Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: guMmmJG86KetUJKnNwXQAa0gM10exLGVK8hUSmtt/oU=
Subject key identifier: 32:4E:FC:EB:2C:98:58:4E:2C:A0:06:92:03:A1:EC:6E:61:AF:90:5D
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019D284DC325501931B8C342B212FCB5C359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 0287
Signing time: Thu 26 Mar 2026 04:01:17 +0000
Manifest this update: Thu 26 Mar 2026 04:01:17 +0000
Manifest next update: Fri 27 Mar 2026 04:01:17 +0000
Files and hashes: 1: 5kRG3TS3F5mS1LJNKgoMj7B0Kzc.roa (hash: IYPpCgmRajRKH3SyHejCDJsXv1khAQdVFsgw3iiSVoA=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: TR0NAbA6xzNGuIdlIWRaMOe938xgWR9R4jNEXLUfkZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c3:25:50:19:31:b8:c3:42:b2:12:fc:b5:c3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Mar 26 04:01:17 2026 GMT
Not After : Mar 27 04:01:17 2026 GMT
Subject: CN=324efceb2c98584e2ca0069203a1ec6e61af905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:10:89:4a:61:2d:9e:cb:7e:a2:84:ba:85:
75:15:74:a1:76:11:51:3c:98:c6:7e:e9:eb:01:03:
93:a2:f4:ab:77:22:bb:f5:9d:cb:31:6a:c1:66:45:
34:93:58:de:36:c0:03:87:e8:59:fa:ee:ca:8e:7a:
c4:95:20:4b:e7:db:b3:9e:d7:44:05:58:4f:1f:87:
c3:13:bf:13:96:05:b5:0c:7c:a9:92:1c:51:10:c1:
96:df:d7:e5:8b:5b:25:9a:52:be:17:45:e7:c0:14:
ad:5a:5a:11:1f:6d:c7:b6:04:21:ce:34:f8:0e:6b:
a9:fc:89:22:c9:a1:1d:85:8d:a7:51:f2:98:5a:52:
0f:86:14:5c:bf:93:a3:e3:03:81:53:f8:25:4f:29:
dc:1d:a6:7c:e7:46:91:97:5d:7b:cf:62:a9:50:79:
6b:6b:b3:c3:8b:fb:ed:47:b1:09:58:ca:69:81:92:
1e:e0:65:1b:a9:23:6f:31:79:21:1e:33:0b:c0:f7:
c7:c1:c7:3e:bb:09:18:54:b5:a4:1b:af:1e:5a:6c:
41:a3:d3:e3:d7:e7:c4:71:6f:22:f0:00:fb:42:d3:
63:16:a1:45:33:c5:ec:50:de:a0:6a:80:72:2a:dd:
a9:a6:ef:8d:e2:cb:f1:b5:f3:ee:63:de:ae:58:b2:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:FC:EB:2C:98:58:4E:2C:A0:06:92:03:A1:EC:6E:61:AF:90:5D
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:55:55:ae:c0:63:e2:05:16:31:1d:4a:1f:82:da:97:7d:cc:
db:cf:9f:de:3b:3b:1f:43:08:dc:bf:46:26:b9:dd:45:1e:28:
94:84:aa:28:d8:db:aa:ce:6d:e5:0e:01:b8:83:a9:9f:bf:85:
6f:a1:22:8d:55:f4:8c:ab:fd:d1:9d:3a:d7:1d:24:f6:ae:60:
29:a3:75:04:06:f3:f6:04:f2:4e:82:76:9d:77:04:77:91:39:
f8:1f:ca:28:29:93:12:5a:e9:f4:52:db:97:03:34:8c:77:89:
22:35:53:aa:8f:15:9c:a7:bd:4c:04:f5:07:22:ca:d6:e2:4b:
58:d2:3d:2c:7b:e0:c6:52:5e:31:d2:36:a6:8f:f5:b7:b5:26:
69:58:35:b5:07:1d:77:bf:dc:90:93:12:1e:09:0e:c4:a5:45:
12:0e:36:8d:c8:36:1f:2d:ee:6f:6b:6c:79:5a:54:5d:f7:04:
5d:aa:e0:5d:c4:e9:37:89:94:7e:3b:4e:c4:41:6f:5a:fd:2e:
bb:11:c1:41:2f:1a:4d:1d:7d:9a:4f:9b:27:aa:a9:fb:e1:70:
22:ac:04:e8:92:3d:2e:bb:77:ec:a6:af:23:da:10:5c:5c:57:
c2:87:c8:6d:0a:f7:b0:df:23:e6:09:28:d1:2e:26:85:32:e6:
6f:94:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:59 2026 by rpki-client