Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
File: CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft (raw, json)
Hash identifier: uvYlIlpW3nYVTwdceQLSg2rVnk6/8/S0kiHL+qbxcpw=
Subject key identifier: 9B:47:B6:F7:8C:E0:20:EF:15:A0:05:E7:FA:08:10:21:3C:91:58:55
Authority key identifier: 0A:91:AA:40:BB:61:DA:84:3D:90:6C:B5:66:23:95:0C:B3:7F:59:B3
Certificate issuer: /CN=0a91aa40bb61da843d906cb56623950cb37f59b3
Certificate serial: 019E1C0FDCA5471F1789B490D37A26D9D935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
Manifest number: 4A
Signing time: Tue 12 May 2026 12:01:01 +0000
Manifest this update: Tue 12 May 2026 12:01:01 +0000
Manifest next update: Wed 13 May 2026 12:01:01 +0000
Files and hashes: 1: CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl (hash: DLPCK1eZPHasFh5QP2Eyc4ZRTYz8I27ZcCQs9WdQ+Y0=)
2: VYr2J8PU6qvoHNkXxdUk2poOpeg.roa (hash: qyR8POc6dovbUK8HiGSmXu2L7YbxUwe4Rbtm4a/aTuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:dc:a5:47:1f:17:89:b4:90:d3:7a:26:d9:d9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a91aa40bb61da843d906cb56623950cb37f59b3
Validity
Not Before: May 12 12:01:01 2026 GMT
Not After : May 13 12:01:01 2026 GMT
Subject: CN=9b47b6f78ce020ef15a005e7fa0810213c915855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:4b:2a:40:8b:36:a1:70:f0:c4:44:6c:a5:76:
6d:51:9f:82:fe:f8:19:00:eb:67:b6:0b:89:b0:9e:
e9:35:7f:b2:ed:e7:97:5c:3b:65:50:e7:0d:e7:91:
60:59:21:ab:ca:40:4a:31:c7:8d:57:db:94:48:ff:
2c:64:12:69:81:52:68:7c:b9:12:b6:ea:40:66:2f:
87:73:a0:d5:26:57:e7:37:b7:c3:1f:33:84:42:90:
b9:4c:5b:95:03:ed:92:d2:eb:5c:a6:76:69:c6:f5:
56:31:dc:fc:50:5e:c9:4e:c3:e1:3b:8e:1d:8d:e7:
f6:6e:b6:60:0d:25:88:0e:cf:6e:11:51:b7:b1:7f:
dd:fa:e7:e8:4c:16:8d:18:b3:50:45:51:a3:73:f4:
d5:07:20:e0:45:33:18:55:31:7d:fc:c2:b2:55:ea:
74:40:db:0c:9f:fd:1f:3b:d1:2d:0e:13:3f:68:60:
cd:af:07:84:6d:28:7e:03:12:6c:e2:3d:14:91:8c:
7c:5d:5c:bd:4f:3e:d1:da:ef:6f:d3:d6:5d:8e:79:
42:b1:58:1c:d1:d7:87:33:27:61:02:9c:fd:03:c9:
cf:de:da:3e:4f:f9:05:d7:73:0c:27:09:b7:f5:28:
48:6f:14:9f:6e:26:6b:ed:77:db:97:fd:ab:ba:e7:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:B6:F7:8C:E0:20:EF:15:A0:05:E7:FA:08:10:21:3C:91:58:55
X509v3 Authority Key Identifier:
keyid:0A:91:AA:40:BB:61:DA:84:3D:90:6C:B5:66:23:95:0C:B3:7F:59:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:ec:48:02:bb:3f:ea:27:5f:0b:38:08:4d:79:70:2e:98:
93:f6:1f:e8:10:1e:2d:0e:54:8d:8b:1e:99:d7:51:a4:26:78:
2e:b3:b4:55:81:c1:d7:a3:28:af:35:06:64:7d:e1:fe:db:fa:
38:d4:ed:05:6b:fd:94:3d:37:c0:56:33:06:63:71:ce:b6:4e:
13:29:f0:93:fc:e9:fc:bc:c6:12:70:5f:3a:eb:54:ca:53:fa:
05:d7:e8:04:14:f7:65:15:a7:c5:93:76:85:8e:6f:95:ae:99:
d0:3c:49:d0:35:e7:ab:79:cd:0f:c0:fb:48:3d:ff:1c:92:e8:
ca:3e:93:f0:22:ed:10:6e:16:92:ef:5b:5d:64:f0:3a:0a:b5:
25:b5:e8:c7:1b:80:7d:a4:fc:9f:86:63:6a:2b:74:66:32:63:
52:f8:38:bb:9b:f0:9e:34:88:5f:e0:57:c0:c3:b5:cb:d9:0f:
11:d2:eb:58:82:66:d1:ce:35:f2:76:82:fc:e4:7f:7e:72:86:
67:66:28:49:af:c7:ac:82:68:e5:be:a2:4f:76:8b:d2:b3:03:
93:f1:29:0e:26:7e:6d:7e:09:23:68:61:02:cb:60:30:5c:dc:
15:68:5a:89:bf:8f:26:77:5c:56:e7:b5:e8:fd:22:3f:79:54:
45:23:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:20 2026 by rpki-client