Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: V5gwzHYl7/RCQfBDFGpEVhJTdJiJO23BeGYrDXHM3LM=
Subject key identifier: C8:FE:BE:E0:8D:05:54:63:6D:98:6C:09:24:89:53:8E:20:CD:76:3D
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019D27DF9ED8529A3AF59184B4D0BB45ED41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 0426
Signing time: Thu 26 Mar 2026 02:00:59 +0000
Manifest this update: Thu 26 Mar 2026 02:00:59 +0000
Manifest next update: Fri 27 Mar 2026 02:00:59 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 37bHIs8VVb4yxjsfGM5PT2GI3YXgmJrD2THTNlfH8zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9e:d8:52:9a:3a:f5:91:84:b4:d0:bb:45:ed:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Mar 26 02:00:59 2026 GMT
Not After : Mar 27 02:00:59 2026 GMT
Subject: CN=c8febee08d0554636d986c092489538e20cd763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:c9:2c:6e:56:24:53:bb:30:db:b8:6a:8c:
97:62:d3:0b:e1:95:65:62:0d:51:1d:cc:21:48:59:
4f:ed:f8:54:3c:71:14:30:6a:4f:cf:9d:ac:67:4b:
45:e6:e7:d7:77:ab:7a:d4:2d:59:d7:31:9a:ba:f3:
43:a4:b2:e7:05:dd:4e:35:fb:d9:e3:51:58:26:31:
6f:46:ff:f5:46:67:27:24:69:80:42:fc:96:b9:ca:
c5:f2:ae:d0:22:5f:a1:52:92:51:08:db:f4:38:2d:
ef:83:8f:45:0f:98:c5:1f:e1:4f:79:33:90:7a:93:
bf:23:21:d0:8e:e4:e8:da:89:80:41:de:ee:47:4f:
8b:89:84:5a:a1:e0:c4:c4:7a:b6:79:2d:c3:c9:5b:
f0:9b:8f:dd:3f:9e:57:62:4d:82:e0:29:b6:0e:73:
da:64:43:c4:1b:77:0f:3e:ce:ae:9e:05:61:32:e6:
93:5c:35:91:16:cf:c1:05:37:06:b3:21:2c:91:1a:
d3:74:d7:7a:05:ec:3e:60:82:7b:b0:55:ac:ab:3d:
d1:e0:11:e4:64:37:f9:59:cc:83:bf:ea:1b:30:71:
9b:3a:48:c6:b7:7b:8f:c2:9f:0c:55:85:c4:d7:24:
9e:26:df:c3:57:49:fa:a6:5d:a1:38:a5:36:19:92:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FE:BE:E0:8D:05:54:63:6D:98:6C:09:24:89:53:8E:20:CD:76:3D
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:8f:97:66:6b:4e:13:93:df:b5:29:64:e1:8a:fc:ed:38:56:
10:35:54:28:b3:21:d1:84:b2:61:a3:39:67:6c:22:d1:44:fa:
d7:95:1e:16:e9:cd:b1:9e:d3:7d:24:89:f4:9f:9d:7e:0c:b9:
e0:11:11:9a:a7:91:09:5c:ae:f3:af:2e:b7:c5:ad:16:43:19:
70:b7:a3:ee:f2:14:43:c7:fe:f3:3c:d4:d5:48:7d:e4:c9:53:
0e:09:cf:b7:c7:4a:36:80:1c:eb:22:be:34:b7:97:f6:9c:a1:
08:14:e4:1e:a4:f5:7c:a9:1d:c7:7a:72:94:b2:43:df:bf:5a:
eb:21:0a:f0:3a:c7:72:48:33:06:b3:35:d8:5e:be:d2:34:91:
60:c1:96:52:a9:10:1f:e3:4a:da:60:e8:93:79:0a:ef:be:78:
47:79:a3:3e:67:8c:24:64:55:00:ed:a7:d5:be:cf:1a:63:04:
a6:2a:23:1a:86:ce:a0:de:b1:91:59:6b:f8:61:e8:55:41:b7:
9e:85:c2:5c:b8:27:e4:50:1a:81:39:da:4e:b4:4b:43:b5:83:
01:82:c9:f4:17:6c:18:cd:8a:83:3f:f2:dc:fa:e5:12:00:0e:
0e:b6:bd:49:65:03:3f:6b:f5:48:fa:2e:03:c7:20:b5:85:0d:
32:99:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:34 2026 by rpki-client