Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: jg/orrbSNWJ6+X27V/qlO+DxP5NjqD4fXGd+WTACDl0=
Subject key identifier: 57:89:E9:10:E5:CA:F4:33:49:CE:61:CA:EE:33:30:37:87:43:03:76
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 01A001DD195E593A2A638E14FEC75F8ACA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1993
Signing time: Fri 14 Aug 2026 20:01:02 +0000
Manifest this update: Fri 14 Aug 2026 20:01:02 +0000
Manifest next update: Sat 15 Aug 2026 20:01:02 +0000
Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: cKz05Ro93gUXCwJw3p0rJnKOLyWuY2RvK4GZyD5lpsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:19:5e:59:3a:2a:63:8e:14:fe:c7:5f:8a:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Aug 14 20:01:02 2026 GMT
Not After : Aug 15 20:01:02 2026 GMT
Subject: CN=5789e910e5caf43349ce61caee33303787430376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:75:57:72:46:40:e1:6e:6c:60:22:9b:a3:
a0:77:6a:6b:7b:8c:0e:d6:7b:5e:b5:5b:c0:dc:00:
83:23:f7:38:72:74:10:e2:53:d6:f4:83:0e:bc:c7:
36:c8:64:a2:d6:0d:f1:3e:de:cb:c0:23:be:b4:55:
f9:cb:27:47:9a:8d:1d:23:7a:a9:d2:78:76:f2:fa:
eb:0e:e7:9b:94:d5:39:98:d3:4e:6e:11:72:c3:d2:
ad:6e:f6:a1:a5:02:b6:0c:7b:c9:a6:47:6c:87:57:
3b:ee:6a:f5:29:c9:2f:08:a0:5f:af:b4:8c:ef:11:
33:a7:2c:84:62:5b:f3:b6:ff:72:e4:90:63:0a:f7:
3b:ad:7f:28:4e:c9:69:25:f4:79:83:74:2c:c0:31:
2e:3c:3b:d0:a3:57:63:7d:aa:7c:7b:4d:51:72:7e:
c8:bf:dc:02:ae:33:bf:3d:bf:a6:5e:74:aa:45:01:
40:fd:16:9a:ff:94:e3:a9:09:4e:71:31:8f:34:48:
7b:33:7d:95:67:34:a0:09:93:b8:94:be:fb:bb:4c:
59:11:1e:22:13:fa:14:25:72:0b:c8:53:f1:c0:33:
30:51:dd:7b:e0:7c:f9:a8:a4:e5:0a:cc:97:59:1a:
20:58:db:a2:1f:73:b8:32:14:59:b8:ba:1f:52:95:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:89:E9:10:E5:CA:F4:33:49:CE:61:CA:EE:33:30:37:87:43:03:76
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:40:95:00:f4:b0:23:e4:34:a2:89:24:42:bd:0a:44:fd:4f:
c4:1a:86:73:35:3f:f6:18:80:96:11:83:fb:67:72:de:82:84:
b2:a1:09:60:c0:c4:61:9e:16:e1:8e:01:92:0f:1a:21:9b:bc:
78:cc:33:07:2c:ad:c0:4d:e8:85:2a:28:b3:a0:fa:6e:dd:85:
be:c7:ed:5f:86:e4:84:4b:5c:15:5c:b5:fd:bb:e9:1e:6e:f0:
a7:38:a7:d6:8f:07:87:ae:42:ff:c3:9d:01:1a:71:e1:2d:fe:
7d:83:69:7a:3f:2f:62:89:f6:50:b1:fb:b1:c1:cc:d1:e6:6e:
3a:47:5b:bf:0d:0e:db:58:61:2c:bf:ca:b8:7a:d8:2e:aa:32:
1d:55:6f:90:60:a5:64:8d:bb:12:15:94:13:83:2c:74:0f:b2:
0a:e8:05:a0:0c:8c:8b:3e:dc:9e:5d:78:3e:5c:94:88:9b:ab:
be:ea:fa:27:85:90:c4:29:73:e9:53:2d:fd:9c:aa:32:d1:01:
4e:33:99:3a:f1:96:43:fe:ac:07:18:f4:0c:95:59:93:14:7d:
51:35:ec:f4:7f:4e:26:c9:e2:2a:57:9f:0a:57:3d:f6:8e:b5:
26:88:16:ca:60:f8:99:cf:d3:ea:46:c2:f1:cc:84:e6:6e:cb:
c4:53:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:15 2026 by rpki-client