Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: 7xjb05eBrL00izxeEWfp4mpRpwmkUM9/rnSwl0LpM58=
Subject key identifier: 74:8F:C8:58:4A:B4:C1:3D:2F:2B:3D:A8:8F:6A:18:AE:21:BA:DF:2A
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 01A08ED6A8A9CD44CD4750839E2B78CD3620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 05E9
Signing time: Fri 11 Sep 2026 05:00:27 +0000
Manifest this update: Fri 11 Sep 2026 05:00:27 +0000
Manifest next update: Sat 12 Sep 2026 05:00:27 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 0aFt59DhFBbcCSxaxnEglQ0ktNxCcrajBRqj5jbNbeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d6:a8:a9:cd:44:cd:47:50:83:9e:2b:78:cd:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Sep 11 05:00:27 2026 GMT
Not After : Sep 12 05:00:27 2026 GMT
Subject: CN=748fc8584ab4c13d2f2b3da88f6a18ae21badf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:5f:bc:c4:70:d7:fc:b7:10:29:7d:ea:19:
98:16:7b:f7:b3:58:ce:a7:34:67:f2:d8:33:f9:b7:
8a:74:9f:de:7d:72:b5:b2:68:29:db:b0:ed:88:7c:
5a:11:d1:ef:34:42:97:c9:dd:8d:83:d5:2b:4b:13:
1b:01:45:ac:a4:b2:65:fd:5b:bf:f0:cd:b2:d8:87:
1b:ea:c4:7f:45:9b:6e:94:18:ae:a6:5d:bd:92:dd:
43:eb:7c:de:0e:da:8c:5f:eb:89:62:ff:72:7c:0c:
47:00:a4:a1:bf:47:16:72:c5:54:71:be:92:b5:4c:
fa:0c:1e:df:0e:bd:ab:23:c0:f4:8c:f4:16:99:58:
78:69:7b:50:48:7b:f6:b9:6f:95:06:1b:75:9e:78:
0f:d9:5d:ba:7f:c2:29:38:36:d1:eb:14:70:77:df:
49:0c:04:a5:9c:a4:db:fb:43:44:35:d2:e8:82:96:
6c:ff:1a:24:e3:f4:c3:01:35:c7:bb:29:a1:cc:43:
8a:91:43:8c:38:bc:8d:89:0d:c6:b7:95:31:fe:62:
c6:22:c1:f9:a3:57:fb:fc:ef:6f:84:fd:d3:bf:17:
0f:02:7a:91:64:99:e5:0f:c1:5e:a3:ca:db:84:86:
96:ae:0f:40:c4:ff:de:d1:4e:b1:7d:8b:49:d5:93:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8F:C8:58:4A:B4:C1:3D:2F:2B:3D:A8:8F:6A:18:AE:21:BA:DF:2A
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7e:a0:af:3c:2c:c1:f0:e0:77:70:a1:6a:c2:9d:e4:60:33:
75:92:fd:bd:df:b1:48:04:5e:45:c3:a9:fa:0a:72:74:6f:9e:
5e:7f:90:1b:09:71:10:57:20:d8:9f:d9:0d:e2:df:34:fe:d3:
9c:52:54:e7:30:1f:3d:f0:2f:de:4a:3e:2f:a8:2b:f1:17:24:
cf:de:55:e7:8b:b0:1f:ff:59:18:86:d3:62:c9:c1:44:33:b6:
8d:ea:f0:68:4d:69:3c:b2:c3:46:23:8c:58:f1:94:0f:8c:88:
d0:7b:ed:69:38:8f:21:f8:de:85:82:99:b1:fb:c9:72:82:15:
ec:69:7a:3b:4d:b2:fd:99:2b:5c:d0:63:79:a1:c7:ff:4d:ec:
36:17:ac:f0:ca:2d:3d:86:c7:a9:b7:12:43:57:05:48:d9:d4:
8c:2f:63:f5:a9:d6:7e:3e:c2:2c:3c:1a:20:76:0d:04:32:55:
95:e0:00:5e:57:44:b4:0a:e0:d7:6d:08:4c:f2:f4:f9:98:49:
e3:a5:55:5c:f7:32:a5:ce:98:b5:df:85:e5:56:e4:e9:62:de:
aa:cc:6d:99:fb:29:8a:30:d9:de:d1:d0:e0:2f:6a:3a:30:df:
e7:ed:c6:e9:7e:a2:63:47:93:ba:12:69:f4:96:05:17:4a:3c:
a0:b7:26:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCO1qipzUTNR1CDnit4zTYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTM0ZmMzY2FkYWRlNmYwNzkwN2FlYjZlMGJlNWE5ZWM0
NDA3YjkwHhcNMjYwOTExMDUwMDI3WhcNMjYwOTEyMDUwMDI3WjAzMTEwLwYDVQQD
Eyg3NDhmYzg1ODRhYjRjMTNkMmYyYjNkYTg4ZjZhMThhZTIxYmFkZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2dfvMRw1/y3ECl96hmYFnv3s1jO
pzRn8tgz+beKdJ/efXK1smgp27DtiHxaEdHvNEKXyd2Ng9UrSxMbAUWspLJl/Vu/
8M2y2Icb6sR/RZtulBiupl29kt1D63zeDtqMX+uJYv9yfAxHAKShv0cWcsVUcb6S
tUz6DB7fDr2rI8D0jPQWmVh4aXtQSHv2uW+VBht1nngP2V26f8IpODbR6xRwd99J
DASlnKTb+0NENdLogpZs/xok4/TDATXHuymhzEOKkUOMOLyNiQ3Gt5Ux/mLGIsH5
o1f7/O9vhP3TvxcPAnqRZJnlD8Feo8rbhIaWrg9AxP/e0U6xfYtJ1ZNX0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSPyFhKtME9Lys9qI9qGK4hut8qMB8GA1UdIwQY
MBaAFHKTT8PK2t5vB5B6624L5ansRAe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAt
YzA4Y2YxOTdhMTBjLzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAtYzA4Y2YxOTdhMTBj
LzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX6grzws
wfDgd3ChasKd5GAzdZL9vd+xSAReRcOp+gpydG+eXn+QGwlxEFcg2J/ZDeLfNP7T
nFJU5zAfPfAv3ko+L6gr8Rckz95V54uwH/9ZGIbTYsnBRDO2jerwaE1pPLLDRiOM
WPGUD4yI0HvtaTiPIfjehYKZsfvJcoIV7Gl6O02y/ZkrXNBjeaHH/03sNhes8Mot
PYbHqbcSQ1cFSNnUjC9j9anWfj7CLDwaIHYNBDJVleAAXldEtArg120ITPL0+ZhJ
46VVXPcypc6Ytd+F5Vbk6WLeqsxtmfspijDZ3tHQ4C9qOjDf5+3G6X6iY0eTuhJp
9JYFF0o8oLcmMA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:30 2026 by rpki-client