Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: Z3OQhjeFG5RL1ekYcpWQuFH1Ibj6ck9fdM4WueOJRGg=
Subject key identifier: 74:DA:B5:56:F1:3B:D8:3B:A0:D3:A6:E1:95:8D:9D:9C:3A:EA:B7:14
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019F93C910AFFAA81AF0FC72A4309A84F600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 0567
Signing time: Fri 24 Jul 2026 11:00:55 +0000
Manifest this update: Fri 24 Jul 2026 11:00:55 +0000
Manifest next update: Sat 25 Jul 2026 11:00:55 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 5nJ5D9wIArK4Fw+I96YW/xi3IbrN9XKgt52HllBvXkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:10:af:fa:a8:1a:f0:fc:72:a4:30:9a:84:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Jul 24 11:00:55 2026 GMT
Not After : Jul 25 11:00:55 2026 GMT
Subject: CN=74dab556f13bd83ba0d3a6e1958d9d9c3aeab714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:7a:68:56:32:c3:bf:13:52:1e:2d:de:79:
4c:17:06:65:dc:7d:d6:1d:56:6b:94:7e:c9:6d:29:
af:ae:7a:71:d7:b9:fe:4d:a3:d7:b9:7d:9c:e6:32:
c3:14:1f:99:51:3a:02:f9:46:fd:70:75:21:22:5e:
fe:9b:0c:5e:5c:be:a1:67:82:00:18:d9:7f:5a:47:
98:52:e6:1b:a5:de:20:93:1d:6c:13:88:f0:54:cf:
eb:83:52:c9:7a:4f:25:e6:c7:49:6a:fa:d4:f2:ba:
b8:ef:25:bd:09:fa:c0:67:a6:4e:ee:3f:68:d1:e5:
0c:08:9b:ae:31:48:61:b1:ad:9c:b0:31:55:01:1d:
6b:67:7f:65:ed:f1:1c:79:b5:c8:d0:fe:10:a6:16:
2b:11:55:39:92:26:f2:bb:8c:84:53:45:43:3b:ea:
15:f7:ab:23:8f:0e:6e:9a:90:e0:bc:25:b8:55:2d:
82:9f:6a:b3:f9:e1:4e:72:7d:88:d9:1a:a8:2c:46:
23:a9:11:54:32:23:2c:57:1c:34:82:6e:0e:1c:ee:
fe:7f:98:b8:81:3b:1e:c0:76:d0:72:0a:77:4d:e3:
c2:cc:dd:74:32:dd:8b:7e:da:db:0c:ed:a2:e4:c1:
b1:41:2c:88:47:cd:2a:5e:65:64:b4:ab:1d:f9:99:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:B5:56:F1:3B:D8:3B:A0:D3:A6:E1:95:8D:9D:9C:3A:EA:B7:14
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:40:b4:18:23:3d:00:67:93:a9:1a:db:10:21:54:3a:9f:d6:
1a:cc:3c:97:3e:60:a1:a2:db:39:2c:84:a7:2f:e7:42:ff:c4:
95:e1:61:b7:73:f7:3c:6b:84:57:76:62:9e:87:0f:af:c2:04:
7a:b7:be:ae:c7:6e:42:38:67:4d:66:bb:05:06:41:76:1f:ad:
22:42:f6:84:ee:ed:99:17:1e:28:b3:ac:dd:cf:64:b7:2a:8a:
c5:c7:54:dc:86:55:2a:3a:04:a6:10:89:8e:2e:50:e0:b9:f9:
9a:26:e7:4e:9b:d8:fb:37:07:36:f5:33:6d:4c:82:79:84:ec:
04:26:cb:3d:e5:b3:7e:08:4e:78:47:99:14:c7:dc:cf:ca:79:
8e:2d:f0:b4:91:f2:e4:ba:6e:9e:0d:89:92:48:6d:eb:ad:97:
86:4e:dd:2e:ca:35:06:9b:b9:d7:4a:21:f7:31:b4:e7:de:f6:
a0:1e:29:82:3e:43:75:80:e6:9e:e6:ec:90:e9:51:02:4d:42:
7b:e9:12:77:6e:59:2b:cc:cd:e7:03:08:a0:fc:94:0a:a6:85:
15:54:46:a8:e2:e9:61:8d:5a:f8:73:b3:9a:8c:ac:a7:83:3a:
6f:f3:8d:31:1c:56:4a:ba:d5:d1:01:5d:2e:ea:1b:9f:52:89:
63:a9:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:54 2026 by rpki-client