Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: GnRUtMoG7RX++iPfX567ElnPs5XoPt/jQ3TsaKae5wk=
Subject key identifier: 1A:EF:09:A7:B2:F9:67:F5:10:4E:CE:50:F5:5D:F3:4D:BA:9D:54:98
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019EC148E02F75695E6B2A919F01E43A63B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 04FA
Signing time: Sat 13 Jun 2026 14:00:39 +0000
Manifest this update: Sat 13 Jun 2026 14:00:39 +0000
Manifest next update: Sun 14 Jun 2026 14:00:39 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: +yGZ2PE6siGo1hlGOOG0k061yWru5hIRY3aTe1wKKz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:e0:2f:75:69:5e:6b:2a:91:9f:01:e4:3a:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Jun 13 14:00:39 2026 GMT
Not After : Jun 14 14:00:39 2026 GMT
Subject: CN=1aef09a7b2f967f5104ece50f55df34dba9d5498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:48:92:09:7a:eb:6f:54:6f:92:ac:ec:57:
32:ac:03:1d:91:09:e4:41:1e:2d:85:1c:f9:56:6f:
7b:2e:f4:5c:ff:fb:2e:52:83:4d:6d:38:de:c6:78:
fb:b7:4d:38:2c:92:8c:6d:23:35:de:17:60:aa:6d:
d4:46:96:5f:ca:9d:6c:b1:fc:30:24:3b:59:ad:c7:
02:02:09:9d:ea:be:59:7d:4e:51:12:25:2e:a6:79:
38:fa:ee:e0:33:a5:44:75:28:02:b0:ee:87:28:fd:
dc:7e:8a:b0:4e:eb:8d:a3:53:48:ba:d9:44:0c:f9:
59:60:77:3a:85:3f:49:bb:35:51:8f:82:2d:03:13:
89:ee:16:f4:4b:92:fb:1a:63:a5:1b:7f:87:bd:3d:
5d:fb:eb:b8:50:ee:7b:54:74:88:4b:e6:80:95:6b:
77:44:2f:ce:55:75:4f:f8:a8:a5:42:d9:75:ee:7f:
d2:3c:02:73:fb:1d:f2:be:28:1e:d5:bf:30:a4:1f:
07:3c:4d:67:4d:dc:7a:2f:b8:5f:5f:9c:7b:d1:7e:
b2:e8:da:33:66:ce:f7:17:09:6f:2f:6e:8c:48:3b:
db:f2:d3:d0:bc:f7:b7:44:ec:59:d9:8a:06:8a:30:
c6:30:81:05:13:1e:44:4b:d2:b0:ab:f9:c7:1b:30:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EF:09:A7:B2:F9:67:F5:10:4E:CE:50:F5:5D:F3:4D:BA:9D:54:98
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:53:86:13:b3:d8:96:bd:df:42:4a:1b:4e:c9:58:24:f3:c2:
36:e9:b6:72:7a:58:63:7c:f0:3e:a3:91:da:13:8f:52:e6:d4:
64:5f:eb:24:8d:db:a5:60:44:f6:9d:f5:06:73:6d:9b:54:07:
9e:b6:ef:c8:d2:51:58:f1:cb:13:dd:97:bc:04:2e:51:66:d5:
b8:8b:51:55:93:f7:ed:b5:d7:08:0c:04:db:87:62:bc:d1:9b:
7a:32:d5:53:58:0a:75:fb:36:dd:09:ec:b3:50:8d:8a:9a:e6:
7e:e1:9c:c2:e1:df:66:2f:c2:19:e7:ae:49:4b:b6:9f:f0:51:
be:09:24:1f:ad:e3:eb:b3:2c:6c:c7:f2:de:88:d6:b5:97:cd:
e4:8f:60:75:f1:fa:e4:46:81:26:ce:15:f4:7f:7e:d6:26:48:
c5:16:79:22:e3:61:4f:a3:8a:cf:f4:39:33:1d:b4:b4:ff:50:
ae:05:88:f5:d3:9a:d6:97:6d:56:e0:34:f4:7c:4b:a2:ef:f1:
2f:ac:fe:7c:bf:c5:27:5c:53:fe:61:89:b4:5a:5a:7c:ea:c9:
15:2a:ff:ad:6e:3a:1c:f0:3f:19:b7:95:ac:58:2e:d3:d8:da:
69:16:4d:55:0b:e1:1f:0a:36:61:44:33:47:7c:2f:b0:bd:a7:
7c:69:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:26 2026 by rpki-client