Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: mmccJFwRkXcDt6EDRsLj1tYjZ93cRwoEBQdKmyZ2iFo=
Subject key identifier: 81:8B:7D:E5:22:E8:CE:E6:20:17:79:2C:E5:1A:00:4C:9B:B5:EA:E5
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019D265F57F643AC8BC3AD73050F72BE9A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 0286
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: 5kRG3TS3F5mS1LJNKgoMj7B0Kzc.roa (hash: IYPpCgmRajRKH3SyHejCDJsXv1khAQdVFsgw3iiSVoA=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: TObacR6hhLg4Rs6vy6LmbNfaq/En8Imb113Ld3uTNAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:57:f6:43:ac:8b:c3:ad:73:05:0f:72:be:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=818b7de522e8cee62017792ce51a004c9bb5eae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:1f:6e:88:38:b5:27:8d:31:01:c5:8b:1a:
46:7d:f8:d1:e3:d8:a5:e1:5e:ce:43:1e:04:a9:8f:
ca:f6:04:20:dd:4f:47:6e:79:b3:d3:3e:3b:a0:b7:
2f:78:49:ca:b9:15:b6:88:70:48:c9:98:43:b1:d1:
de:14:fc:55:54:c8:99:72:96:5e:e2:77:e4:9b:5a:
07:04:72:a5:07:7e:80:d3:97:ec:25:21:60:50:cc:
ea:c5:30:0f:09:ed:fe:d0:16:da:5c:b3:d4:ba:04:
0c:71:3c:3e:87:c3:e9:dd:65:8f:b3:7c:0e:7d:d7:
8b:4d:48:7d:d8:5a:48:db:ee:64:34:2e:22:c0:21:
f6:7a:84:6f:35:bd:4a:c8:d9:d2:dd:2a:f9:eb:4a:
85:b1:64:7c:92:b8:c7:bb:3d:3c:6f:e0:89:fe:56:
e2:0d:35:cc:56:07:9b:04:62:d8:7b:9f:19:eb:4d:
c2:b5:40:0c:a3:5d:98:94:11:31:57:b1:0b:04:df:
27:86:1a:b3:5c:7d:66:d7:61:7c:ca:35:d2:0b:01:
20:65:7d:4b:05:c7:7e:48:3f:4b:82:3c:95:49:6a:
3c:1f:59:68:bf:39:85:0c:00:f5:d4:1b:5b:33:c4:
06:c7:a9:04:29:98:b6:82:dc:6b:62:39:63:b7:80:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8B:7D:E5:22:E8:CE:E6:20:17:79:2C:E5:1A:00:4C:9B:B5:EA:E5
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cb:a1:9c:90:d1:2e:42:ba:03:35:53:b9:cd:b2:52:7b:80:
2d:b3:f3:57:15:17:0a:91:dd:8c:bc:d0:79:b2:d3:a1:b8:13:
96:e9:b6:40:86:67:73:b9:c7:e1:ea:78:59:c8:4d:0f:63:56:
6b:d6:08:64:66:3e:ad:0a:8c:ca:7d:28:dd:2b:ea:a6:f8:ff:
34:12:af:85:6f:b3:75:4f:20:31:76:71:55:e6:ba:36:98:8b:
47:c0:9d:59:24:cb:49:9d:18:28:33:33:20:a1:97:67:c3:c6:
d6:97:ce:5e:76:d5:77:0a:b9:a4:b9:d1:af:dc:f1:92:0a:f3:
d4:1e:58:3c:01:23:eb:aa:45:b3:c6:bd:ae:9c:7a:6c:08:9f:
9e:e6:96:56:ee:01:99:cb:bf:52:ba:56:f6:f6:94:56:14:99:
dc:b2:8e:f2:16:b9:ef:4f:3b:4e:47:84:38:f3:42:ad:f5:6f:
38:79:4c:18:f2:df:4f:21:df:fb:87:07:41:e8:b1:cf:a3:16:
b7:b9:45:43:fd:bc:43:1e:29:8b:15:11:c7:70:47:df:e3:79:
cd:c6:5d:6c:1c:b7:50:4b:df:82:f7:c7:dc:1f:08:37:c9:c5:
c3:b8:f4:70:91:56:76:1e:b2:3e:d1:1c:9e:0f:2b:b1:0a:d4:
02:2d:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:13 2026 by rpki-client