Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: CyzxRFp0cTJu7e7pv7XBXnSD1INqFmI+w2TsJCrrVfg=
Subject key identifier: 4E:25:6B:9E:2D:95:B4:03:E9:49:8E:0F:EB:0E:85:A2:21:0D:E3:32
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019EB80EC9360A019DF8D81BBB9F035AD118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 19:00:37 +0000
Manifest this update: Thu 11 Jun 2026 19:00:37 +0000
Manifest next update: Fri 12 Jun 2026 19:00:37 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: oe2yzSilKD16Ey/05TAFupzlrbu80zLh9uS5Mmk1UH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:c9:36:0a:01:9d:f8:d8:1b:bb:9f:03:5a:d1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Jun 11 19:00:37 2026 GMT
Not After : Jun 12 19:00:37 2026 GMT
Subject: CN=4e256b9e2d95b403e9498e0feb0e85a2210de332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:0d:ee:26:3b:82:a0:f5:80:8d:f0:80:7e:
47:5f:58:94:21:b9:5c:da:40:e6:4a:0e:13:61:01:
1d:9e:38:88:cb:e4:f0:d4:1c:69:94:29:bd:87:4c:
cd:48:12:a0:ec:c4:e8:0b:6a:d6:b4:82:43:81:fc:
d4:f0:98:5f:80:4e:c7:ce:c9:e0:68:2a:a6:e6:88:
4d:74:8b:a1:9f:76:5f:1f:08:b9:12:26:72:50:5c:
20:49:84:45:b4:1e:04:4a:9f:1f:69:94:34:53:6c:
8a:34:97:43:24:6d:e4:0f:92:61:05:0b:5b:b7:f5:
f3:27:80:2e:22:b8:bc:ab:e2:64:72:70:f1:06:2f:
52:df:ea:b5:06:e4:eb:9c:f9:d2:67:93:c3:10:6e:
af:82:19:b4:f8:96:03:eb:db:75:08:55:69:a2:e6:
22:6e:e2:63:81:43:2c:05:1b:c1:f9:33:ad:ab:bd:
82:1b:e0:01:dc:ee:b1:bb:38:08:67:79:39:65:b6:
48:4c:0a:9f:f1:8f:25:67:6c:e9:83:f4:db:f3:e1:
d3:79:3e:ae:d6:9a:1a:62:6a:74:9a:66:1d:98:12:
d5:95:94:f0:1b:99:8b:9f:1f:a0:58:a0:0e:1c:1d:
0f:46:41:46:30:20:1f:66:28:34:88:fe:9f:43:5e:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:6B:9E:2D:95:B4:03:E9:49:8E:0F:EB:0E:85:A2:21:0D:E3:32
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3d:c7:a2:f7:bf:7e:06:08:30:c4:ff:d3:65:ad:5e:9d:ff:
86:69:7e:d4:10:23:f5:60:19:83:64:67:68:04:f9:36:c7:97:
38:19:62:b2:a5:eb:c3:1c:ab:07:96:02:5c:c4:a0:e4:95:81:
73:85:e7:83:75:0f:73:eb:a4:3b:9c:db:99:34:dc:aa:5e:d4:
f2:1e:98:91:a7:22:08:82:68:aa:f5:d2:42:0c:53:85:f8:76:
f1:70:19:d6:2c:1b:9c:87:cc:f2:00:ac:41:ae:2c:44:f6:60:
3c:4b:48:52:82:1e:20:4c:7e:f6:4a:f3:41:ef:ed:91:75:a8:
ea:bb:52:9e:1f:8b:6b:3b:89:5d:c3:cd:ff:7f:da:10:58:92:
9d:43:64:43:30:19:63:f6:a2:4a:e2:7e:5b:13:d6:e1:7c:af:
da:9d:2f:3e:7c:00:32:ea:96:cb:43:8b:b5:56:aa:2b:95:b5:
c3:63:a5:49:ca:22:87:7a:9d:4b:28:b2:b0:8d:4c:f6:07:75:
69:2a:af:2e:cb:21:09:4d:e7:1b:c1:b8:d5:0a:5b:43:c8:b8:
93:d7:e6:bf:d3:33:44:e3:3c:09:07:3e:6f:ff:e9:4d:98:fc:
e9:47:1c:d6:86:cf:6f:14:c6:d6:c7:02:7b:92:85:e5:6f:1a:
79:42:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:47 2026 by rpki-client