Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: dmQywyGIhCScx1Myxi5fRJxuvdw6dg9/lT0vo616r6M=
Subject key identifier: 66:8E:94:49:A1:C9:49:5E:11:F5:15:21:A6:60:0B:C8:8F:C5:78:A6
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019E1F11B26749245397DF60A922EF23EF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 04A6
Signing time: Wed 13 May 2026 02:01:53 +0000
Manifest this update: Wed 13 May 2026 02:01:53 +0000
Manifest next update: Thu 14 May 2026 02:01:53 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: TmMtKTh8633/gdiF8rYeN+swdusg2BBm54sT/KByyC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:b2:67:49:24:53:97:df:60:a9:22:ef:23:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: May 13 02:01:53 2026 GMT
Not After : May 14 02:01:53 2026 GMT
Subject: CN=668e9449a1c9495e11f51521a6600bc88fc578a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:81:49:5d:14:6e:24:88:42:55:f6:5b:33:
98:87:78:61:98:40:a4:86:f7:bf:5d:99:72:e8:6f:
b7:9b:c4:59:15:53:8e:e6:5a:33:10:e5:69:8a:1e:
48:70:7a:3d:a5:22:41:60:0b:27:83:47:bb:ab:55:
de:38:aa:20:6a:bb:38:13:d1:b2:23:b5:c3:b6:e9:
c8:67:74:ff:aa:18:37:3d:90:94:bf:48:33:9f:cd:
c7:93:38:ba:16:1c:92:ff:e1:04:00:11:74:5c:d8:
67:10:89:08:70:0c:fa:f5:d8:60:0c:9d:aa:46:87:
8a:29:65:92:8c:99:c6:04:17:66:66:8c:62:64:27:
78:bd:7a:cb:34:64:ba:8c:dd:a5:13:2b:83:49:04:
71:2a:a1:d2:f4:44:fc:9a:72:16:3b:31:42:a3:e7:
63:20:d9:02:61:72:c3:30:1e:d7:e1:86:64:fc:62:
34:f6:5b:e2:1d:51:17:79:ff:e5:e2:72:56:29:b4:
61:5d:f1:fe:26:11:79:bb:2c:e1:1e:6a:84:d9:c5:
47:5d:70:59:58:db:d4:61:17:90:27:bb:d2:20:76:
fe:3b:f1:44:a0:5a:be:7a:df:85:1b:90:5c:5e:a6:
67:57:d7:e7:58:24:95:87:8c:f1:e6:0a:ef:2d:7a:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:94:49:A1:C9:49:5E:11:F5:15:21:A6:60:0B:C8:8F:C5:78:A6
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:17:22:f8:fa:7e:2b:cd:4a:96:3a:b6:bb:ea:a1:d4:91:9e:
9d:74:52:1b:70:2c:77:66:1f:b2:6e:be:21:58:84:cf:04:95:
a7:c8:35:a8:00:e2:1e:e7:d7:72:2f:7c:1c:b3:2b:bf:e6:61:
05:33:d4:9f:84:f0:06:7e:5c:43:1d:81:08:fc:30:6e:6c:7e:
d1:04:7a:4f:4b:4e:9a:e5:bb:0c:e8:cb:58:1d:1f:72:4d:64:
12:04:22:e9:bf:16:19:af:40:97:51:4f:f2:3f:31:b0:35:97:
a5:9f:49:c3:5b:b8:47:f2:0f:c2:ce:5b:1b:3d:c9:ec:f7:cb:
00:0f:75:ab:0d:8e:c9:df:30:e5:d3:b4:2d:f6:68:0d:91:59:
b3:4a:1e:4d:3a:24:9f:a3:5a:76:aa:67:c6:8a:da:81:47:fc:
5f:ad:59:41:a1:c9:92:05:5a:bd:7e:46:8a:7e:ff:29:89:51:
7c:54:33:66:12:99:64:25:7a:cf:04:ae:e9:76:90:b3:25:8e:
62:2a:7e:c8:ea:63:d1:67:3c:8e:af:5c:89:14:9c:c9:ab:0c:
c2:04:a5:cf:ca:d4:ce:90:a1:4a:20:61:9b:57:47:99:c5:8b:
af:4a:52:f1:6e:dd:b9:12:40:1f:13:b5:14:2e:b9:2e:2a:18:
7c:84:b6:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEbJnSSRTl99gqSLvI+8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTM0ZmMzY2FkYWRlNmYwNzkwN2FlYjZlMGJlNWE5ZWM0
NDA3YjkwHhcNMjYwNTEzMDIwMTUzWhcNMjYwNTE0MDIwMTUzWjAzMTEwLwYDVQQD
Eyg2NjhlOTQ0OWExYzk0OTVlMTFmNTE1MjFhNjYwMGJjODhmYzU3OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAiBSV0UbiSIQlX2WzOYh3hhmECk
hve/XZly6G+3m8RZFVOO5lozEOVpih5IcHo9pSJBYAsng0e7q1XeOKogars4E9Gy
I7XDtunIZ3T/qhg3PZCUv0gzn83Hkzi6FhyS/+EEABF0XNhnEIkIcAz69dhgDJ2q
RoeKKWWSjJnGBBdmZoxiZCd4vXrLNGS6jN2lEyuDSQRxKqHS9ET8mnIWOzFCo+dj
INkCYXLDMB7X4YZk/GI09lviHVEXef/l4nJWKbRhXfH+JhF5uyzhHmqE2cVHXXBZ
WNvUYReQJ7vSIHb+O/FEoFq+et+FG5BcXqZnV9fnWCSVh4zx5grvLXr3UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaOlEmhyUleEfUVIaZgC8iPxXimMB8GA1UdIwQY
MBaAFHKTT8PK2t5vB5B6624L5ansRAe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAt
YzA4Y2YxOTdhMTBjLzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAtYzA4Y2YxOTdhMTBj
LzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRci+Pp+
K81Kljq2u+qh1JGenXRSG3Asd2Yfsm6+IViEzwSVp8g1qADiHufXci98HLMrv+Zh
BTPUn4TwBn5cQx2BCPwwbmx+0QR6T0tOmuW7DOjLWB0fck1kEgQi6b8WGa9Al1FP
8j8xsDWXpZ9Jw1u4R/IPws5bGz3J7PfLAA91qw2Oyd8w5dO0LfZoDZFZs0oeTTok
n6NadqpnxoragUf8X61ZQaHJkgVavX5Gin7/KYlRfFQzZhKZZCV6zwSu6XaQsyWO
Yip+yOpj0Wc8jq9ciRScyasMwgSlz8rUzpChSiBhm1dHmcWLr0pS8W7duRJAHxO1
FC65LioYfIS2NQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:53:50 2026 by rpki-client