Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: sm+wfn5xEh0F4kzGxlIU99ihiVJghGzeq0nBJS5aOGg=
Subject key identifier: 0E:02:06:08:CB:50:66:D0:76:81:96:9A:74:77:41:A4:CA:33:41:15
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 01A17CCE4FBD930257FAD0787A4828CEC356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 10:00:57 +0000
Manifest this update: Tue 27 Oct 2026 10:00:57 +0000
Manifest next update: Wed 28 Oct 2026 10:00:57 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: HIrSmEjtbaaRlZbKl7L526aRVl2BgpePl+avuDRI6Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:4f:bd:93:02:57:fa:d0:78:7a:48:28:ce:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Oct 27 10:00:57 2026 GMT
Not After : Oct 28 10:00:57 2026 GMT
Subject: CN=0e020608cb5066d07681969a747741a4ca334115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:51:46:b2:1e:82:d7:7b:26:9c:6e:ba:0e:
8b:26:a2:f1:b7:d2:80:6f:7b:c9:5b:b1:f5:13:c3:
cd:8b:bb:2f:71:d3:b4:fc:0f:74:68:f9:ad:37:7a:
d5:15:f4:4f:17:58:33:17:8d:ba:a5:38:eb:63:b9:
45:a8:ab:09:c1:98:87:38:f7:bd:e7:f3:44:63:b0:
10:d2:1a:56:e1:62:a4:14:05:27:d7:51:7b:ed:1b:
81:3b:92:77:ca:d4:89:c5:b7:da:d7:98:39:6b:86:
9d:b6:ef:cb:87:11:27:01:14:c6:7b:97:37:24:f8:
8d:d6:da:ac:ae:ed:f4:4f:ed:d1:d5:85:0c:c0:4a:
20:a8:93:4a:3e:f4:d4:e6:cf:b7:e7:fd:e4:c6:8f:
5c:0d:97:aa:68:24:8b:60:7d:97:7a:66:58:da:fe:
c1:fb:80:50:cf:00:98:49:3e:ae:36:bd:c7:d1:3f:
af:09:9f:c3:ac:56:da:4e:e8:d1:c2:78:a0:6d:e8:
e1:09:6f:45:c0:df:17:39:be:0a:b0:5f:a9:3c:c2:
eb:cf:79:39:a8:0b:62:6d:f1:6f:47:93:72:b4:9c:
6e:4f:a3:02:fa:bf:38:3c:e9:91:1d:b0:e0:3a:5b:
59:7b:d3:32:45:37:dc:40:8c:9d:f6:a1:22:6e:58:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:06:08:CB:50:66:D0:76:81:96:9A:74:77:41:A4:CA:33:41:15
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ea:fa:03:31:4b:c2:4f:a5:d0:55:6e:16:d8:2f:27:e7:11:
03:f1:df:00:35:ab:df:09:de:2f:a3:ea:10:04:78:88:95:91:
58:cf:be:db:f0:9f:f6:b4:4a:23:c7:a0:34:1b:eb:a3:75:8d:
e9:fb:c4:8a:54:4b:e5:dd:cb:1f:a6:ec:f4:ed:3a:f0:d7:2d:
0f:f0:9f:0d:cd:5c:19:8d:22:02:36:d8:57:d7:5a:cc:49:b8:
ba:09:45:a3:89:66:4b:37:05:49:d0:ed:f9:a7:28:05:82:6c:
bf:d6:0e:07:e2:d2:ab:87:56:4e:72:58:d6:c5:4e:04:74:fc:
5f:e9:d3:a8:d9:b5:64:da:48:64:9b:21:96:b7:19:65:18:e4:
64:80:67:4b:ea:c1:e0:79:45:f8:91:78:96:af:18:cb:65:71:
09:d7:a3:fa:09:9b:82:54:a5:49:53:af:74:a1:e6:3a:18:91:
33:2c:33:e1:21:b9:cb:c5:2a:4b:f8:1c:4e:b1:9e:01:69:8f:
5e:1d:7f:29:db:16:69:7b:2d:5f:d1:78:1e:de:8c:99:a5:53:
98:33:f5:d7:02:af:74:99:86:2e:7e:fa:a3:ae:2d:ad:6c:59:
e6:9d:05:66:da:4c:22:78:f1:b7:a0:7b:d6:80:5c:85:14:81:
4f:3f:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:21 2026 by rpki-client