Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
File: CpPZnkkKNdkpsBpstzxYPxCvyvE.mft (raw, json)
Hash identifier: TGpNnbeddNNv2ATwcpDw8R0eBXtyBBbgox8U9lXDRdI=
Subject key identifier: 8E:56:85:F5:08:1E:F7:B5:C5:99:66:EB:60:42:0B:12:1C:E6:46:BF
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 019F8F7ED211B5B39F454281C6B408360F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:20 +0000
Manifest this update: Thu 23 Jul 2026 15:01:20 +0000
Manifest next update: Fri 24 Jul 2026 15:01:20 +0000
Files and hashes: 1: 5QoBwy08FxgB_afPPhW35rzgfWU.roa (hash: uERpJTLN6QfeTTT2yfUb2XxvlLw0q2GpMhWCfNcNS0U=)
2: CpPZnkkKNdkpsBpstzxYPxCvyvE.crl (hash: OFj4j4N4w6CVZpcxHP4tC2ENq1VNH8rwDXKqRmqPls4=)
3: v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa (hash: ycxrVcxT6hzdZ9cCnHhOzF1SYBYj+akBiGaWZrxA79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:d2:11:b5:b3:9f:45:42:81:c6:b4:08:36:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Jul 23 15:01:20 2026 GMT
Not After : Jul 24 15:01:20 2026 GMT
Subject: CN=8e5685f5081ef7b5c59966eb60420b121ce646bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:f8:74:73:47:f0:2c:00:82:d0:4f:e2:e4:
26:9a:77:4e:c7:29:b2:c4:56:eb:7e:ea:93:32:5c:
84:af:21:a8:a2:eb:52:d5:ec:19:c4:a2:09:37:c2:
aa:58:fd:3c:fe:d4:5e:0c:7d:81:1e:a2:ff:29:9a:
41:a1:bb:dc:56:f0:0d:c8:f3:d0:f8:91:75:ea:db:
44:1d:b5:f0:09:92:36:77:0a:01:dc:90:a9:22:d0:
c8:f3:97:e3:f3:b3:3a:75:4a:8d:d4:14:68:29:ba:
b5:a8:5b:c8:d1:2d:92:eb:20:95:8c:48:df:f9:05:
d9:8d:0a:55:de:00:37:e6:ef:89:d7:40:de:ab:6b:
8e:9d:5f:5f:ea:a2:cc:d5:c1:d5:98:f4:12:c8:96:
65:96:7d:7c:fa:20:74:ff:61:e1:40:61:13:0e:73:
03:8e:17:e1:13:20:23:85:31:c4:9d:43:33:d1:f7:
f2:37:00:05:16:e3:68:5d:81:dd:f1:b7:75:59:7f:
ae:fa:b0:fa:f7:50:4a:99:56:be:27:00:40:63:00:
e6:16:09:9a:94:19:87:99:34:70:c5:7d:d8:a0:6a:
fd:e3:f2:91:4e:c1:b0:f8:a6:5d:94:a9:99:e6:76:
0c:3e:f9:dd:41:11:29:27:4e:61:26:d9:b6:55:42:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:85:F5:08:1E:F7:B5:C5:99:66:EB:60:42:0B:12:1C:E6:46:BF
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:77:a0:26:ca:cc:b9:bf:8b:0f:5e:40:a9:4e:a7:c5:62:
e7:2a:93:5a:f5:18:42:67:b1:07:59:44:d7:f2:a0:b9:d0:73:
ef:8b:87:9d:ad:c2:b4:2d:6c:1d:63:45:70:c1:40:39:66:23:
4e:b2:56:ca:4a:c3:5a:10:c2:2c:02:fc:12:c7:7b:14:a3:d7:
a1:a4:f9:e2:df:eb:7e:ef:c5:d2:49:53:67:e0:80:55:07:91:
01:8f:03:29:93:2a:53:e1:2b:12:1e:fd:2a:d3:ce:d0:2a:55:
f3:bc:ed:eb:14:45:db:04:c3:42:fe:d9:da:a7:35:94:7e:fe:
08:f0:32:c8:d6:8f:e3:d9:ca:b6:ae:81:2c:8e:f5:6d:cf:24:
68:c7:5d:50:78:54:c5:f1:88:53:89:45:7f:dc:03:17:37:d6:
64:d3:e1:7e:33:ff:04:95:54:3e:7d:3d:1b:1d:f6:da:e2:21:
99:b3:c3:05:80:80:2c:66:06:10:dd:a8:c8:e0:48:73:c0:e6:
bd:dc:d8:e8:ed:eb:27:42:b4:26:e0:67:71:f1:75:b0:37:4c:
ef:d2:81:1a:2e:20:c0:5e:42:d1:5a:e6:37:a2:cc:81:02:47:
98:3c:32:a6:e8:89:db:0b:ea:60:4d:bf:25:f9:62:44:d3:bf:
42:28:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:05 2026 by rpki-client