Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: eARmgrTm1jv3S077ECdBi8gdnTAjIx01MULt1lf6o9c=
Subject key identifier: 4A:4F:30:1F:4A:83:BD:F1:7E:DC:0B:7A:EB:95:24:8C:19:AF:83:77
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019F8FEC6EA45D81C60BEFF7DCC809971FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 03CB
Signing time: Thu 23 Jul 2026 17:01:04 +0000
Manifest this update: Thu 23 Jul 2026 17:01:04 +0000
Manifest next update: Fri 24 Jul 2026 17:01:04 +0000
Files and hashes: 1: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: 6lntWz6+kIru0AGIvj9FKIbV563SNpssJI/hRLygiKU=)
2: jOAZ3E7oW-kBXNuE4GL1fYgaDyI.roa (hash: YE6xZb8RdMntJLYJXnM9I5dsHeZDxxUZFJG8X5S7g60=)
3: xg8FA0hnqIPi8c0XibhiGNYtnk8.roa (hash: 7TvENL0uN7mnUqef36Fz7XzZlZOxli3AqStudaibnxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:6e:a4:5d:81:c6:0b:ef:f7:dc:c8:09:97:1f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Jul 23 17:01:04 2026 GMT
Not After : Jul 24 17:01:04 2026 GMT
Subject: CN=4a4f301f4a83bdf17edc0b7aeb95248c19af8377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:21:13:1b:30:5e:78:84:bd:37:80:2a:25:
06:cf:96:06:16:96:f8:e1:61:a7:fa:64:14:4f:86:
06:c3:ae:dd:b2:89:6c:44:db:be:fc:87:db:e7:00:
89:22:48:b5:db:e1:a9:5b:e0:dc:26:31:d0:ad:4e:
ff:f1:41:ee:f1:b2:c6:51:d7:5e:df:d8:b5:84:c8:
2a:70:25:36:69:d5:6b:72:ad:19:0f:80:90:2e:09:
19:03:26:e7:e7:f8:75:2f:75:4c:c1:13:c1:77:b7:
70:e9:36:7b:a4:7c:94:29:61:da:cc:3b:2b:a3:9b:
22:2a:d2:8e:41:60:4f:97:62:de:2a:ce:0b:32:d9:
72:c0:6c:52:bd:7f:03:7a:46:f1:85:4d:f2:7c:92:
85:e7:52:96:09:d5:65:39:76:9b:a6:64:40:49:18:
41:e8:d4:dd:c0:06:d0:96:57:bd:fc:f3:c0:1d:e8:
ae:a6:eb:b5:99:6e:a9:e0:93:95:40:93:f0:0b:da:
02:1c:1d:17:af:08:da:d4:66:7d:4d:c1:6b:a2:d6:
2f:fe:47:03:d6:cd:97:c0:af:72:1c:d7:12:57:fa:
5b:ef:4d:a9:86:48:3e:f1:c5:9d:a0:50:60:3b:08:
72:ae:3a:b0:84:a3:82:d9:5d:4f:52:10:3f:6d:a0:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:30:1F:4A:83:BD:F1:7E:DC:0B:7A:EB:95:24:8C:19:AF:83:77
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e2:9e:39:c5:73:62:af:3a:f6:60:54:b0:39:ce:0f:80:5d:
1f:5e:4f:6a:36:bd:78:a9:e9:f8:24:8e:e7:e6:73:86:e2:e9:
a7:8b:d5:4d:3a:05:3a:b0:5f:9a:27:f2:d0:94:fb:96:41:f7:
23:22:9f:12:d5:cf:07:38:32:45:b2:8c:0c:2a:d1:43:d9:8e:
8a:f2:ef:24:bb:f3:0d:47:66:60:03:46:65:c8:9b:de:13:44:
1c:f6:7f:8a:19:c3:23:85:b6:82:67:30:f8:f9:4f:d7:af:26:
d0:6b:03:c1:65:4e:28:96:48:11:15:55:b9:61:cb:33:52:67:
92:d7:1d:22:26:c8:9e:66:3e:29:0e:5c:cc:ea:9f:51:5b:b3:
b8:ea:2d:57:ce:7c:63:74:f2:af:45:57:e6:eb:92:7a:c9:a0:
7d:a3:4b:ea:94:a5:e9:1f:ae:87:b4:3f:5d:e8:7e:fe:42:7e:
7d:87:1e:4e:45:9a:0a:11:58:aa:12:ca:98:60:3a:74:9c:dc:
c4:69:d3:42:e8:2a:cc:12:cb:6d:15:ad:ac:17:9f:06:8e:07:
cc:d0:42:a0:bc:60:f2:e0:65:ea:a0:5d:1b:18:d5:8d:bf:50:
04:53:59:bd:7c:df:93:cc:e0:65:fa:eb:96:c0:8e:5c:6b:96:
8c:e4:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:44 2026 by rpki-client