Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: YYiCcUMxcjYFTv64aWPW8iOWghjhGTg2KIKo9pyURUc=
Subject key identifier: 1B:5D:82:72:4A:30:D0:61:E8:D9:72:98:1E:EF:5C:8B:C8:B0:7C:13
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 01A0D0ED6B7CB29E2F3E64647157192FF25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 01:00:15 +0000
Manifest this update: Thu 24 Sep 2026 01:00:15 +0000
Manifest next update: Fri 25 Sep 2026 01:00:15 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: iiknbMRM85fuvghc1MRD8Xv7FnHLGND5N+20ODuNMmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:6b:7c:b2:9e:2f:3e:64:64:71:57:19:2f:f2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Sep 24 01:00:15 2026 GMT
Not After : Sep 25 01:00:15 2026 GMT
Subject: CN=1b5d82724a30d061e8d972981eef5c8bc8b07c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:57:88:3f:8e:23:e2:2f:2c:39:77:46:ed:
6a:ae:21:a1:96:7b:9a:c2:d5:3d:5e:fd:00:7f:d0:
52:95:32:bf:42:86:0e:fe:fe:d9:45:20:53:bb:e8:
76:45:c0:e2:96:bc:17:f4:66:9a:e4:6e:04:d3:6d:
44:6a:1d:b9:46:a6:ec:c7:65:fc:a6:0e:8d:ad:5b:
13:33:74:b4:fe:6e:e9:66:da:82:42:f2:16:d5:45:
64:83:e6:6b:54:bd:1c:76:64:e2:40:b1:92:30:3b:
b9:ea:d7:54:9d:d4:29:81:d2:b2:78:00:60:66:23:
f4:ad:66:b2:81:1a:59:27:e0:54:0b:e2:9b:a6:76:
76:44:bf:a8:17:2e:57:53:35:00:e4:f8:98:ad:88:
f9:b1:f4:4f:67:c8:df:50:02:6e:20:57:66:cc:1f:
29:00:25:67:b1:22:0c:4d:f2:05:79:37:9a:a8:94:
41:d2:27:f6:ea:c1:74:da:f9:1a:5f:78:67:bd:55:
da:a2:44:a6:4f:a9:3f:aa:fa:94:28:9a:cd:3e:54:
41:58:a8:42:72:2c:83:54:1a:19:01:02:d9:87:9d:
fe:13:be:31:d3:4a:c4:46:fd:94:96:22:9f:12:00:
1a:47:33:80:46:f4:70:ec:4a:9f:6c:9b:d7:89:43:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:82:72:4A:30:D0:61:E8:D9:72:98:1E:EF:5C:8B:C8:B0:7C:13
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:55:68:77:a2:87:af:64:f1:ed:8a:8b:2c:01:99:f1:55:87:
0c:28:3a:3a:f3:87:38:dd:fb:02:ae:81:88:bd:be:26:df:c5:
08:ce:09:68:13:11:8a:e4:3c:0a:d2:29:3e:33:46:3c:bb:d9:
c5:01:03:e0:1a:3c:49:cf:a1:f8:5d:dd:ad:bf:d8:ef:58:99:
06:64:3f:8a:19:ac:f4:2f:48:75:3a:a0:1b:4e:04:6f:0a:b2:
29:cb:ca:e2:0b:bb:17:91:df:64:cf:cc:9e:c3:5f:e3:2d:4b:
56:4b:36:94:1d:fe:3e:71:66:62:15:11:4c:0b:58:c7:9d:f3:
77:d2:41:ce:87:ec:d7:b7:81:5e:d3:c2:30:cc:24:05:fe:16:
8a:82:6f:9f:c5:66:4b:7b:01:7e:4c:c5:ca:2a:f0:e5:2c:cc:
b9:76:c3:f4:5f:6a:4b:d1:fa:21:2b:cc:f2:77:9c:dc:aa:95:
ab:a7:2b:3d:8e:93:05:ee:e3:96:d0:ae:6c:4f:e9:ec:c3:f9:
9c:20:e4:8f:9b:b6:da:74:e4:2b:11:f1:d5:e2:70:80:33:c1:
5c:06:a1:06:4d:66:1c:c5:fe:3f:bb:ec:4f:0e:c2:cb:fb:c6:
e6:b0:a4:58:2e:4d:89:2f:33:41:e4:01:46:0f:45:74:28:e3:
3c:7c:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:09:58 2026 by rpki-client