Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
File: CpPZnkkKNdkpsBpstzxYPxCvyvE.mft (raw, json)
Hash identifier: +PewVlmFKRNS2AzkqKnjmIMnwlFl7Ik8USXYIhIMCXo=
Subject key identifier: 2E:1E:0F:51:80:54:50:2D:80:55:D1:4D:D5:98:A5:35:E6:14:8E:48
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 01A0DBA91C78B0345B4AA02DD196B215C4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:28 +0000
Manifest this update: Sat 26 Sep 2026 03:01:28 +0000
Manifest next update: Sun 27 Sep 2026 03:01:28 +0000
Files and hashes: 1: 5QoBwy08FxgB_afPPhW35rzgfWU.roa (hash: uERpJTLN6QfeTTT2yfUb2XxvlLw0q2GpMhWCfNcNS0U=)
2: CpPZnkkKNdkpsBpstzxYPxCvyvE.crl (hash: OV6HawGEEX3GOajLpWicvbqMQnBeTaHZf6/Vz2CP7MI=)
3: v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa (hash: ycxrVcxT6hzdZ9cCnHhOzF1SYBYj+akBiGaWZrxA79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:1c:78:b0:34:5b:4a:a0:2d:d1:96:b2:15:c4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Sep 26 03:01:28 2026 GMT
Not After : Sep 27 03:01:28 2026 GMT
Subject: CN=2e1e0f518054502d8055d14dd598a535e6148e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:9d:78:d0:9c:24:08:96:ad:8c:b2:bf:7f:
b3:f4:9c:60:d3:eb:72:d8:96:38:c5:97:39:4c:46:
1f:9f:5e:97:2a:e7:97:07:d4:d8:41:54:6e:b6:07:
db:59:09:e9:39:0d:b7:c8:e0:54:7a:e1:59:ab:ea:
95:75:54:2c:2b:5c:a4:5e:2d:d7:be:d5:15:4b:8a:
30:da:9e:87:bf:39:0e:8f:ca:6f:98:c7:2a:4a:01:
bd:8f:52:8f:09:04:9c:37:7e:5e:f1:e5:d5:d5:46:
1a:56:91:35:dc:26:b3:4e:58:d1:04:3a:51:51:65:
70:22:1e:0b:fe:20:e6:73:df:e1:b4:7d:5c:58:06:
36:f8:60:7a:d1:86:59:15:8e:77:d1:fe:b2:bf:0e:
7b:c8:99:5e:2e:d6:6e:7a:74:1f:f5:15:e6:69:4d:
22:43:a4:4c:9f:7d:62:d3:ed:19:ac:3d:c2:4b:87:
9c:98:2d:6e:53:fa:15:8a:ff:bb:92:b7:60:92:30:
fd:23:6f:0f:52:cd:c5:af:4f:9e:8b:7c:36:61:3a:
c6:70:25:ba:2e:93:55:86:2d:a4:b9:15:23:8f:04:
4f:dd:e7:bf:91:23:36:19:35:20:a3:62:6a:4b:04:
c4:b9:b8:8c:75:7e:08:d6:1f:f9:7e:71:0f:e8:80:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1E:0F:51:80:54:50:2D:80:55:D1:4D:D5:98:A5:35:E6:14:8E:48
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:50:99:f1:04:de:9c:91:bd:fb:2f:19:a6:02:b7:91:45:e1:
49:18:12:3e:e0:32:6d:13:68:bf:ce:1f:8f:a9:ae:db:3d:1a:
ec:da:51:9f:0b:b0:b7:85:53:cf:b5:61:7a:d1:d8:0d:14:5f:
bb:1b:28:f9:2a:1a:b1:c4:27:96:12:28:71:a5:c9:b8:4a:df:
62:58:3f:31:9d:8d:a6:16:3b:95:33:d7:f0:27:d6:7b:e7:20:
b0:16:79:ad:9e:7b:9b:d1:34:07:d2:5d:e5:4f:ca:a3:42:10:
1a:07:48:19:59:d9:a0:98:15:04:2a:f5:50:a4:75:9f:e4:1b:
63:96:95:4c:21:3e:ae:17:62:23:72:b6:ee:3c:b1:98:0d:fc:
ad:27:50:5c:58:fb:cf:d7:73:fb:2f:eb:75:3b:d2:e4:d8:75:
af:47:05:80:aa:81:fa:8c:ce:ac:33:da:5d:98:5c:21:ee:c3:
31:4e:d9:8e:c3:2c:fb:74:1d:d0:18:90:69:d0:48:8b:05:fd:
32:2c:84:8f:d4:96:7b:29:05:2c:b6:15:a7:84:33:49:af:45:
44:24:6a:46:b7:fe:5e:90:bc:cd:ae:bd:da:a4:2f:50:8a:10:
90:92:b5:fa:f5:90:aa:22:e2:3b:fb:98:29:18:87:19:f5:a1:
2f:54:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:10:41 2026 by rpki-client