Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: IjOJGApwrCimBLEzZXObYm8UbPiDjjejRFVRM9pNBnU=
Subject key identifier: 58:A8:BB:7F:DF:4A:86:2E:34:E7:39:01:E3:47:F8:06:9F:00:DD:E9
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 01A0EC2ECFEF281828DCE61C8E0191F07258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 0482
Signing time: Tue 29 Sep 2026 08:01:25 +0000
Manifest this update: Tue 29 Sep 2026 08:01:25 +0000
Manifest next update: Wed 30 Sep 2026 08:01:25 +0000
Files and hashes: 1: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: gDZBYeQSvKScLofEyvM7X2G4Du+LDa12pqn4bfxVlGM=)
2: iFr6HF7AcAIE7SL_xgtb9gghgjM.roa (hash: 1+PHdAJ98duf/VMqvgx7vNiRWzao2CXjvddd5jArPf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:cf:ef:28:18:28:dc:e6:1c:8e:01:91:f0:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Sep 29 08:01:25 2026 GMT
Not After : Sep 30 08:01:25 2026 GMT
Subject: CN=58a8bb7fdf4a862e34e73901e347f8069f00dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:44:71:63:4a:bc:06:60:9e:9b:22:50:81:
30:f3:f1:5e:9a:79:83:a0:d3:60:7f:91:ac:93:ca:
bd:b5:08:0c:4c:b8:3a:50:77:ef:2d:27:1c:c5:2d:
1a:a0:0d:c8:26:6d:05:ec:db:15:7f:92:16:11:ed:
c1:08:7d:fb:b4:65:4e:86:14:51:92:8c:7a:65:43:
fe:be:de:5c:0f:e9:79:a1:ce:1d:37:58:cf:db:e2:
2a:36:16:53:91:df:f2:14:9a:21:79:35:03:b4:72:
33:16:9b:6b:52:cc:8a:1e:b7:0c:c5:36:83:7d:d4:
03:60:c1:4b:e2:e6:bf:d3:df:53:09:2e:b9:93:66:
35:69:ad:58:04:29:2a:f6:3a:4f:b3:26:7a:1b:11:
9a:7e:cf:83:dc:48:f0:04:ea:1e:52:e5:13:32:94:
0e:30:1b:7a:f8:27:70:21:f7:f2:e3:1f:cc:46:e1:
2b:05:bb:05:2f:98:42:84:e8:09:6d:41:ca:91:ba:
04:85:e3:d9:60:f3:8d:84:9c:44:8f:3f:13:99:fc:
01:29:b2:65:a7:ca:0a:d5:69:ed:2e:db:b1:08:99:
82:bd:3a:26:1b:c8:1d:9c:46:ee:44:b9:38:8a:10:
74:df:ed:43:25:d4:9a:1f:a5:77:5e:a7:1a:d5:df:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:BB:7F:DF:4A:86:2E:34:E7:39:01:E3:47:F8:06:9F:00:DD:E9
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8a:da:c3:90:3f:05:14:e5:02:0e:e5:b4:a4:f1:23:c3:5e:
b6:50:62:78:49:a8:09:7f:64:03:d7:c0:b7:2e:5f:6d:36:ba:
8d:32:72:b2:39:45:34:3b:9a:ad:cd:6a:d2:aa:93:90:a5:72:
17:2f:1d:91:cc:06:55:34:f3:52:7b:ba:f4:e8:52:61:e8:dd:
62:66:06:ea:32:eb:ec:73:f5:15:0d:73:6c:b6:39:3d:d9:51:
cf:50:e1:04:f5:88:42:54:cc:6f:a0:dd:17:2f:06:af:46:1c:
38:2e:99:05:05:66:4e:3e:19:68:74:29:88:7c:09:6c:ce:e4:
4b:d8:a6:44:23:5b:7b:73:76:32:0f:fc:22:3f:51:47:24:5e:
9c:cc:29:91:7b:c4:0d:b2:9f:5b:d1:79:e4:16:50:98:cf:3c:
1f:62:46:6e:76:b4:33:07:fd:d3:f0:50:10:14:21:e5:ec:00:
0f:b5:93:6e:cd:36:8e:8e:5d:d8:21:af:b5:8c:4b:9a:a5:24:
f4:62:83:cb:41:07:b8:17:27:09:92:23:99:50:d8:c6:48:89:
fb:22:f9:88:b9:4a:b3:8e:28:91:3b:fb:c7:93:05:be:da:40:
9f:7b:3e:d7:87:fc:64:ff:1f:f6:f5:45:ae:b7:e9:59:c3:f9:
ad:bf:09:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsLs/vKBgo3OYcjgGR8HJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWNhNjNlNmQyYjUwNDQ0OTIxN2RjMDc4OGM5ZDM3NDg5
YjRjNDUwHhcNMjYwOTI5MDgwMTI1WhcNMjYwOTMwMDgwMTI1WjAzMTEwLwYDVQQD
Eyg1OGE4YmI3ZmRmNGE4NjJlMzRlNzM5MDFlMzQ3ZjgwNjlmMDBkZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJdEcWNKvAZgnpsiUIEw8/FemnmD
oNNgf5Gsk8q9tQgMTLg6UHfvLSccxS0aoA3IJm0F7NsVf5IWEe3BCH37tGVOhhRR
kox6ZUP+vt5cD+l5oc4dN1jP2+IqNhZTkd/yFJoheTUDtHIzFptrUsyKHrcMxTaD
fdQDYMFL4ua/099TCS65k2Y1aa1YBCkq9jpPsyZ6GxGafs+D3EjwBOoeUuUTMpQO
MBt6+CdwIffy4x/MRuErBbsFL5hChOgJbUHKkboEhePZYPONhJxEjz8TmfwBKbJl
p8oK1WntLtuxCJmCvTomG8gdnEbuRLk4ihB03+1DJdSaH6V3Xqca1d+ACwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiou3/fSoYuNOc5AeNH+AafAN3pMB8GA1UdIwQY
MBaAFHKcpj5tK1BESSF9wHiMnTdIm0xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2Ut
NTU5ZTNkNzZjNWI2LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2UtNTU5ZTNkNzZjNWI2
LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4raw5A/
BRTlAg7ltKTxI8NetlBieEmoCX9kA9fAty5fbTa6jTJysjlFNDuarc1q0qqTkKVy
Fy8dkcwGVTTzUnu69OhSYejdYmYG6jLr7HP1FQ1zbLY5PdlRz1DhBPWIQlTMb6Dd
Fy8Gr0YcOC6ZBQVmTj4ZaHQpiHwJbM7kS9imRCNbe3N2Mg/8Ij9RRyRenMwpkXvE
DbKfW9F55BZQmM88H2JGbna0Mwf90/BQEBQh5ewAD7WTbs02jo5d2CGvtYxLmqUk
9GKDy0EHuBcnCZIjmVDYxkiJ+yL5iLlKs44okTv7x5MFvtpAn3s+14f8ZP8f9vVF
rrfpWcP5rb8JUw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:32:10 2026 by rpki-client