Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: rHuLaMSf/ml+prTfwD2lPWEYAof7XFJFctpUJlTCSZA=
Subject key identifier: 46:D8:54:14:CF:D3:99:23:DF:C8:25:36:13:61:5A:12:2D:3C:72:D9
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019FA7864EE2BC7C382E1FE79EF126BB9EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 07:00:24 +0000
Manifest this update: Tue 28 Jul 2026 07:00:24 +0000
Manifest next update: Wed 29 Jul 2026 07:00:24 +0000
Files and hashes: 1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: 7i7DOsdXa30RvaiR69ZtNYTh4DDRE3j9E3tto1gD5pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:4e:e2:bc:7c:38:2e:1f:e7:9e:f1:26:bb:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Jul 28 07:00:24 2026 GMT
Not After : Jul 29 07:00:24 2026 GMT
Subject: CN=46d85414cfd39923dfc8253613615a122d3c72d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:21:e7:38:3a:b9:08:cb:b4:0d:4f:a1:df:
e3:35:59:40:73:da:14:3a:be:9d:55:a7:c4:99:ca:
45:e2:a8:19:22:be:a9:fa:76:b9:55:e8:b9:f8:55:
e6:ed:95:e0:85:a9:4c:4e:d4:96:17:18:49:67:12:
7e:e0:47:cf:71:5e:78:12:99:67:3b:9e:e6:7f:2a:
d1:dd:8d:e1:9c:81:b3:f2:55:07:54:b8:92:77:39:
76:f9:9c:cf:ba:fb:6b:fc:6a:7b:f9:aa:67:2d:1f:
da:ad:04:c2:1f:e0:10:d3:c9:60:4c:ee:55:45:fb:
c6:fc:9d:ca:ba:17:43:ff:46:30:91:d4:dc:58:3c:
31:15:e7:a1:cf:82:ee:ad:db:3e:7a:8f:c1:a8:33:
f8:94:b1:6d:e0:ed:ee:35:b6:7e:d6:0d:f7:28:1b:
ff:6c:3a:40:be:d6:17:a6:01:a1:8a:c2:0d:15:d4:
93:8b:c6:32:7b:05:62:b0:af:8a:21:86:8f:66:fa:
dc:30:99:0d:15:47:06:28:f1:8f:cb:83:bc:04:c2:
1e:ed:b6:10:c2:f5:90:41:a3:61:46:f2:c0:fa:39:
ba:58:b4:6f:36:0b:f5:90:7f:45:11:5d:3d:02:96:
90:3b:f6:61:6a:8e:b4:c4:ac:d0:a8:2e:1f:41:80:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:54:14:CF:D3:99:23:DF:C8:25:36:13:61:5A:12:2D:3C:72:D9
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:38:e7:78:81:38:0e:03:95:3f:03:e8:d4:4c:c6:67:89:f5:
53:82:c6:e7:3d:3e:f3:cc:99:fa:3e:2a:92:dc:84:b5:68:b7:
9c:6d:c2:36:69:be:21:f4:50:93:c8:7e:4d:8b:7f:a3:0e:d0:
33:35:79:8b:35:6c:7f:5b:b7:2b:1b:7d:a9:42:19:21:45:d2:
38:c3:f1:e0:9d:04:c6:54:10:c5:00:69:e7:54:84:57:7c:91:
c0:15:f2:61:97:e6:55:05:8d:d4:82:67:18:26:57:a3:e2:08:
a0:bc:dc:a8:4d:21:4b:c8:3d:9c:39:a5:98:82:f8:65:c9:55:
9d:0a:10:bd:79:ea:50:bc:3b:35:f2:a4:89:2f:cc:91:d6:36:
2a:7f:59:09:31:6f:a3:51:03:85:16:77:6f:b0:d5:1d:b4:2c:
0a:ee:50:d6:7c:39:5f:06:29:c5:11:9c:40:2a:7c:72:35:34:
5f:a0:82:f8:62:42:4b:4a:44:29:d1:e5:b9:8a:3e:fe:61:8b:
c7:a6:d4:b5:0b:f8:01:a1:2e:3a:1f:db:2d:e9:c7:59:45:23:
21:05:64:50:af:ae:05:1b:b0:75:48:9c:eb:9a:57:a2:c2:34:
6e:d5:8f:8f:f6:8e:e8:6a:04:2e:4a:30:7c:56:2b:e4:8d:ab:
2b:03:a3:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nhk7ivHw4Lh/nnvEmu56oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWIzM2RlNjA1MWQwNGQ3NWY2YmIxZjdlNTNiMWVmZDY2
NDYyMTEwHhcNMjYwNzI4MDcwMDI0WhcNMjYwNzI5MDcwMDI0WjAzMTEwLwYDVQQD
Eyg0NmQ4NTQxNGNmZDM5OTIzZGZjODI1MzYxMzYxNWExMjJkM2M3MmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi4h5zg6uQjLtA1Pod/jNVlAc9oU
Or6dVafEmcpF4qgZIr6p+na5Vei5+FXm7ZXghalMTtSWFxhJZxJ+4EfPcV54Epln
O57mfyrR3Y3hnIGz8lUHVLiSdzl2+ZzPuvtr/Gp7+apnLR/arQTCH+AQ08lgTO5V
RfvG/J3KuhdD/0YwkdTcWDwxFeehz4Lurds+eo/BqDP4lLFt4O3uNbZ+1g33KBv/
bDpAvtYXpgGhisINFdSTi8YyewVisK+KIYaPZvrcMJkNFUcGKPGPy4O8BMIe7bYQ
wvWQQaNhRvLA+jm6WLRvNgv1kH9FEV09ApaQO/Zhao60xKzQqC4fQYAEOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbYVBTP05kj38glNhNhWhItPHLZMB8GA1UdIwQY
MBaAFHKbM95gUdBNdfa7H35Tse/WZGIRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGIt
NmVhMjc5YTJlNmNiLzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGItNmVhMjc5YTJlNmNi
LzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDjneIE4
DgOVPwPo1EzGZ4n1U4LG5z0+88yZ+j4qktyEtWi3nG3CNmm+IfRQk8h+TYt/ow7Q
MzV5izVsf1u3Kxt9qUIZIUXSOMPx4J0ExlQQxQBp51SEV3yRwBXyYZfmVQWN1IJn
GCZXo+IIoLzcqE0hS8g9nDmlmIL4ZclVnQoQvXnqULw7NfKkiS/MkdY2Kn9ZCTFv
o1EDhRZ3b7DVHbQsCu5Q1nw5XwYpxRGcQCp8cjU0X6CC+GJCS0pEKdHluYo+/mGL
x6bUtQv4AaEuOh/bLenHWUUjIQVkUK+uBRuwdUic65pXosI0btWPj/aO6GoELkow
fFYr5I2rKwOjEQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:38 2026 by rpki-client