Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: 2RgkDsfkePZFz8MnQKGyKz2E7V31AfaNbiJ9FrgveYo=
Subject key identifier: 0D:08:25:0A:CE:FA:C9:5A:D3:DC:83:A8:82:47:FE:F0:97:06:E6:7D
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019CACB4B5D049F6969262CE99F83D188877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:00:50 +0000
Manifest this update: Mon 02 Mar 2026 04:00:50 +0000
Manifest next update: Tue 03 Mar 2026 04:00:50 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: yIu2xnN0Aa8YnEklZOc2Vac0rswP2pzU/0iab+SvQSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b5:d0:49:f6:96:92:62:ce:99:f8:3d:18:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Mar 2 04:00:50 2026 GMT
Not After : Mar 3 04:00:50 2026 GMT
Subject: CN=0d08250acefac95ad3dc83a88247fef09706e67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:c5:83:80:9c:b2:ed:38:67:fa:59:ff:c9:
18:a3:35:6b:06:09:5a:77:fa:39:0a:8f:8d:30:fe:
e4:f4:65:fe:18:e5:85:5d:a6:f7:de:d1:c9:db:b7:
6a:d0:35:de:c5:8f:86:5a:56:e2:83:91:3e:e4:b0:
43:96:15:eb:79:ea:28:1f:4f:9b:0b:c5:a4:00:ec:
71:36:aa:bd:21:9f:13:c6:57:42:00:80:dd:65:c9:
02:88:02:77:fc:24:11:3d:26:96:3a:8f:24:29:ed:
09:d4:ec:07:18:0d:a7:9d:f5:a8:c9:08:c2:b1:f3:
a1:55:61:d9:7a:2c:e9:f4:6f:5e:87:46:00:c1:69:
ef:52:b0:a3:3b:b3:6f:88:88:62:61:64:e5:fe:6a:
1d:df:d8:9e:58:db:e9:1c:45:53:57:7e:cf:d1:f4:
02:e9:db:de:f9:7a:f1:16:8f:6c:85:9a:b9:0a:95:
82:fa:74:f4:db:d2:24:9a:bd:ca:4c:7e:df:87:55:
ae:6c:81:49:fd:d7:81:4a:4e:9e:10:09:05:d1:f9:
b1:69:08:dd:79:fd:4a:3a:ab:9d:4f:10:50:81:2a:
95:b2:05:a4:6a:d2:65:c3:44:b0:5e:f6:c6:7d:2e:
15:a7:a5:c9:d3:f3:e0:df:39:5c:bf:e7:e1:e1:46:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:25:0A:CE:FA:C9:5A:D3:DC:83:A8:82:47:FE:F0:97:06:E6:7D
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:b4:ca:4c:70:f2:c1:4f:cc:17:da:ef:6d:bd:76:b2:6c:
02:05:d4:20:86:27:8f:05:78:09:a6:9b:fc:26:2a:7f:3f:58:
bf:58:37:9e:db:80:b1:c9:06:07:2c:64:46:6e:e8:a8:f7:da:
f7:ad:59:77:d8:6d:b7:84:91:e5:36:f8:cd:67:3b:b1:b3:3f:
a7:c5:2a:13:7b:69:96:c2:8f:01:e5:18:9c:0b:94:99:05:c0:
4a:83:82:1c:4e:cb:da:e7:38:56:c8:e8:8f:c4:f0:d1:c0:9c:
30:88:53:e5:75:34:de:c4:ef:4d:3e:31:16:1c:f7:a8:42:69:
ff:b7:ff:66:96:9e:05:e2:1a:85:ee:ea:9f:31:8b:23:e1:f1:
14:d7:7f:fe:a9:f5:4d:47:07:68:a2:54:bd:b5:4c:97:a3:ac:
65:78:2c:7e:70:ba:d7:de:71:64:05:fb:0f:2a:45:a0:b5:db:
c2:ff:2b:d8:48:55:a6:e0:d7:19:b6:7e:10:83:c5:e0:62:60:
88:a7:c9:19:bc:1f:d3:09:7a:63:be:03:cc:70:6b:b2:29:2e:
75:f6:9d:e1:b6:30:9b:a8:6d:e1:3c:4f:fa:7e:1d:da:40:40:
69:35:0e:79:73:25:2f:51:d7:c2:35:bb:3c:24:3f:57:94:3e:
c1:02:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:46 2026 by rpki-client