcl3NTyJZb50A==
-----END CERTIFICATE-----
Generated at Fri Jul 17 15:39:33 2026 by rpki-client