Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
File: CpPZnkkKNdkpsBpstzxYPxCvyvE.mft (raw, json)
Hash identifier: KfVS9fv/H0Kdmt9jcH0w4W9TV1et13IjSBVSg4nVIZE=
Subject key identifier: 4B:D3:57:86:D1:52:DF:D5:C1:C8:16:96:9F:69:A7:D1:F3:42:0D:F5
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 019FAC75B441BEF5E6E7C7F4830138541FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:22 +0000
Manifest this update: Wed 29 Jul 2026 06:00:22 +0000
Manifest next update: Thu 30 Jul 2026 06:00:22 +0000
Files and hashes: 1: 5QoBwy08FxgB_afPPhW35rzgfWU.roa (hash: uERpJTLN6QfeTTT2yfUb2XxvlLw0q2GpMhWCfNcNS0U=)
2: CpPZnkkKNdkpsBpstzxYPxCvyvE.crl (hash: hMdTGKVX1C11ZZ/lLudOfez965spTPNzJG4p04bHUFU=)
3: v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa (hash: ycxrVcxT6hzdZ9cCnHhOzF1SYBYj+akBiGaWZrxA79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:b4:41:be:f5:e6:e7:c7:f4:83:01:38:54:1f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Jul 29 06:00:22 2026 GMT
Not After : Jul 30 06:00:22 2026 GMT
Subject: CN=4bd35786d152dfd5c1c816969f69a7d1f3420df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:95:01:3f:7f:82:54:62:d7:14:c2:df:d5:
09:6b:9c:cf:b6:0f:cf:b4:11:3e:86:a0:ba:ce:68:
21:06:f5:d7:76:3d:28:ef:4e:48:8d:8f:cf:6f:90:
fc:8c:0c:65:83:f3:fa:df:e8:83:d3:5e:aa:04:6b:
20:c4:30:31:93:59:fa:a5:45:91:56:b8:bb:6c:67:
78:b0:5e:e4:9b:a2:b5:1e:f0:18:ee:18:84:20:76:
8c:c0:59:af:7b:cd:e3:d9:3c:30:2f:1e:3b:06:64:
7b:e5:04:d4:05:a4:74:04:17:96:91:0f:af:6a:08:
3c:50:bc:f3:f6:c7:37:a5:d2:de:6b:2b:73:e5:39:
7a:ef:59:1a:68:60:0c:58:ca:46:44:bf:9c:cb:09:
4e:a1:db:d6:69:19:34:dc:9e:d1:14:d2:94:44:02:
ff:17:8e:b2:26:05:7d:e8:a0:7c:49:b2:21:64:3a:
98:26:6a:b1:6c:27:ac:2e:16:a1:ac:22:81:e4:21:
c3:01:83:22:03:7b:17:79:5c:8a:ba:52:34:24:fc:
ca:4c:7b:09:86:0b:97:24:1b:dc:d8:0a:44:31:7a:
e8:c0:72:9c:5c:9b:16:45:09:21:fc:f6:13:d4:16:
36:f7:af:51:c0:e2:db:52:e0:8d:06:4e:3a:05:49:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D3:57:86:D1:52:DF:D5:C1:C8:16:96:9F:69:A7:D1:F3:42:0D:F5
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bd:ee:e5:8d:9d:39:df:e5:2a:d9:3d:24:a3:23:64:ba:2e:
0a:b1:bf:37:3e:ad:92:c4:da:b1:d7:d8:87:a0:1a:13:b0:e2:
c8:be:82:94:ce:ec:c9:9c:27:99:04:9d:d5:3b:95:89:41:5f:
e0:64:54:7b:e9:1e:74:b3:34:41:2e:9c:5e:95:19:8b:13:e4:
f4:a9:1b:ca:7b:7d:7c:c8:39:e9:a6:b6:9d:65:13:fe:9b:52:
e0:22:cb:e6:d5:89:cf:46:4e:20:2c:2d:8d:58:d9:6b:b3:ce:
91:10:25:2d:c0:4a:c1:08:7b:70:fa:d3:63:a4:46:82:6e:dc:
52:4f:43:22:2d:88:93:a4:ce:d6:13:42:4f:39:93:e5:74:af:
c8:78:f8:1a:94:c6:4b:ed:c7:cf:cc:da:33:53:3b:b0:81:61:
aa:cf:21:20:a1:c3:53:d2:04:c7:27:c2:93:85:e9:08:13:51:
97:06:05:4d:d2:ec:1b:12:4d:56:13:a2:c8:e9:1f:41:09:22:
a9:c0:21:9c:ff:d5:47:93:9c:04:12:4d:8c:91:c6:46:95:71:
25:18:b0:19:15:7c:8b:fa:12:32:e5:bc:ec:5d:30:4c:84:39:
f1:dd:be:f3:bb:d6:61:2e:28:83:bd:fd:34:fc:df:19:df:47:
9d:79:f4:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdbRBvvXm58f0gwE4VB/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOTNkOTllNDkwYTM1ZDkyOWIwMWE2Y2I3M2M1ODNmMTBh
ZmNhZjEwHhcNMjYwNzI5MDYwMDIyWhcNMjYwNzMwMDYwMDIyWjAzMTEwLwYDVQQD
Eyg0YmQzNTc4NmQxNTJkZmQ1YzFjODE2OTY5ZjY5YTdkMWYzNDIwZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjmVAT9/glRi1xTC39UJa5zPtg/P
tBE+hqC6zmghBvXXdj0o705IjY/Pb5D8jAxlg/P63+iD016qBGsgxDAxk1n6pUWR
Vri7bGd4sF7km6K1HvAY7hiEIHaMwFmve83j2TwwLx47BmR75QTUBaR0BBeWkQ+v
agg8ULzz9sc3pdLeaytz5Tl671kaaGAMWMpGRL+cywlOodvWaRk03J7RFNKURAL/
F46yJgV96KB8SbIhZDqYJmqxbCesLhahrCKB5CHDAYMiA3sXeVyKulI0JPzKTHsJ
hguXJBvc2ApEMXrowHKcXJsWRQkh/PYT1BY2969RwOLbUuCNBk46BUk+ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvTV4bRUt/VwcgWlp9pp9HzQg31MB8GA1UdIwQY
MBaAFAqT2Z5JCjXZKbAabLc8WD8Qr8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BQWm5ra0tOZGtwc0Jwc3R6eFlQeEN2eXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt
MmNiZDU1ZjlhOGVlLzEvQ3BQWm5ra0tOZGtwc0Jwc3R6eFlQeEN2eXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl
LzEvQ3BQWm5ra0tOZGtwc0Jwc3R6eFlQeEN2eXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMb3u5Y2d
Od/lKtk9JKMjZLouCrG/Nz6tksTasdfYh6AaE7DiyL6ClM7syZwnmQSd1TuViUFf
4GRUe+kedLM0QS6cXpUZixPk9Kkbynt9fMg56aa2nWUT/ptS4CLL5tWJz0ZOICwt
jVjZa7POkRAlLcBKwQh7cPrTY6RGgm7cUk9DIi2Ik6TO1hNCTzmT5XSvyHj4GpTG
S+3Hz8zaM1M7sIFhqs8hIKHDU9IExyfCk4XpCBNRlwYFTdLsGxJNVhOiyOkfQQki
qcAhnP/VR5OcBBJNjJHGRpVxJRiwGRV8i/oSMuW87F0wTIQ58d2+87vWYS4og739
NPzfGd9HnXn0og==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:59:22 2026 by rpki-client