Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
File: cPaM3tOePsVM7iIzJS7zk3upgo0.mft (raw, json)
Hash identifier: /miaHDvDqrwQ/umwuLP82PER9nqpoenUPnMYqM6hDYw=
Subject key identifier: BF:8C:C1:67:B4:83:B0:1F:F1:0A:57:42:55:81:55:82:11:A3:FE:28
Authority key identifier: 70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D
Certificate issuer: /CN=70f68cded39e3ec54cee2233252ef3937ba9828d
Certificate serial: 019E1F7ED1D957A253AA39B51B74B64E3626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
Manifest number: 0B81
Signing time: Wed 13 May 2026 04:01:05 +0000
Manifest this update: Wed 13 May 2026 04:01:05 +0000
Manifest next update: Thu 14 May 2026 04:01:05 +0000
Files and hashes: 1: AaBEOZ3ZZUPRMOYr0HR7shqRlxU.roa (hash: oniToucQYdIHu6lqhV89eqCsufsXROkFzPNah6lqOE4=)
2: BLrQemDWjWx48NYMm5EU7FEE2fs.roa (hash: 3uO6NEJSsXjHXxW7DrT2w1ELWOo2S4puGWGymObsq9I=)
3: cCJJNwn_gJuAQtsmGPX_UDP9tnY.roa (hash: rNInpx5nNSrUT999uu8Pr9WEUgG03eUXK2AlHeyvWXE=)
4: cPaM3tOePsVM7iIzJS7zk3upgo0.crl (hash: 7lq6fTfz3cw16fOgP39kYnqeNgHl8cYKAVo/sY4hPQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:d1:d9:57:a2:53:aa:39:b5:1b:74:b6:4e:36:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f68cded39e3ec54cee2233252ef3937ba9828d
Validity
Not Before: May 13 04:01:05 2026 GMT
Not After : May 14 04:01:05 2026 GMT
Subject: CN=bf8cc167b483b01ff10a57425581558211a3fe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:18:a1:85:88:df:bf:4d:a8:f5:4e:91:87:
eb:2b:68:66:85:eb:30:0a:54:c5:e4:8f:d9:46:e4:
04:99:84:24:14:fb:82:a5:f0:74:22:98:82:47:e0:
4d:74:8e:34:71:39:58:2b:b9:b8:a4:be:fd:28:77:
d3:70:d6:3d:77:f5:ca:46:c0:e7:f4:df:d5:ff:7d:
6d:c9:6f:41:42:c7:0c:74:37:07:66:ec:5e:80:bf:
5e:35:7b:83:24:af:da:8a:bf:e4:c9:73:b8:cd:b7:
94:3c:6d:0d:f9:0d:1b:c2:90:87:86:33:ea:e8:ad:
a3:a8:1d:a0:1a:4e:83:8c:74:90:14:1c:e1:97:5c:
6c:84:6c:2b:2a:9b:d8:99:f5:77:58:4c:67:43:22:
fb:ed:56:44:93:af:a5:aa:15:40:b2:d7:7d:33:58:
58:b4:4d:12:7a:f0:7a:66:13:6e:bc:e1:e6:4e:e9:
87:88:96:94:b6:29:6e:9f:bd:bc:63:99:3a:71:98:
91:fd:8e:f4:67:50:8b:fe:97:da:3f:7d:68:66:27:
c7:24:04:18:0a:d6:f1:cc:67:2d:3f:89:1c:8e:4d:
65:ec:79:80:69:5c:a8:f0:61:eb:07:66:20:61:b7:
9f:5d:82:f9:df:f3:ed:0f:5c:f8:8c:5e:3e:f5:fa:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:C1:67:B4:83:B0:1F:F1:0A:57:42:55:81:55:82:11:A3:FE:28
X509v3 Authority Key Identifier:
keyid:70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:30:c8:f3:42:f1:8d:55:c2:2b:ef:51:41:23:4f:0b:63:
20:66:9c:ab:77:a6:87:9c:3b:9e:69:66:4f:50:28:76:73:25:
83:38:0b:dd:0e:5f:7b:10:bd:02:c2:49:ee:b0:ff:8b:ae:82:
4b:e3:72:c5:5d:2b:17:c5:e4:ad:df:43:9a:3c:b5:0f:d3:56:
65:63:8c:c5:50:8e:6e:85:7e:38:51:aa:93:df:ea:8b:5f:30:
d4:16:3f:2f:78:2a:65:d7:a3:24:88:c1:2d:38:2e:44:64:92:
76:94:4c:4a:31:e8:4e:24:23:d3:cc:12:c6:27:a3:ab:0f:ab:
6b:88:89:61:3a:ea:f2:94:4d:50:41:1b:1e:82:36:e3:44:81:
dd:d9:b4:a4:33:6c:d4:57:81:ee:84:47:0c:19:35:d9:1d:c3:
03:de:c2:c0:95:01:9b:bb:79:aa:18:06:c3:ee:db:83:b5:88:
ab:11:4c:d1:82:87:c7:aa:7f:df:37:5b:38:b7:70:76:f0:55:
b8:90:c4:8f:ac:9b:72:71:b5:0c:6c:d5:de:2b:4d:7b:1e:1e:
2f:9a:d1:89:07:ac:50:d4:44:f9:bb:88:51:b2:0a:bd:bb:e8:
32:be:ab:96:74:ec:59:e1:b9:0f:ba:68:b1:b2:b6:63:12:ae:
79:5a:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:15 2026 by rpki-client