Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: xX2vf5ckTxNOkTYumlzGH+SVjhW7L9k6LLuYz7oMdAE=
Subject key identifier: 7B:46:EB:4C:4E:7B:98:F7:48:A4:C4:D0:14:FD:05:33:71:7E:3F:BE
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 01A08B68B13B87152A5C2BCCDB3AD77A0921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 13:01:29 +0000
Manifest this update: Thu 10 Sep 2026 13:01:29 +0000
Manifest next update: Fri 11 Sep 2026 13:01:29 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: uHmBOkZCe043knyhbQGxfTe4VViOyu3tmTSoTTStoSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:b1:3b:87:15:2a:5c:2b:cc:db:3a:d7:7a:09:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Sep 10 13:01:29 2026 GMT
Not After : Sep 11 13:01:29 2026 GMT
Subject: CN=7b46eb4c4e7b98f748a4c4d014fd0533717e3fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:bf:ff:27:e2:1f:7d:2c:91:af:af:f8:4e:
38:ed:9c:5c:ca:15:b9:8e:7e:14:75:4c:de:cd:6a:
47:3f:d5:37:5d:a3:59:be:37:b4:54:47:97:81:d8:
6d:33:1a:af:a9:5d:00:76:63:64:86:9b:2f:fd:4e:
d9:fd:96:11:8d:6c:e0:e1:18:e5:f2:57:91:ec:37:
c9:e6:82:91:92:cf:d4:08:b5:ea:4c:7b:0e:5b:fa:
3c:79:c9:74:57:bf:37:a4:7f:9b:89:e7:e2:74:83:
84:f9:ef:c4:0e:f6:85:af:cf:93:b4:1f:89:88:c7:
43:42:cd:c3:6b:99:ec:b1:da:92:9c:2e:a8:13:34:
66:1e:2e:8d:67:71:dd:51:95:c9:ee:28:50:62:5a:
7b:34:62:53:eb:42:ed:8c:5c:a6:28:b7:49:49:b1:
ce:37:09:cd:63:cb:6e:79:f3:ec:23:ce:63:1f:a0:
de:44:f8:fb:f7:19:30:d6:b0:65:17:e0:ea:1d:3d:
24:99:07:8f:56:d4:2b:6f:4d:e3:63:39:a4:67:90:
73:52:75:cf:12:2a:33:be:7e:a8:84:6e:ec:03:38:
21:cb:69:5c:b1:31:1d:90:14:63:48:61:bd:56:94:
1e:3b:b7:a9:ed:a9:4e:cb:d2:5d:e3:3a:b9:95:db:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:EB:4C:4E:7B:98:F7:48:A4:C4:D0:14:FD:05:33:71:7E:3F:BE
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:78:9a:1d:6c:03:9d:dc:c6:58:d5:c1:1c:fe:90:3c:58:58:
12:5e:3c:1e:f0:c1:51:5b:a4:1d:d2:35:34:76:af:a3:7c:33:
ac:d5:6d:f3:8e:4d:96:00:3f:01:6a:36:31:d0:82:a4:02:81:
00:bf:56:ae:b4:e0:f8:ac:b6:71:b1:94:ec:c5:96:74:4a:a8:
42:66:61:43:c8:06:56:f7:0b:99:49:e2:e4:07:85:06:93:6f:
05:8f:7c:9c:0e:bb:bb:b5:d9:a2:86:de:b6:39:98:22:23:09:
41:08:6e:b6:af:f5:52:36:9e:ba:bb:5a:b3:99:9e:f0:19:70:
ac:d3:4f:5c:fb:28:c7:3d:6c:08:fb:b9:f4:65:dd:31:b9:dc:
de:56:b6:94:54:01:aa:23:a7:cb:a5:75:6c:19:08:7f:b3:cf:
e0:7c:d2:5e:16:6a:a9:8d:0b:1b:64:c3:29:af:fe:9f:76:9d:
c3:f8:16:09:b3:7c:11:27:62:19:1b:dd:5e:00:c2:cd:91:fa:
a4:39:86:e9:8d:73:64:84:d6:bb:02:68:df:75:8d:10:84:ce:
e2:8d:f8:ed:cb:5e:9c:10:38:2c:e7:cd:dc:75:3b:8b:88:26:
76:a8:c4:b8:51:63:a5:8e:fc:df:69:86:fa:95:d6:c4:02:4f:
01:cf:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:32:33 2026 by rpki-client