Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
File: CpPZnkkKNdkpsBpstzxYPxCvyvE.mft (raw, json)
Hash identifier: ATaEixnSq/St15E/pqgNW2QUKQi7X1dc64Ez++iWKa4=
Subject key identifier: 8D:6D:E8:CF:BF:65:D8:92:AB:2A:20:A9:00:86:C2:47:66:CE:6B:21
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 01A0D3F05A473E67E504226233E8F7D84DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:19 +0000
Manifest this update: Thu 24 Sep 2026 15:02:19 +0000
Manifest next update: Fri 25 Sep 2026 15:02:19 +0000
Files and hashes: 1: 5QoBwy08FxgB_afPPhW35rzgfWU.roa (hash: uERpJTLN6QfeTTT2yfUb2XxvlLw0q2GpMhWCfNcNS0U=)
2: CpPZnkkKNdkpsBpstzxYPxCvyvE.crl (hash: djHk8eLEv6bsg5e6SPCcX2ddVGyzDeihdxBlMWzIfvA=)
3: v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa (hash: ycxrVcxT6hzdZ9cCnHhOzF1SYBYj+akBiGaWZrxA79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:5a:47:3e:67:e5:04:22:62:33:e8:f7:d8:4d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Sep 24 15:02:19 2026 GMT
Not After : Sep 25 15:02:19 2026 GMT
Subject: CN=8d6de8cfbf65d892ab2a20a90086c24766ce6b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:d6:fc:64:68:3c:fa:0e:5b:87:f7:00:e3:
95:dc:86:75:ca:22:a5:c6:79:f6:dc:e1:cf:68:ef:
08:85:30:83:79:ae:c1:b0:34:f8:69:06:68:dc:78:
16:8e:ad:03:94:e1:58:8e:1a:ca:09:51:2b:7d:6a:
56:9e:08:f2:7c:49:cd:85:fe:3e:0d:a9:5e:33:0d:
2d:f6:fd:64:e8:16:3a:46:65:5e:d5:d3:0a:66:09:
29:29:21:21:a3:6f:fc:f9:f3:4d:09:6c:5f:76:12:
17:f2:42:15:38:93:94:4d:d0:78:c3:9a:14:4f:78:
c0:51:72:b4:98:60:4b:35:d7:97:54:e5:a2:60:8b:
ff:52:28:ef:a3:9d:4b:be:43:a7:24:7c:c3:69:ec:
cb:3f:66:ef:55:9d:61:ad:aa:a6:e2:66:93:69:2b:
2f:8f:a2:19:e9:23:8c:94:de:6a:d0:30:87:ce:df:
6c:c3:12:8a:05:ca:9e:4f:81:06:ef:12:0d:75:a2:
85:d2:45:b6:0d:7f:fb:af:21:d1:fc:ff:b8:b3:a3:
44:84:34:8e:09:0a:00:5a:d0:49:91:35:fd:0e:02:
c6:3b:82:5e:dd:51:51:43:02:d1:f8:bb:ec:76:ef:
73:9f:cc:1f:4c:73:16:e4:c1:0e:0f:28:47:9c:6d:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:E8:CF:BF:65:D8:92:AB:2A:20:A9:00:86:C2:47:66:CE:6B:21
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:15:51:eb:a9:37:e4:c1:b1:d9:5a:4a:59:5c:f0:53:f9:
74:70:d7:2f:f6:e8:82:20:32:04:c5:3c:13:3f:5d:dc:b4:23:
c3:38:8a:d5:53:4d:67:a3:1d:af:41:a1:8a:f6:5d:d8:75:21:
5d:1d:5f:1f:e9:ff:d1:82:29:88:79:ab:47:e4:98:d3:59:ce:
7e:0f:b3:57:c6:94:03:27:03:6b:cc:4b:dd:ce:db:9f:13:03:
07:8e:56:10:d2:73:a9:e6:b6:6a:32:c4:73:ed:02:df:b1:64:
c7:76:c4:7e:6f:9e:d4:13:96:4c:2a:6d:ca:88:53:70:74:4d:
ac:08:e3:06:92:8c:37:c1:7f:c1:7a:e0:74:b1:d3:ae:7a:c1:
2d:cb:74:be:d2:57:88:cc:5c:7c:fd:fa:46:57:11:66:69:d4:
3e:64:dd:8f:7a:2c:2a:9e:9d:16:10:0c:2d:7c:bf:c1:43:b0:
12:cc:27:48:96:e7:bb:5e:96:4f:e2:47:bd:2e:9f:5d:65:0b:
17:13:17:c9:d9:d5:96:1a:bf:b3:04:fe:1d:35:e6:89:52:fe:
fc:67:de:08:79:ec:08:75:59:e5:55:da:b8:01:0c:b1:51:5f:
d8:1e:41:25:4a:58:6c:35:78:08:26:64:c6:10:55:73:37:93:
5c:70:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:39:37 2026 by rpki-client