Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: jD4Nb72l1+rwXxhuv3GLPSNBKuyh8i6gtzV2S90tZds=
Subject key identifier: 81:1D:4D:C5:43:C6:2D:CF:43:E3:73:5E:AC:CE:07:46:27:A1:71:9A
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019D9DACCDEF8043AFB6C07F1A307AADFB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 0463
Signing time: Fri 17 Apr 2026 23:00:40 +0000
Manifest this update: Fri 17 Apr 2026 23:00:40 +0000
Manifest next update: Sat 18 Apr 2026 23:00:40 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: tA+VW93Q3LqDDvh7wQ/mSqcYN4iEM9A5If1JoZuHVXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:cd:ef:80:43:af:b6:c0:7f:1a:30:7a:ad:fb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Apr 17 23:00:40 2026 GMT
Not After : Apr 18 23:00:40 2026 GMT
Subject: CN=811d4dc543c62dcf43e3735eacce074627a1719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:b1:b9:58:87:4f:7f:bf:63:a9:a4:46:41:
3b:d0:1f:e9:1f:21:19:46:55:74:4b:eb:29:0f:c6:
df:37:b3:b3:f7:d1:27:0f:db:18:e1:09:d3:e9:43:
b5:77:9e:e4:91:02:5a:35:a2:14:4d:57:2a:75:bd:
21:ea:13:87:8b:51:4e:f2:91:f6:34:75:65:e8:98:
a6:9a:28:b7:be:46:f1:ef:55:49:f1:85:35:9a:2f:
16:77:bb:a1:e9:dd:4a:bf:87:70:9d:3d:4d:d3:52:
da:3d:2e:1f:b6:e8:e7:be:cd:54:a6:df:bf:40:84:
c1:ac:96:45:82:99:e3:c5:07:8e:e3:fb:a1:bb:79:
26:3a:60:bb:bf:62:cd:94:af:74:9e:72:d0:cb:17:
36:e3:89:c1:8b:91:09:8c:15:1f:1d:e9:32:3a:c0:
90:2e:1c:fc:ae:ba:76:8d:62:b6:f5:cf:4f:b2:0b:
76:da:67:a4:39:96:70:e2:91:87:f0:0d:35:5b:d9:
be:91:9c:e4:71:98:b2:61:57:e8:c8:4c:81:d1:9d:
d9:da:47:ed:22:b2:63:cd:5e:0f:ee:37:de:88:b9:
51:60:76:2f:eb:30:5c:ac:3f:9f:d4:1e:cf:39:fb:
1c:19:88:f7:ef:23:74:53:a3:bd:28:80:c9:4b:cb:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1D:4D:C5:43:C6:2D:CF:43:E3:73:5E:AC:CE:07:46:27:A1:71:9A
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:81:aa:00:f6:01:40:90:7e:f5:ff:8d:29:2f:59:43:ce:f6:
34:62:44:05:fc:eb:fa:fa:75:56:57:9c:53:da:71:27:96:c9:
8e:23:f1:f0:cb:93:db:81:2e:25:73:cc:e7:5e:a6:fc:a4:4b:
62:3d:22:21:3f:5b:a2:4e:73:e4:6c:bc:2a:d3:40:b8:b0:64:
5f:e1:c2:03:d8:22:c7:4c:19:b1:19:92:ed:b4:2d:d6:ce:a3:
82:ea:fb:b4:fb:72:dd:e3:fc:e0:63:6d:a1:8f:53:12:73:49:
38:69:3d:ce:66:80:1a:ff:62:66:ce:7b:34:c6:50:c7:b8:2b:
74:09:4f:be:86:d3:8e:84:a9:37:e3:42:1a:86:79:ab:c8:3c:
9d:42:71:cf:1b:4c:fb:de:e9:ec:0e:e5:2b:e5:48:9d:8a:ba:
ac:03:85:45:a5:1d:bf:c4:7d:a2:b5:28:34:a3:a1:5b:38:8c:
76:8f:45:31:d9:c5:2e:36:47:2e:b4:08:37:63:47:b1:f7:07:
e5:4f:26:37:3a:3c:8a:69:e1:0e:39:84:df:96:c2:82:e8:23:
6c:59:86:4f:6c:dd:ac:49:40:51:e6:d7:55:bc:77:68:cd:c3:
b0:6b:57:de:5e:2f:ae:98:23:25:5f:80:ed:1c:a2:bb:9d:2b:
da:78:53:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drM3vgEOvtsB/GjB6rftpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTM0ZmMzY2FkYWRlNmYwNzkwN2FlYjZlMGJlNWE5ZWM0
NDA3YjkwHhcNMjYwNDE3MjMwMDQwWhcNMjYwNDE4MjMwMDQwWjAzMTEwLwYDVQQD
Eyg4MTFkNGRjNTQzYzYyZGNmNDNlMzczNWVhY2NlMDc0NjI3YTE3MTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LqxuViHT3+/Y6mkRkE70B/pHyEZ
RlV0S+spD8bfN7Oz99EnD9sY4QnT6UO1d57kkQJaNaIUTVcqdb0h6hOHi1FO8pH2
NHVl6Jimmii3vkbx71VJ8YU1mi8Wd7uh6d1Kv4dwnT1N01LaPS4ftujnvs1Upt+/
QITBrJZFgpnjxQeO4/uhu3kmOmC7v2LNlK90nnLQyxc244nBi5EJjBUfHekyOsCQ
Lhz8rrp2jWK29c9Psgt22mekOZZw4pGH8A01W9m+kZzkcZiyYVfoyEyB0Z3Z2kft
IrJjzV4P7jfeiLlRYHYv6zBcrD+f1B7POfscGYj37yN0U6O9KIDJS8uLZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEdTcVDxi3PQ+NzXqzOB0YnoXGaMB8GA1UdIwQY
MBaAFHKTT8PK2t5vB5B6624L5ansRAe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAt
YzA4Y2YxOTdhMTBjLzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAtYzA4Y2YxOTdhMTBj
LzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYGqAPYB
QJB+9f+NKS9ZQ872NGJEBfzr+vp1VlecU9pxJ5bJjiPx8MuT24EuJXPM516m/KRL
Yj0iIT9bok5z5Gy8KtNAuLBkX+HCA9gix0wZsRmS7bQt1s6jgur7tPty3eP84GNt
oY9TEnNJOGk9zmaAGv9iZs57NMZQx7grdAlPvobTjoSpN+NCGoZ5q8g8nUJxzxtM
+97p7A7lK+VInYq6rAOFRaUdv8R9orUoNKOhWziMdo9FMdnFLjZHLrQIN2NHsfcH
5U8mNzo8imnhDjmE35bCgugjbFmGT2zdrElAUebXVbx3aM3DsGtX3l4vrpgjJV+A
7Ryiu50r2nhT7w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:38 2026 by rpki-client