Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: tOUWTUHojBJtprW+xS0elYzGMYCHYgecxkLcP7beO+M=
Subject key identifier: FB:18:DC:65:D7:A3:50:C9:EB:6D:9B:2C:E8:AD:66:E7:2F:6C:1E:4B
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 01A18BD353C4288C8C6FDC0BF59C056C19FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 066C
Signing time: Fri 30 Oct 2026 08:00:44 +0000
Manifest this update: Fri 30 Oct 2026 08:00:44 +0000
Manifest next update: Sat 31 Oct 2026 08:00:44 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: g3qt29v3TTVkI4UTtSD7dcVhl+1C3b140o6sCczBznM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:53:c4:28:8c:8c:6f:dc:0b:f5:9c:05:6c:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Oct 30 08:00:44 2026 GMT
Not After : Oct 31 08:00:44 2026 GMT
Subject: CN=fb18dc65d7a350c9eb6d9b2ce8ad66e72f6c1e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:86:07:d9:45:64:fc:1b:65:16:b7:a8:30:
94:34:3b:41:8e:bf:71:cf:a3:15:45:bc:9d:6d:10:
71:00:e2:c2:a7:0d:d8:34:df:8e:fd:cc:81:93:3c:
6d:2f:8a:87:81:1d:cb:05:3b:7d:2d:90:24:c4:d6:
48:df:3a:2a:c7:55:8a:68:fa:1c:9f:49:a3:9b:93:
b3:c4:de:b2:0e:8c:53:f5:01:47:2b:d1:3d:90:0a:
37:60:84:1c:51:6f:0c:52:7b:57:8c:8f:47:ca:9c:
f3:7d:61:61:04:c1:fb:36:99:4f:a5:45:29:20:e8:
b3:a1:e7:b6:6f:f3:0f:90:f2:02:23:a6:e1:25:db:
8b:a1:81:1d:d8:a1:52:2e:db:e0:b1:2d:a7:7c:8d:
b2:00:ac:cf:bc:59:83:b2:6a:d7:51:d1:c1:87:13:
52:dc:7b:ef:0c:ea:f4:ba:e9:ae:5b:b3:fe:20:be:
a2:07:16:9d:4b:fe:51:14:d0:1b:8b:55:44:99:6c:
53:bc:ac:81:31:90:31:46:79:aa:d7:f2:6a:1d:7e:
13:ce:1a:72:eb:7c:90:09:72:41:98:4d:fb:4e:31:
83:98:7f:fe:0e:22:15:d3:ad:54:2f:37:71:31:7b:
df:b5:79:e8:a9:e4:a3:70:c8:0e:31:1a:d1:1f:b8:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:18:DC:65:D7:A3:50:C9:EB:6D:9B:2C:E8:AD:66:E7:2F:6C:1E:4B
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:38:91:67:73:f9:5f:5f:e5:c1:27:1f:b4:13:c8:83:82:c4:
97:7f:65:a1:d2:ed:49:2d:60:fc:47:d4:2f:da:44:5b:dc:36:
15:e7:d5:e2:18:df:f1:62:4a:f3:85:7d:54:ce:82:a5:44:69:
1d:55:cd:54:02:da:d6:28:66:67:f7:f5:87:ad:f7:42:fc:39:
3c:14:3c:2a:fc:18:43:5c:16:f6:f7:a8:ea:cb:1d:f5:32:d1:
a6:40:c5:f7:fd:27:a2:7c:02:2f:cb:7e:3a:17:cc:26:b3:2e:
57:06:fb:76:85:90:70:0e:c3:c6:aa:39:4a:f7:30:b2:5d:89:
85:ae:d0:b7:12:48:4b:8f:4c:95:33:51:0d:7b:8b:d8:8f:28:
a7:ba:c4:6c:fb:23:cc:58:a2:16:4f:89:c4:a8:11:64:15:92:
6b:e0:77:5b:93:8f:ae:d0:e0:8a:dc:78:9a:ec:05:16:9a:8b:
4e:37:2b:79:9b:3f:d3:f2:2b:27:ca:48:43:00:a8:70:d3:3f:
64:4f:77:12:f9:e6:b0:c0:e7:9a:93:3e:b7:9e:67:81:27:6c:
5f:c1:c7:ed:e0:87:62:6f:11:73:b0:dc:48:b4:37:8f:c7:be:
84:de:e9:5a:08:55:b9:ba:ed:59:ac:17:89:35:59:ec:cf:6f:
0d:86:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:09:36 2026 by rpki-client