Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: ox13ROu+sEzWIDALG2ygezTfLfcNDoFjZJ8xrb7TAaA=
Subject key identifier: A2:20:F9:E9:20:CE:FB:97:8E:98:46:E0:62:E6:C0:FC:D6:3C:06:CC
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 01A0E1E205E91BBA98B4AAA963D24127876F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 0614
Signing time: Sun 27 Sep 2026 08:01:21 +0000
Manifest this update: Sun 27 Sep 2026 08:01:21 +0000
Manifest next update: Mon 28 Sep 2026 08:01:21 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 1XFEYnpJKl+3FCG4daI+tFrWsZfpiAh/HdFkxJOE3dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:05:e9:1b:ba:98:b4:aa:a9:63:d2:41:27:87:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Sep 27 08:01:21 2026 GMT
Not After : Sep 28 08:01:21 2026 GMT
Subject: CN=a220f9e920cefb978e9846e062e6c0fcd63c06cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:8e:51:5d:17:29:48:91:aa:e7:4e:f6:21:
d8:ea:05:43:64:da:03:7f:d7:65:32:a9:63:01:71:
ee:90:68:db:84:2d:39:d6:3e:c3:4b:c8:9f:5f:ee:
21:bb:00:39:b0:2d:cf:23:a4:b3:04:90:43:e1:53:
32:3d:2a:16:ed:82:78:51:18:d9:76:5f:b4:7c:1b:
dc:ca:a7:4f:89:0a:9f:7d:5b:28:2c:43:0e:53:2b:
87:8b:86:6f:9a:a7:20:90:6c:b8:dd:a8:89:9a:1a:
cb:05:40:ab:ae:a9:25:8c:fe:c0:ec:79:f6:3b:f8:
5f:c0:c4:36:bf:d0:70:61:6f:28:81:2d:6d:c3:21:
c0:75:7c:a0:a2:5c:63:b6:62:75:64:9b:66:f8:61:
7b:39:de:59:b9:3e:d0:f5:d6:65:c8:02:bd:51:1d:
45:12:cb:91:42:f7:46:1b:26:94:10:5a:7d:d6:11:
f7:38:32:3b:b8:d9:f5:3a:11:f6:da:12:8e:ba:be:
81:5e:24:20:ac:fe:30:54:fb:5a:c1:53:17:e4:16:
28:a1:08:0b:5f:0a:5d:bb:9e:53:ad:45:2e:04:e3:
cf:ea:7e:56:af:41:05:d9:16:c4:8c:5c:33:5c:f4:
fd:48:41:3a:1b:29:57:ba:32:e8:7b:a4:3c:78:a5:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:20:F9:E9:20:CE:FB:97:8E:98:46:E0:62:E6:C0:FC:D6:3C:06:CC
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:58:42:52:f1:c9:e5:cf:6b:7a:1b:27:07:0d:cd:1c:73:af:
dd:6e:72:c8:50:c3:cb:86:32:68:e3:c6:f1:18:fc:90:a4:b5:
11:87:54:50:75:4a:aa:11:3e:fa:7f:65:49:d1:55:c2:7c:d5:
e6:f8:ab:95:4e:4b:50:14:ed:61:92:77:77:a3:a6:aa:47:59:
33:89:98:95:43:0b:93:32:25:cb:49:7b:31:7f:b1:e5:92:0d:
fc:d8:2a:a0:61:93:7c:4e:9f:45:16:38:1e:1c:6a:1c:1c:dc:
c0:c8:fe:ce:2e:d4:6b:fe:cf:8c:c5:16:c0:69:94:13:b8:20:
d6:0a:ac:84:13:bf:18:99:db:8a:fa:fc:e8:62:4b:5e:61:df:
63:4f:bf:24:48:56:1f:f5:04:cd:e0:c2:62:11:af:7b:f6:51:
33:89:09:b2:ca:88:96:ba:35:9b:fc:09:7a:4e:50:9d:75:15:
d0:3d:90:04:a6:df:e2:76:6f:72:d2:2c:8f:68:0d:31:5a:7c:
54:02:c6:e8:cd:e7:a7:1a:c0:78:35:8f:60:c8:62:9b:53:1f:
11:02:78:6b:9d:e5:18:c8:62:33:78:ae:82:05:6d:9a:7d:40:
e1:c4:2e:77:c8:fb:2a:6c:04:e7:70:4f:54:b3:25:5d:24:e0:
f0:e1:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:52:17 2026 by rpki-client