Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: v8F9Z4OcTGGMPcq6dEPFaD/Unbp4onD02YVZt3fxurM=
Subject key identifier: 3E:F8:5F:91:F0:3F:A5:6E:CD:03:FB:92:F3:D3:DE:60:24:38:98:E8
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019FAAF59D1B96425F0EBFF1656CFFBC0848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 0573
Signing time: Tue 28 Jul 2026 23:00:50 +0000
Manifest this update: Tue 28 Jul 2026 23:00:50 +0000
Manifest next update: Wed 29 Jul 2026 23:00:50 +0000
Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=)
2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=)
3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 0IYBZhSHUfzVC1nvm+aOjiXABYwuG2EZGpcz2JseLpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:9d:1b:96:42:5f:0e:bf:f1:65:6c:ff:bc:08:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Jul 28 23:00:50 2026 GMT
Not After : Jul 29 23:00:50 2026 GMT
Subject: CN=3ef85f91f03fa56ecd03fb92f3d3de60243898e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:91:aa:44:8b:d6:28:1d:f8:9c:25:91:23:
00:50:82:58:79:4a:0b:b1:d7:3e:10:e0:80:0e:8a:
65:d1:9c:0a:bb:e0:61:d6:e6:39:89:8c:cd:26:9d:
79:87:64:78:94:3e:da:50:bd:b4:a3:1e:3b:d8:15:
4e:d2:4f:dc:ee:7e:da:d0:99:ea:83:dc:fa:b2:e8:
a6:53:22:23:24:ff:fc:1f:a2:98:4e:6d:35:53:36:
e6:94:36:28:6e:81:80:84:04:9f:3a:1c:75:64:07:
0b:52:51:47:2f:c9:42:fd:7c:11:05:18:af:f8:66:
bb:da:e2:47:14:87:7b:8b:30:d1:3e:80:fe:93:61:
bb:10:25:da:1b:38:f8:27:ab:09:07:40:f9:65:03:
8d:cd:d3:9e:4a:59:e5:51:c3:a1:ba:32:3e:27:bb:
19:62:a3:7d:38:79:3b:ab:40:e9:ad:97:a8:0e:ba:
d8:d3:cd:61:0f:df:56:48:d0:ea:20:ec:b6:de:98:
72:c1:45:9d:41:8c:a3:33:df:4c:f4:a3:57:76:26:
c4:ea:03:38:ea:78:d5:e5:9c:d0:f8:43:a1:c4:21:
bc:c0:c6:a5:b5:8d:87:d4:ae:3e:25:11:e9:27:e2:
c3:18:67:28:3a:0f:3c:30:a8:56:d0:23:86:c8:4b:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:5F:91:F0:3F:A5:6E:CD:03:FB:92:F3:D3:DE:60:24:38:98:E8
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:86:10:7d:e5:0a:f2:97:9a:a2:df:a0:67:ec:ff:b6:8d:09:
1e:7e:1f:b9:61:47:dd:2d:41:f4:4e:71:c5:03:d2:a7:56:ca:
cd:f1:3d:84:62:75:2d:4f:59:07:c9:ea:19:db:d2:76:70:96:
6e:ea:ac:a6:fd:3a:bb:44:c2:8e:e1:c9:f8:80:4d:dc:22:d4:
9d:fd:b7:0c:10:db:b2:53:4d:6d:90:46:f1:33:2e:6d:e2:a8:
49:ab:9a:e2:f6:8a:02:c9:47:e3:09:a0:b2:62:5d:b8:ab:15:
2b:40:df:ce:8d:04:50:06:76:eb:dd:16:0a:b7:fa:fc:39:70:
a6:86:93:04:8d:6a:1e:b9:d3:02:42:7f:8d:22:2d:50:cf:54:
85:ae:f9:08:9d:9d:e8:cc:ae:b8:e4:db:42:a2:4e:26:31:1d:
67:49:39:8e:da:00:fe:a4:be:6b:20:11:db:a1:a1:6e:22:2f:
0d:e1:6d:5c:eb:09:98:d7:51:bc:c7:a4:2f:35:15:90:ee:3e:
53:ae:cc:3f:93:f4:25:20:c4:75:83:69:df:d9:8a:34:2e:d2:
49:be:3c:6e:f2:7a:05:04:09:9b:17:ea:a9:15:74:a8:e2:1a:
fc:b5:42:be:0f:c6:0f:ad:70:9a:25:bd:8b:14:df:2a:02:73:
8d:23:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:46:29 2026 by rpki-client