Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: kYWuVN+FSC64yzA2UCfwEFJSJJVx9vgrIBfDPL48C00=
Subject key identifier: F0:9D:39:A4:92:51:5B:38:C3:7D:5D:57:0B:07:D7:82:4C:DD:CF:D1
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019D284E21059979D3C9C9531D7A08E99D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:41 +0000
Manifest this update: Thu 26 Mar 2026 04:01:41 +0000
Manifest next update: Fri 27 Mar 2026 04:01:41 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: p3MDu2iYyLifJDIFSdRFbJJu681fnm0fI9R8dtlA7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:21:05:99:79:d3:c9:c9:53:1d:7a:08:e9:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Mar 26 04:01:41 2026 GMT
Not After : Mar 27 04:01:41 2026 GMT
Subject: CN=f09d39a492515b38c37d5d570b07d7824cddcfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:f7:5c:1a:69:b9:a9:b8:52:d5:af:eb:c8:
e9:7c:72:0c:29:d6:1b:bb:c1:76:64:f6:3a:c8:b9:
bc:1a:c1:4a:fe:16:49:64:87:4a:bd:bd:0f:3a:c1:
7f:40:d6:81:7f:0c:7a:0c:26:97:b4:68:76:05:50:
20:c2:7c:1b:aa:cf:31:54:67:ab:a3:4e:37:00:09:
26:93:8e:ca:9f:e1:25:30:d4:d9:75:2f:77:e4:c6:
5b:2c:9a:1e:99:56:5c:f5:a7:ce:a8:63:11:68:af:
da:2c:e4:30:6f:97:b7:cc:85:d8:18:0f:c7:36:cf:
81:e3:bd:22:d4:87:3f:ad:b5:ea:7b:c4:c3:0c:70:
9b:c5:86:d7:7f:2b:be:06:6b:8f:30:49:0d:5b:a4:
b3:c7:f1:19:ca:57:60:14:72:4f:c2:5e:d3:42:f6:
18:d0:fe:00:68:1c:c1:e2:a0:73:50:3f:66:4d:d8:
90:2f:fe:e7:fe:3e:6e:13:dc:a0:1c:8c:ca:62:41:
68:96:f4:dc:02:13:11:7b:a9:41:52:44:89:24:ec:
f1:67:ed:6d:43:26:5e:00:47:d9:ef:56:9e:e6:84:
ea:fe:16:7c:64:35:48:24:58:6d:e1:12:1d:5d:e6:
a1:75:a4:cd:aa:f3:1e:fe:1b:9b:62:22:23:35:8a:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:39:A4:92:51:5B:38:C3:7D:5D:57:0B:07:D7:82:4C:DD:CF:D1
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:c4:97:a9:ff:bb:d2:4d:08:0d:aa:c3:d7:f3:c0:9b:7a:6d:
5a:9d:78:f7:5f:fb:08:31:d2:be:57:53:1f:28:15:f5:66:eb:
a8:81:33:f3:c3:dd:e6:45:6c:c7:dd:03:69:41:e0:f9:12:80:
59:61:22:c5:28:c7:9e:83:cf:17:67:2d:b7:f1:05:49:33:c7:
6f:06:e2:8b:8b:99:0a:98:cb:2d:95:51:0e:f4:53:a0:40:93:
7d:86:9e:a7:85:34:bb:3b:23:58:e4:dc:49:d0:1d:c9:63:2a:
a3:36:68:00:06:e0:9b:94:16:6e:54:6c:66:09:98:0d:4e:13:
5b:dc:5a:f3:80:5a:cf:87:73:18:66:65:65:64:5c:41:5a:da:
36:30:53:4e:b6:a6:01:5e:83:74:37:99:4a:89:d3:66:d2:f9:
c4:0a:da:d6:f3:11:c6:c9:5f:b2:dc:8a:64:93:9d:4d:03:12:
9e:48:85:6a:cb:94:ce:e8:40:57:3b:a3:01:b0:2f:d9:3b:32:
db:e0:9a:60:18:ae:6a:05:17:74:31:99:21:90:67:2b:d5:26:
cb:ce:22:87:35:b1:67:3e:ca:62:30:46:b2:ab:a6:ce:d7:b0:
98:e2:05:78:50:3f:cf:e2:d3:38:27:9e:8d:98:5b:c3:cd:a0:
bd:83:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:50 2026 by rpki-client