Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: s7eUEHRJFDmdDDVFE1OvQs/YvUXzlG6hdCsxTiJg4nI=
Subject key identifier: CC:C9:FE:9B:FE:AF:47:E1:D7:7D:85:5B:E9:E8:DD:A1:CE:B1:6A:5B
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019D37C004DC88F3E4704C72B68CC1860B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 028F
Signing time: Sun 29 Mar 2026 04:00:24 +0000
Manifest this update: Sun 29 Mar 2026 04:00:24 +0000
Manifest next update: Mon 30 Mar 2026 04:00:24 +0000
Files and hashes: 1: 5kRG3TS3F5mS1LJNKgoMj7B0Kzc.roa (hash: IYPpCgmRajRKH3SyHejCDJsXv1khAQdVFsgw3iiSVoA=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: J7H9cUexyb1nmqeqp+B2qYPh1f9YuBxpBE63QJC9t90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:04:dc:88:f3:e4:70:4c:72:b6:8c:c1:86:0b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Mar 29 04:00:24 2026 GMT
Not After : Mar 30 04:00:24 2026 GMT
Subject: CN=ccc9fe9bfeaf47e1d77d855be9e8dda1ceb16a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:14:62:d0:8b:2e:68:e0:3b:21:a9:1a:d4:
c4:f8:b7:27:cc:18:79:62:3f:6f:45:68:b9:60:e4:
e9:d7:c8:3f:0e:0e:55:15:c7:bc:fe:9c:47:f7:2d:
06:02:75:d9:ed:a3:9a:04:11:9b:99:9c:50:6f:b4:
ff:a1:79:db:3d:b9:a3:09:e4:0d:03:ee:79:a4:d5:
7b:5f:4e:53:df:79:ca:be:ad:f6:ab:94:96:be:19:
a2:f6:ad:e0:4d:43:a4:29:cf:1a:c0:f1:59:47:03:
30:cc:c7:39:84:6e:00:63:e6:c9:df:63:38:ea:25:
5a:d1:f1:0c:c1:0c:26:8a:3e:de:b3:cb:6c:43:a3:
d4:42:85:e0:e2:03:dd:6b:6d:74:c0:7c:79:7e:35:
30:b1:f0:f9:81:e1:2f:65:fd:3f:62:38:67:60:54:
cf:eb:08:ea:d0:eb:b9:16:af:f3:c4:ab:51:86:0a:
cf:bb:75:8b:99:b4:9d:46:a9:97:30:77:79:ac:f2:
27:5a:db:5b:69:2e:91:49:07:5b:b3:1b:7f:b2:7b:
95:31:e9:66:a2:af:a4:20:17:eb:0f:4d:16:4b:13:
28:3b:9c:0b:1b:15:0d:1c:55:ab:27:a7:62:fd:fd:
32:87:57:dc:b3:43:7a:2f:ca:f9:b7:4e:88:6d:0f:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:FE:9B:FE:AF:47:E1:D7:7D:85:5B:E9:E8:DD:A1:CE:B1:6A:5B
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9b:2e:2d:ad:61:d4:c9:ca:a4:48:2c:d5:9c:8f:e6:19:6e:
ad:dd:ec:a3:03:31:c9:25:60:36:f9:85:b0:83:09:ee:95:34:
a6:7a:12:bb:a3:5b:d8:a3:80:41:21:ab:37:8c:45:3d:af:74:
03:36:cf:79:3f:74:d0:5c:54:c3:a4:e0:b7:ef:b6:e3:8c:f0:
38:a1:05:38:8e:ce:bf:e1:5b:27:a3:b0:1e:4e:9c:20:74:f4:
c3:e1:33:d6:a0:07:14:5c:7c:3a:dc:18:23:44:b4:85:80:5d:
4e:f8:4f:c8:16:ee:a6:a8:cf:9d:94:9b:5a:13:04:68:bc:e0:
5c:09:db:d5:01:94:47:6a:f7:4e:e5:aa:98:f0:c4:18:56:62:
8b:a0:28:9f:22:f1:69:bb:06:fb:cb:08:c2:3a:02:af:aa:4e:
58:04:06:71:ed:af:6e:7f:17:65:85:ed:77:d6:43:cf:88:46:
00:5a:91:ec:1a:6f:a5:29:de:60:4c:f7:7b:73:e2:b4:96:a4:
93:60:b9:4b:20:68:6e:a3:38:a4:c0:9f:32:32:a4:94:a9:32:
f4:f3:7f:31:f9:94:44:1b:24:18:c8:7a:b7:1e:02:d0:13:75:
20:0b:b9:8d:04:b8:b0:0b:4d:3a:f7:26:c4:a6:c3:89:62:a1:
0b:d4:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:57 2026 by rpki-client