Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: rtxOLhRSCt2G6EjoHKM8bYCzgHKgyZ5eGSiaQA0an18=
Subject key identifier: 77:AC:47:9A:EC:A3:6C:C6:4A:30:11:C7:68:05:A3:3F:F5:0A:F8:D4
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019FA3AA148F74D9D37C37AD890792723E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 13:01:00 +0000
Manifest this update: Mon 27 Jul 2026 13:01:00 +0000
Manifest next update: Tue 28 Jul 2026 13:01:00 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: 0Dsa+by7bKbI/9RoaNLSbU3K/wyZWlOFUdJ65v14ILI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:14:8f:74:d9:d3:7c:37:ad:89:07:92:72:3e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Jul 27 13:01:00 2026 GMT
Not After : Jul 28 13:01:00 2026 GMT
Subject: CN=77ac479aeca36cc64a3011c76805a33ff50af8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:17:97:38:cf:5e:e7:74:1a:69:d9:d4:bd:
e2:4a:d3:44:14:54:28:d9:8d:2b:22:c6:d8:27:0d:
47:3b:d4:e9:95:b1:09:36:3f:27:79:d9:ff:2a:28:
ed:83:c1:3e:fc:ef:d1:cc:58:d7:07:29:09:4b:f1:
17:ce:0e:da:ed:e9:17:d2:a1:64:18:93:6e:78:91:
a3:ae:f2:ae:55:02:4d:7a:e6:a5:c9:2c:e3:56:55:
21:e8:05:cc:05:54:5e:3d:e1:3c:40:55:2a:ba:d4:
de:9e:14:5a:aa:37:70:e5:c3:d2:67:f6:f2:ff:a0:
0d:bf:49:6e:06:d5:e0:e2:8c:31:75:35:09:53:5c:
c5:00:07:21:35:e1:01:ae:e9:0a:49:68:f1:66:a9:
52:de:ee:b2:2f:f7:a1:17:f4:09:6f:72:1f:e3:c9:
12:3b:8a:e3:d5:23:19:30:55:49:13:8b:cd:02:69:
6e:a5:42:a4:8a:55:1c:bc:90:8d:62:d3:e8:fe:52:
60:6e:62:4c:f3:4e:10:ec:9a:32:73:ab:25:84:23:
3a:a7:2b:a2:fa:b8:93:1b:ec:17:d6:9a:32:42:7e:
b3:a1:2e:10:c7:86:7a:89:3b:45:aa:88:78:a3:b9:
e7:da:15:5b:4a:a7:bb:ea:21:bf:17:21:1f:53:ad:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AC:47:9A:EC:A3:6C:C6:4A:30:11:C7:68:05:A3:3F:F5:0A:F8:D4
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:4a:a4:bd:7e:db:fc:7e:19:a8:51:79:cc:5a:ea:f6:4d:
1b:df:55:5e:e3:47:4d:6e:25:3a:2c:2d:c2:0e:25:6e:93:00:
e5:d1:72:15:bf:b7:84:fb:38:8b:72:b0:e7:7c:a6:d1:28:a1:
d6:e5:14:d4:cd:f2:e0:e1:33:05:02:e4:35:79:d0:07:8f:bd:
58:59:91:a4:40:52:72:c0:60:af:9e:a0:b0:b8:4a:f6:a5:76:
94:af:dc:a9:f1:ba:99:d9:73:09:39:7f:ef:fc:70:9a:36:bb:
3f:7a:3e:73:00:90:54:50:77:c1:60:99:e8:64:fe:c2:ce:17:
9d:57:92:f4:d3:b8:2b:e2:e3:f9:30:e0:aa:e2:8e:59:23:73:
37:28:10:2a:f7:f1:70:3a:1c:06:21:e0:dc:20:a9:0b:59:24:
74:44:df:8d:e0:67:15:9d:81:20:b5:5d:78:59:35:3e:3d:28:
70:28:39:f3:e5:36:0c:6b:40:fb:c2:a3:7d:38:cc:55:46:1b:
c8:5d:9d:18:33:10:26:bb:6a:b8:47:77:61:40:f2:74:24:28:
31:82:38:40:23:2a:df:aa:b3:5a:4d:85:ba:50:5d:38:f1:58:
ec:e7:94:ce:1f:59:94:4a:5a:d8:12:c3:4f:12:a1:ad:7b:1e:
21:c5:62:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:10:45 2026 by rpki-client