Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: ynDLmsYt54hlB8j4OVdhOig6OOeJCSI2HWlGWJkj5nY=
Subject key identifier: 12:A0:97:68:D3:FF:FB:A0:28:98:03:6A:74:5C:24:2E:E9:21:44:B5
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019E1EA30EF385EB9DDF7B29F2002707323F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 0309
Signing time: Wed 13 May 2026 00:01:03 +0000
Manifest this update: Wed 13 May 2026 00:01:03 +0000
Manifest next update: Thu 14 May 2026 00:01:03 +0000
Files and hashes: 1: 3Yvq5tTGUdx3znjurL4SYbCFM_c.roa (hash: OInIxiYE9O8syisdzD08sKYvNZlMs2UIXQ8xrZomrKg=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: +3lGRQ+UekVfDREVBKJE6uc1KKotni3u8O/S4sAd6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:0e:f3:85:eb:9d:df:7b:29:f2:00:27:07:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: May 13 00:01:03 2026 GMT
Not After : May 14 00:01:03 2026 GMT
Subject: CN=12a09768d3fffba02898036a745c242ee92144b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:84:2e:e2:e5:f3:0c:5a:8f:42:a6:20:65:
35:01:1a:06:8f:f4:2c:91:e7:c0:0c:bf:32:07:88:
fd:2b:e2:4c:19:c6:77:85:4b:27:39:9f:8a:71:f1:
37:5b:5d:10:5f:a9:0e:de:ff:5f:ac:ef:01:b0:7e:
13:5e:78:3d:3a:3c:56:69:86:2b:5d:9e:a8:0c:d8:
f7:df:8d:98:d7:ac:06:e5:85:68:ee:7f:71:a8:c5:
b3:40:3a:67:96:6d:46:15:19:84:30:6d:fa:2e:f1:
74:c8:60:bb:22:c0:c5:1b:49:d6:ed:6d:b1:fb:34:
45:48:77:2d:01:5f:5b:4b:13:58:f1:22:d8:ce:6d:
66:fc:f0:a9:55:15:6d:f1:b5:8a:07:27:f0:78:09:
85:49:59:10:dd:ef:8b:d9:f6:4c:8c:aa:78:46:fe:
7f:8f:b1:2d:05:67:76:d7:08:99:9c:b3:27:31:78:
65:aa:bd:5e:1c:e5:36:e5:54:b1:fc:a6:e3:9e:d4:
0f:5a:a3:b9:06:61:63:66:18:c7:a4:53:e1:ef:ff:
12:db:43:4b:f3:9e:a6:17:5a:b7:ee:0a:53:a9:30:
bb:09:9b:5e:4c:d6:97:0e:90:c7:42:07:0e:41:ec:
3a:93:f1:e0:8d:36:b4:79:d7:38:78:92:ba:8c:bc:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:97:68:D3:FF:FB:A0:28:98:03:6A:74:5C:24:2E:E9:21:44:B5
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:62:cf:85:08:f6:15:2a:59:71:cd:6d:84:ae:e9:be:8c:a2:
0a:d2:1c:09:e7:f7:00:2e:e0:00:9f:4b:21:b5:ee:e9:cc:ca:
00:89:a6:39:90:5e:2d:c0:b8:c9:33:e1:ea:c8:ee:2c:d1:4f:
d3:58:cf:95:ad:6f:7e:d5:78:1d:ec:b8:a0:67:7b:5c:98:d0:
91:52:6d:68:71:e7:ae:dc:ac:50:e0:80:72:0e:7e:c0:d6:41:
cd:b4:81:59:b0:59:9c:6c:2b:39:f9:82:7e:0b:b2:da:c4:90:
d0:16:b6:81:6f:63:ae:d9:cf:89:15:b3:fa:67:b6:67:d0:ab:
f3:d0:1a:4d:08:95:fa:85:b7:4c:37:f6:25:fa:ed:b0:70:83:
23:dd:e8:15:41:b8:bd:da:73:47:98:93:1f:77:b3:d2:e8:84:
10:ad:a7:fc:df:a1:37:f7:30:fd:ac:27:42:86:9d:a3:e9:31:
a8:e2:30:79:6f:d9:55:b2:9d:16:44:cd:50:5a:99:56:7b:a7:
61:8c:32:29:2d:a7:73:e6:e1:7c:df:ad:01:1a:f3:f8:6f:41:
a4:a6:03:cc:e2:bb:cf:47:51:48:48:d2:3a:b8:3e:e7:67:52:
bb:74:a9:b1:bd:c4:e8:76:e5:02:0c:12:b0:2a:65:ca:7f:78:
e5:27:4a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eow7zheud33sp8gAnBzI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWNhNjNlNmQyYjUwNDQ0OTIxN2RjMDc4OGM5ZDM3NDg5
YjRjNDUwHhcNMjYwNTEzMDAwMTAzWhcNMjYwNTE0MDAwMTAzWjAzMTEwLwYDVQQD
EygxMmEwOTc2OGQzZmZmYmEwMjg5ODAzNmE3NDVjMjQyZWU5MjE0NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujeELuLl8wxaj0KmIGU1ARoGj/Qs
kefADL8yB4j9K+JMGcZ3hUsnOZ+KcfE3W10QX6kO3v9frO8BsH4TXng9OjxWaYYr
XZ6oDNj3342Y16wG5YVo7n9xqMWzQDpnlm1GFRmEMG36LvF0yGC7IsDFG0nW7W2x
+zRFSHctAV9bSxNY8SLYzm1m/PCpVRVt8bWKByfweAmFSVkQ3e+L2fZMjKp4Rv5/
j7EtBWd21wiZnLMnMXhlqr1eHOU25VSx/KbjntQPWqO5BmFjZhjHpFPh7/8S20NL
856mF1q37gpTqTC7CZteTNaXDpDHQgcOQew6k/HgjTa0edc4eJK6jLzN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKgl2jT//ugKJgDanRcJC7pIUS1MB8GA1UdIwQY
MBaAFHKcpj5tK1BESSF9wHiMnTdIm0xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2Ut
NTU5ZTNkNzZjNWI2LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2UtNTU5ZTNkNzZjNWI2
LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGLPhQj2
FSpZcc1thK7pvoyiCtIcCef3AC7gAJ9LIbXu6czKAImmOZBeLcC4yTPh6sjuLNFP
01jPla1vftV4Hey4oGd7XJjQkVJtaHHnrtysUOCAcg5+wNZBzbSBWbBZnGwrOfmC
fguy2sSQ0Ba2gW9jrtnPiRWz+me2Z9Cr89AaTQiV+oW3TDf2JfrtsHCDI93oFUG4
vdpzR5iTH3ez0uiEEK2n/N+hN/cw/awnQoado+kxqOIweW/ZVbKdFkTNUFqZVnun
YYwyKS2nc+bhfN+tARrz+G9BpKYDzOK7z0dRSEjSOrg+52dSu3Spsb3E6HblAgwS
sCplyn945SdKeg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:23 2026 by rpki-client