Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: esO0+WA7Ju8GTscGcM2kNiiwWaXW8FMVLy60VnU9yxQ=
Subject key identifier: 4F:D5:A9:9A:E1:A0:FB:47:B2:7F:04:4D:AF:72:53:E6:62:AC:A0:A2
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 019D33AD39B4CFF37903C6EBED7231390CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 0CB5
Signing time: Sat 28 Mar 2026 09:01:23 +0000
Manifest this update: Sat 28 Mar 2026 09:01:23 +0000
Manifest next update: Sun 29 Mar 2026 09:01:23 +0000
Files and hashes: 1: K2NfFx3TkrXQP8nQwasIAH5qXuk.roa (hash: eOpjTh0ebYyTZWv6iqBeMtDuPL0eSZ5JWmYsy8J7I/A=)
2: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: pL18Mv8b4h+Dpc8tHqaD6RGQg8LfgcAbjjrHTZj/a/g=)
3: dazL3iKbsjKxy4HddRH3nz-7Dnw.roa (hash: qq3zl4qFIOovDjZr1RPB2doiGCNi2c1snUt8x3cExWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:39:b4:cf:f3:79:03:c6:eb:ed:72:31:39:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Mar 28 09:01:23 2026 GMT
Not After : Mar 29 09:01:23 2026 GMT
Subject: CN=4fd5a99ae1a0fb47b27f044daf7253e662aca0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:e3:06:f8:4e:ca:d5:cc:b4:9a:32:84:ad:
67:8e:91:fe:d1:82:0d:72:90:0a:d2:96:e9:9f:65:
99:60:09:47:2e:72:7f:a0:18:94:68:40:6b:be:3c:
56:52:39:97:43:f0:55:6b:3c:11:4e:94:5c:b8:9b:
96:84:d3:18:65:d9:4a:9a:51:bf:76:80:28:cd:9a:
9a:b9:6e:b3:6c:d5:6a:f9:9e:58:d0:5c:00:df:cd:
67:3b:82:34:b9:6e:d0:4a:25:64:71:94:d6:49:11:
ba:57:1a:ec:37:d5:65:19:4b:10:92:cc:1c:14:f6:
ab:8f:ad:15:ca:98:0c:af:76:0e:5e:c7:be:d6:bc:
de:9b:bb:dc:98:23:ee:99:7b:60:dc:8f:8e:a8:fb:
af:73:77:48:8b:f9:df:7f:53:ba:bd:cc:30:ba:a2:
c6:78:b1:a2:6d:c4:6e:ec:12:40:01:04:ed:4b:d5:
b1:ee:e0:c9:53:7a:0d:36:e3:75:eb:15:df:62:f9:
20:d0:7c:15:82:21:36:dc:b1:6d:a9:9d:23:2a:1b:
99:1e:37:a2:ab:8c:18:a7:f9:0e:d3:cb:88:ff:4c:
df:5e:98:68:6e:a1:41:87:26:41:8e:ea:37:d4:95:
c6:92:42:f3:e2:72:ff:7e:4a:6b:59:08:bd:8c:36:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:A9:9A:E1:A0:FB:47:B2:7F:04:4D:AF:72:53:E6:62:AC:A0:A2
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:03:58:c2:85:9a:cf:d1:d0:c4:c1:97:92:99:17:45:7a:c5:
37:ab:89:2b:b7:e6:7a:30:11:4c:39:a8:b2:f4:27:70:92:91:
07:d4:d2:5d:73:f5:34:1d:b3:bc:ae:6f:56:ac:93:da:1b:71:
40:87:80:e0:f1:83:df:d7:83:ce:10:19:89:db:20:c4:4f:45:
9d:17:4c:d1:fb:29:5b:be:d7:57:f1:d8:d6:ee:a1:50:24:74:
2f:1b:59:45:0d:b3:5e:96:26:99:7f:ed:80:ed:ba:04:ed:cd:
5e:92:e4:e3:99:9f:c6:ce:db:e2:f4:2a:51:35:82:3a:8c:0c:
3f:35:a7:21:f9:e5:5a:12:9d:e1:67:7f:83:aa:7f:b9:f5:5a:
53:c3:a3:cc:37:20:8c:17:a3:3e:8a:c6:79:2f:5b:00:d1:24:
91:51:61:6b:4c:f9:65:4c:66:2f:51:1c:81:2c:2c:96:ef:70:
05:96:71:27:d6:7c:aa:23:f5:69:4a:df:30:ab:a0:fc:b3:39:
fc:36:ce:b2:cc:e3:fe:83:13:1e:f4:8f:5c:5c:8e:3d:da:8b:
f7:0d:78:62:e2:d0:9d:e4:be:32:0f:0f:2d:f9:5b:19:90:c4:
bb:e3:8f:bc:59:4f:42:21:33:9a:54:c7:19:47:b0:95:66:7c:
e6:81:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:26 2026 by rpki-client