Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: ggPIDZwjcPJYQLSf2V9gRSe8s+6i6wWEbWfB3+XEbmE=
Subject key identifier: C5:AA:EA:54:91:18:B5:CD:D1:00:70:55:1E:F1:9A:58:DE:9A:7F:CC
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019E1D91189C93E561C50F0E5354FA398116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:01:48 +0000
Manifest this update: Tue 12 May 2026 19:01:48 +0000
Manifest next update: Wed 13 May 2026 19:01:48 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: a4e0pP1Z2T1JVvfweki85894txDht0P+4cAI9tv1kRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:18:9c:93:e5:61:c5:0f:0e:53:54:fa:39:81:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: May 12 19:01:48 2026 GMT
Not After : May 13 19:01:48 2026 GMT
Subject: CN=c5aaea549118b5cdd10070551ef19a58de9a7fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:95:ef:e0:fc:50:2e:2b:57:51:53:0a:6c:
90:9a:c9:a5:16:78:6f:b0:15:05:bb:d3:7a:96:b9:
83:36:d1:e2:f9:51:6e:3a:c6:7c:e2:f8:d6:0c:8a:
fe:f0:c0:18:4e:cb:9c:aa:44:66:84:39:8d:94:a5:
92:5b:73:b7:f2:2a:2d:8b:70:50:a0:2d:00:f3:0a:
79:e2:a1:75:f9:b7:54:e8:3b:3c:39:30:ce:b7:c4:
8c:eb:09:58:49:fd:34:41:b6:f0:0a:fe:39:44:84:
d3:2c:a1:a6:fa:29:8e:b6:48:7e:a1:83:e1:de:99:
ff:6b:bb:a3:ce:6d:ae:fb:12:29:40:4a:70:92:bb:
be:e9:bd:e2:c2:21:2b:aa:77:60:d5:bb:8d:20:e3:
c1:45:02:93:10:0b:ff:48:82:4c:f8:76:c7:fd:ff:
1e:4f:9b:cc:01:97:86:c7:ad:2f:02:6c:ab:f5:11:
f8:53:a8:f0:4c:33:51:7c:75:80:f6:15:20:d1:af:
9e:db:09:ee:8c:24:96:ef:d6:1a:b0:fb:ca:06:a5:
ac:a3:36:c3:61:9e:db:c1:2f:b6:ca:da:ff:c2:a3:
ab:ad:9a:e9:e9:95:7e:6b:93:d1:8b:7f:72:f1:51:
8c:6f:bb:f5:6f:18:86:b5:02:8c:1b:0e:d7:77:a0:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:EA:54:91:18:B5:CD:D1:00:70:55:1E:F1:9A:58:DE:9A:7F:CC
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f6:55:05:bf:1b:34:a2:90:8d:48:c2:0d:d8:50:13:9a:30:
8b:c9:00:c4:29:c1:49:94:fa:f2:01:6f:23:6f:b5:6b:ee:88:
84:db:b9:31:00:92:5b:93:83:12:ea:7c:1d:e2:24:41:eb:5f:
07:12:24:66:0d:f2:c4:c9:18:92:e3:b5:56:4e:2b:f4:17:1a:
c7:61:c2:5f:8f:27:57:0d:b0:94:a6:2e:3d:57:2b:22:b0:5e:
64:0d:4a:ae:7f:b7:97:b9:76:53:7a:8e:3e:1a:6a:84:ad:72:
1e:72:b3:33:5e:82:59:65:2e:02:32:e4:ce:a5:4e:30:74:05:
57:fd:5d:c9:5f:1a:a4:48:d9:ae:d5:ca:6f:fd:a6:08:89:b1:
84:b7:c3:a0:89:12:cc:7a:20:1f:08:b6:0c:12:22:89:47:00:
c9:a7:ae:6e:63:fd:5d:3f:c3:eb:0b:6c:25:62:e4:a6:2d:14:
a2:76:0c:a9:a6:5a:ee:28:0d:17:6c:ec:7d:1d:da:34:b6:18:
3b:52:c4:98:67:00:d2:af:e0:94:7b:c2:dc:59:61:0c:a0:86:
cd:05:69:51:56:f9:f7:32:e2:0c:88:be:d4:22:7c:3e:80:b0:
1a:6e:24:62:70:45:1f:b9:96:39:d8:3d:7e:29:50:8d:ce:81:
ea:17:14:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkRick+VhxQ8OU1T6OYEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWIzM2RlNjA1MWQwNGQ3NWY2YmIxZjdlNTNiMWVmZDY2
NDYyMTEwHhcNMjYwNTEyMTkwMTQ4WhcNMjYwNTEzMTkwMTQ4WjAzMTEwLwYDVQQD
EyhjNWFhZWE1NDkxMThiNWNkZDEwMDcwNTUxZWYxOWE1OGRlOWE3ZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZKV7+D8UC4rV1FTCmyQmsmlFnhv
sBUFu9N6lrmDNtHi+VFuOsZ84vjWDIr+8MAYTsucqkRmhDmNlKWSW3O38ioti3BQ
oC0A8wp54qF1+bdU6Ds8OTDOt8SM6wlYSf00QbbwCv45RITTLKGm+imOtkh+oYPh
3pn/a7ujzm2u+xIpQEpwkru+6b3iwiErqndg1buNIOPBRQKTEAv/SIJM+HbH/f8e
T5vMAZeGx60vAmyr9RH4U6jwTDNRfHWA9hUg0a+e2wnujCSW79YasPvKBqWsozbD
YZ7bwS+2ytr/wqOrrZrp6ZV+a5PRi39y8VGMb7v1bxiGtQKMGw7Xd6AAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWq6lSRGLXN0QBwVR7xmljemn/MMB8GA1UdIwQY
MBaAFHKbM95gUdBNdfa7H35Tse/WZGIRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGIt
NmVhMjc5YTJlNmNiLzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGItNmVhMjc5YTJlNmNi
LzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvZVBb8b
NKKQjUjCDdhQE5owi8kAxCnBSZT68gFvI2+1a+6IhNu5MQCSW5ODEup8HeIkQetf
BxIkZg3yxMkYkuO1Vk4r9Bcax2HCX48nVw2wlKYuPVcrIrBeZA1Krn+3l7l2U3qO
PhpqhK1yHnKzM16CWWUuAjLkzqVOMHQFV/1dyV8apEjZrtXKb/2mCImxhLfDoIkS
zHogHwi2DBIiiUcAyaeubmP9XT/D6wtsJWLkpi0UonYMqaZa7igNF2zsfR3aNLYY
O1LEmGcA0q/glHvC3FlhDKCGzQVpUVb59zLiDIi+1CJ8PoCwGm4kYnBFH7mWOdg9
filQjc6B6hcUww==
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:00 2026 by rpki-client