Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: H+MOjAlLt2hMNC/rnqmOgBfsasRiz/3Dw9U3tUvqjKM=
Subject key identifier: 8E:11:C8:CD:F7:1B:62:0F:B3:8B:EE:19:9D:C2:D4:C0:75:71:C4:F2
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019DCE635A8B80F04B4864DA63DF391FDC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 10:01:50 +0000
Manifest this update: Mon 27 Apr 2026 10:01:50 +0000
Manifest next update: Tue 28 Apr 2026 10:01:50 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: DbjPdALq/2SpWTqIPEzMtKIVu2f/dAitjP302SPNrQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:5a:8b:80:f0:4b:48:64:da:63:df:39:1f:dc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Apr 27 10:01:50 2026 GMT
Not After : Apr 28 10:01:50 2026 GMT
Subject: CN=8e11c8cdf71b620fb38bee199dc2d4c07571c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:3d:69:8f:72:00:4b:51:be:c2:17:df:f0:
51:32:d8:fe:7a:ea:50:db:d8:3c:9f:1a:cb:e9:0f:
1e:c7:06:d9:07:ad:ad:ef:0f:f4:51:33:6e:c6:40:
ca:58:47:69:e1:88:4d:fd:55:cf:5a:4e:13:c5:6e:
f7:d4:b4:09:5c:33:69:54:79:57:bd:69:0f:0b:d0:
40:1a:2f:1a:3b:28:2c:ed:f2:56:49:6e:76:f1:df:
fa:21:ea:95:80:f7:f2:1d:0b:16:19:7e:27:ae:46:
17:5b:a2:29:a2:a5:a4:84:14:de:ff:06:64:aa:5f:
1e:f6:7b:7b:94:19:d7:bd:d0:3b:58:27:65:bc:fd:
b1:78:fd:33:5f:b0:9d:c7:53:5d:c5:08:88:bf:0c:
19:21:01:da:ec:8c:26:5d:71:b9:4b:f5:ab:26:e5:
7e:27:75:ca:76:1b:40:cb:c9:ce:4f:40:85:21:69:
c5:34:44:25:c1:87:d8:fa:1a:39:ee:d8:b8:f5:a5:
f2:7b:58:ff:19:00:cc:1e:4b:7f:9f:de:bf:f4:c0:
b5:7d:3c:af:ae:dd:b6:75:52:e3:88:05:7a:96:21:
2d:8a:46:bb:b5:4c:1a:99:ff:a7:7f:42:07:7d:3b:
de:14:52:dd:bf:c8:d1:d7:e5:87:17:bf:66:18:15:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:C8:CD:F7:1B:62:0F:B3:8B:EE:19:9D:C2:D4:C0:75:71:C4:F2
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4d:fd:d8:9c:35:03:68:64:dc:1f:bc:8a:f0:26:eb:aa:1c:
57:f5:61:7f:ca:7a:1d:ec:7c:fe:cc:66:85:f4:24:05:1e:1e:
73:dc:38:a4:6f:75:76:3b:43:49:e9:ce:2e:e6:c7:bb:a7:7f:
34:64:42:ed:0c:d2:88:34:3a:27:17:5d:68:d3:91:21:5d:f2:
12:94:89:b4:5e:a1:98:00:dd:71:95:c9:f0:ad:b7:c6:da:71:
5a:c9:cd:4c:0f:d2:f5:0b:94:97:4a:f9:0a:3c:39:8e:2a:96:
c9:b5:ac:8b:0a:d0:bf:d2:40:7e:d5:03:0d:ba:49:01:7c:ac:
97:0c:39:41:00:24:8e:58:b7:8a:6c:ea:48:6c:14:22:43:6f:
34:a2:ca:ad:1c:5e:a5:6b:c9:26:cd:70:4a:85:ab:42:7d:c3:
d6:4f:1d:2c:56:ec:41:eb:87:fd:6c:a6:68:18:8f:a5:23:59:
90:cd:7a:4e:13:73:98:5e:3f:61:f4:6d:ef:c5:b5:0f:44:c2:
d2:8f:d2:f1:03:e3:a1:86:24:a7:82:8d:00:ac:60:02:e6:19:
c7:5f:55:8f:0b:ae:17:1c:51:b4:da:02:36:ab:69:26:70:90:
e4:c0:b9:fc:fb:22:50:e1:bd:df:32:bc:dd:f3:c7:93:9f:22:
d5:02:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:23 2026 by rpki-client