Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
File: CpfAyBiGg3PEAUcVBTra9hrx2h0.mft (raw, json)
Hash identifier: pIyrwO+EgBLaKFSxw5GibRtS36twmVAbOzKfYirScSM=
Subject key identifier: 47:D1:20:79:A3:E0:3B:27:DE:78:B0:26:54:6A:31:27:9E:72:4C:20
Authority key identifier: 0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
Certificate issuer: /CN=0a97c0c818868373c4014715053adaf61af1da1d
Certificate serial: 019F90C849C66CC67600D7B966D8CC503ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:01:12 +0000
Manifest this update: Thu 23 Jul 2026 21:01:12 +0000
Manifest next update: Fri 24 Jul 2026 21:01:12 +0000
Files and hashes: 1: 24AsigLbaKArrRhQpNvzkLuNdsw.roa (hash: Y6cso1vmOQRNAQC+IgTQnFt9A6yD7HrC8YdvTQc2P8Y=)
2: CpfAyBiGg3PEAUcVBTra9hrx2h0.crl (hash: RXKXZgZBu51+UoCF5lJ4j3ctaZIAszwU1GPItvGvXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:49:c6:6c:c6:76:00:d7:b9:66:d8:cc:50:3e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a97c0c818868373c4014715053adaf61af1da1d
Validity
Not Before: Jul 23 21:01:12 2026 GMT
Not After : Jul 24 21:01:12 2026 GMT
Subject: CN=47d12079a3e03b27de78b026546a31279e724c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:e8:02:74:75:87:2e:93:ed:68:cb:68:43:
0f:be:13:b6:bd:6c:ce:9b:06:8b:8f:1e:96:ca:19:
4d:cb:90:3e:16:97:b4:97:d1:93:a8:b8:8c:0e:8f:
5e:c6:dc:72:03:ff:ce:c2:8d:80:ee:69:f0:cd:71:
02:db:c8:09:22:fa:05:f1:ac:fd:72:e5:f9:e9:91:
80:7b:b0:67:30:19:83:65:c1:28:3d:db:ba:a6:56:
95:fd:7a:49:4a:66:a3:ee:4d:12:9f:cb:91:40:ee:
27:a3:cb:2b:98:cd:59:65:55:6f:40:bb:fa:32:69:
5c:49:dd:65:54:77:d3:1c:17:4a:87:53:29:f9:9c:
9c:de:55:07:9e:9d:a9:98:40:01:37:f5:d6:a9:3f:
f0:bd:11:42:3d:36:19:1a:16:e2:9b:dc:ca:06:54:
42:29:a6:31:cc:56:05:8a:60:6b:7c:2d:9a:68:18:
ef:92:19:aa:95:3d:e0:f7:ca:1b:3f:ce:27:8a:fa:
cf:ec:2e:8f:9a:86:d4:94:03:23:24:a8:4b:f5:94:
5e:52:51:68:f0:59:85:f1:8b:9e:21:84:95:8f:1e:
ad:73:38:13:0b:f4:b1:3f:21:e8:40:b4:1e:ea:1c:
6d:55:60:eb:c3:3d:d0:67:79:16:31:64:c9:e7:c3:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D1:20:79:A3:E0:3B:27:DE:78:B0:26:54:6A:31:27:9E:72:4C:20
X509v3 Authority Key Identifier:
keyid:0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c3:0f:99:e5:a3:bc:ae:22:0e:13:a1:51:5a:e5:50:53:e0:
9a:28:82:a3:7e:21:3d:67:2b:07:41:8a:7a:e6:f9:89:b9:66:
a2:30:d3:af:f2:57:ce:30:80:1f:01:1d:b6:60:9d:1f:c8:ba:
8d:bf:0c:48:14:52:b3:7a:fc:71:52:29:8d:46:50:ac:00:a7:
79:7c:27:47:97:c1:e8:fe:fd:ef:41:50:09:d6:06:c6:a0:f8:
99:2b:d2:a8:64:b5:4d:d9:94:24:17:cd:97:4f:41:48:fd:bd:
80:c7:10:50:74:20:b4:24:98:97:4f:a4:c1:42:30:48:74:c3:
1d:0d:46:32:6d:ac:96:fc:66:1d:41:eb:c1:b3:0a:a6:c0:41:
2e:5b:58:dc:6b:dc:12:20:b2:03:1f:0e:14:5c:62:67:b7:6b:
d3:b1:1b:db:52:2d:d1:c9:73:d0:ff:4e:16:dc:15:07:98:d6:
26:fd:22:1c:d8:84:10:12:84:5a:b6:23:20:21:ef:f4:2c:62:
45:71:6c:c4:ef:49:67:a6:f9:c1:b6:17:83:69:eb:fd:64:26:
f8:de:15:3d:f8:86:c5:24:88:e7:80:b7:0b:50:e6:01:a5:bb:
81:ac:da:c0:49:3c:2b:f5:61:76:1e:3c:ce:45:bf:8a:df:e3:
e0:f4:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:59 2026 by rpki-client