Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: SAZ94YuMI/7A8ceyMLyCS4h1BTwRJ29C4LZmIxtSkOc=
Subject key identifier: 88:5F:E7:37:6E:78:18:64:E2:22:00:E4:A9:A7:C2:11:58:0A:09:5F
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 019D984FB99E7F7FDD893B502A08CB528D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:00:54 +0000
Manifest this update: Thu 16 Apr 2026 22:00:54 +0000
Manifest next update: Fri 17 Apr 2026 22:00:54 +0000
Files and hashes: 1: 5nmDWedoRcF89IGxn6kR7yQUydY.roa (hash: DNLQVQylwMtEltgALOyRkGll91wT7m92pc6PDpXziVc=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: zVP9/kUaqTSUpjPSnYi3Pn0ZBQ/d1XL1a2L/k7OxamU=)
3: undQHaKT6czAToaH0ngpfA6qrow.roa (hash: dPBsqWDRKveHU3jcvCAMgjg8l0Q11jENskFPm5MGXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b9:9e:7f:7f:dd:89:3b:50:2a:08:cb:52:8d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Apr 16 22:00:54 2026 GMT
Not After : Apr 17 22:00:54 2026 GMT
Subject: CN=885fe7376e781864e22200e4a9a7c211580a095f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:37:78:ae:58:69:53:0d:ba:5d:d4:8f:9a:
e5:13:e4:b1:34:93:71:3a:93:d9:09:57:f5:80:36:
ba:20:41:84:8d:49:aa:a1:68:53:33:93:f7:b3:cb:
57:88:d8:bd:2b:75:29:0f:84:99:91:37:0c:65:0b:
34:ba:53:90:cb:7a:de:d7:a5:e2:b7:df:41:ff:59:
61:3c:18:3b:9c:f5:da:48:9a:ff:09:67:34:1f:07:
9d:00:99:a7:3b:28:a7:66:21:c8:9e:45:02:9a:80:
8a:f8:f1:44:c2:7d:22:89:84:4d:0e:d8:e1:bc:14:
ee:8c:bf:77:ac:95:79:b8:2a:24:0e:ce:db:d1:a0:
bc:d9:e0:04:47:45:96:e4:19:13:f6:f2:92:ea:da:
17:e8:84:95:12:89:de:01:1d:44:60:9b:b0:88:a0:
49:9d:e4:63:d6:f0:88:cb:01:35:92:b3:9c:40:54:
f6:92:e5:fe:16:5f:8a:f5:6c:24:65:75:c8:15:79:
2e:41:4d:1d:4f:d6:d7:40:78:57:31:e0:68:6a:f5:
a6:a3:ac:72:fb:f8:29:50:70:2d:bf:75:61:96:00:
5d:d8:6f:e6:3b:7e:2d:01:8a:6f:df:3f:aa:b5:7f:
1b:c5:81:04:ef:8c:95:1e:2a:33:6f:83:d2:b4:69:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5F:E7:37:6E:78:18:64:E2:22:00:E4:A9:A7:C2:11:58:0A:09:5F
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:60:53:14:14:b7:1e:c3:18:3c:67:36:00:c8:4c:6e:80:04:
e0:a2:b3:e1:32:cb:1f:44:b5:4a:d8:a1:5c:9b:a1:9b:21:47:
9f:58:28:82:5d:5d:9a:39:6d:01:dd:a1:0f:c8:89:63:f6:34:
0e:f9:86:9d:37:69:7a:0e:f5:ce:8f:f1:a1:30:b3:67:f4:2e:
a3:00:98:94:2f:07:c3:fe:00:6d:6f:f7:07:a4:39:86:3b:16:
34:c9:dc:73:7b:e4:b9:77:0c:b1:6a:2e:89:7c:50:e3:b1:fb:
1c:6d:67:37:9a:3f:54:f1:9e:aa:1c:ac:96:24:4e:45:aa:79:
2b:5e:9a:6e:d3:23:57:7b:2c:5c:a8:fa:8d:5d:77:f4:6b:cd:
0e:d5:ce:bc:7e:e2:6f:10:53:7b:4c:cd:eb:9c:0c:73:4d:7b:
41:72:f3:bf:fd:53:24:d8:df:eb:c4:c0:a5:5e:66:42:f4:3a:
80:94:63:6a:9e:30:cd:4b:6a:b8:de:61:47:b6:43:ea:4d:c6:
1a:d4:e9:0b:22:d2:c4:1c:e5:30:13:97:5a:86:dc:43:b4:82:
08:c6:f2:32:fc:04:a5:66:b2:27:ca:46:03:7a:04:c8:8b:c7:
cd:65:73:cc:0b:11:06:bf:e3:2b:f2:2c:25:c5:03:b7:4b:1a:
78:2d:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:24:18 2026 by rpki-client