Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: 5yZG4dA7SVaA6VeDZLBKmcxMM5IZHFo9j0k3g3d6D04=
Subject key identifier: 3F:CD:E7:DF:C3:6D:9F:ED:DD:BF:84:AF:AA:A1:98:62:61:4D:41:FD
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019DA453614472E5C4CFEEA4E4A36B551690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 02C8
Signing time: Sun 19 Apr 2026 06:00:20 +0000
Manifest this update: Sun 19 Apr 2026 06:00:20 +0000
Manifest next update: Mon 20 Apr 2026 06:00:20 +0000
Files and hashes: 1: 6B4kFs8m6XNqOOXEEwtoCnODGNs.roa (hash: ii2wo/z5TVJ2lcGEsUjXOcj+E4rGSY8QRKqGHtg/05U=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: G4+Uefh12u75KpVOiRWugrlQO7FRGqj+nO+1VHdAWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:61:44:72:e5:c4:cf:ee:a4:e4:a3:6b:55:16:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Apr 19 06:00:20 2026 GMT
Not After : Apr 20 06:00:20 2026 GMT
Subject: CN=3fcde7dfc36d9fedddbf84afaaa19862614d41fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:b9:65:37:2c:75:50:3b:c1:b2:d9:55:0c:
1b:59:3b:cc:da:51:92:35:de:86:cf:bd:ca:b1:ef:
20:51:3f:3a:6e:c2:de:27:7b:71:01:55:78:1a:19:
9c:3e:f1:02:18:e1:92:28:77:c3:2f:bc:ac:7e:d6:
0c:80:cf:de:0d:96:2b:b2:db:67:9f:64:d9:8c:54:
a9:27:53:68:70:3a:ad:e0:75:79:bc:a6:b2:c3:1b:
84:ea:b3:16:87:12:b1:fc:5e:8d:a6:1d:f3:7d:7f:
23:c2:9f:a8:03:7c:d3:8d:1d:db:0b:80:6d:37:27:
a6:f1:ab:64:82:a6:b0:3d:ae:69:b2:11:66:17:89:
fa:d7:9c:2f:11:3d:0c:70:7e:19:ca:2d:47:9f:a7:
0e:83:ef:7d:d5:d8:93:6e:b2:7d:78:0d:9c:27:0b:
83:1e:6b:da:7d:32:b5:83:ba:db:fc:cb:28:e4:cd:
ea:33:02:15:e4:c2:4d:10:24:c0:6d:31:44:ad:82:
84:e5:50:ed:40:5e:08:22:79:b2:8c:7f:e0:66:84:
df:d7:3f:12:51:fe:54:d1:c4:85:cf:6a:9e:a2:85:
76:a7:4c:f8:98:fb:e8:95:28:aa:1a:4b:93:0a:71:
1d:d4:b2:16:31:5e:99:91:3c:45:ee:9f:c1:3f:3c:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:E7:DF:C3:6D:9F:ED:DD:BF:84:AF:AA:A1:98:62:61:4D:41:FD
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b5:45:2a:ec:e3:97:5d:cb:18:33:00:8d:cb:60:4e:00:0b:
ba:18:50:d1:ec:c5:f5:4f:3e:c8:d0:ff:70:5b:c0:3f:31:4e:
ba:03:90:e9:c4:65:cb:10:a2:c8:0c:8e:d1:ed:03:c8:db:9f:
4f:ec:b5:39:bf:0a:a4:31:9a:61:e5:f6:17:7e:99:56:2c:bf:
bc:60:62:b6:74:61:49:46:81:b2:fe:c2:c5:ee:f0:14:df:11:
52:38:74:75:6c:cd:22:eb:da:14:ae:82:f0:70:22:4d:01:ad:
9d:1c:24:6c:36:b6:32:bd:6c:db:08:6a:58:f3:f4:29:54:6b:
e7:5a:e6:f2:f6:7a:1a:46:46:f6:ce:d6:83:cb:9e:80:03:22:
3d:fa:3b:af:22:54:e0:c5:ad:09:af:09:56:40:7a:da:21:37:
47:f3:46:74:a7:37:58:07:04:45:5d:2d:22:93:f7:db:3f:ea:
5e:2c:05:51:9f:fa:94:f6:9d:c0:5e:ed:5c:d5:14:fe:c7:5b:
16:6b:11:68:db:ff:a5:97:16:bf:b5:b3:f8:eb:6d:4c:22:34:
ad:e3:93:43:40:3e:b1:e5:64:3f:0b:c5:af:9c:51:95:52:61:
b5:bb:f7:fb:c6:3e:ff:5c:4f:0c:fe:aa:e8:40:7b:3e:58:ee:
90:cf:1d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU2FEcuXEz+6k5KNrVRaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWNhNjNlNmQyYjUwNDQ0OTIxN2RjMDc4OGM5ZDM3NDg5
YjRjNDUwHhcNMjYwNDE5MDYwMDIwWhcNMjYwNDIwMDYwMDIwWjAzMTEwLwYDVQQD
EygzZmNkZTdkZmMzNmQ5ZmVkZGRiZjg0YWZhYWExOTg2MjYxNGQ0MWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHu5ZTcsdVA7wbLZVQwbWTvM2lGS
Nd6Gz73Kse8gUT86bsLeJ3txAVV4GhmcPvECGOGSKHfDL7ysftYMgM/eDZYrsttn
n2TZjFSpJ1NocDqt4HV5vKaywxuE6rMWhxKx/F6Nph3zfX8jwp+oA3zTjR3bC4Bt
Nyem8atkgqawPa5pshFmF4n615wvET0McH4Zyi1Hn6cOg+991diTbrJ9eA2cJwuD
HmvafTK1g7rb/Mso5M3qMwIV5MJNECTAbTFErYKE5VDtQF4IInmyjH/gZoTf1z8S
Uf5U0cSFz2qeooV2p0z4mPvolSiqGkuTCnEd1LIWMV6ZkTxF7p/BPzxE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/N59/DbZ/t3b+Er6qhmGJhTUH9MB8GA1UdIwQY
MBaAFHKcpj5tK1BESSF9wHiMnTdIm0xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2Ut
NTU5ZTNkNzZjNWI2LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2UtNTU5ZTNkNzZjNWI2
LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbVFKuzj
l13LGDMAjctgTgALuhhQ0ezF9U8+yND/cFvAPzFOugOQ6cRlyxCiyAyO0e0DyNuf
T+y1Ob8KpDGaYeX2F36ZViy/vGBitnRhSUaBsv7Cxe7wFN8RUjh0dWzNIuvaFK6C
8HAiTQGtnRwkbDa2Mr1s2whqWPP0KVRr51rm8vZ6GkZG9s7Wg8uegAMiPfo7ryJU
4MWtCa8JVkB62iE3R/NGdKc3WAcERV0tIpP32z/qXiwFUZ/6lPadwF7tXNUU/sdb
FmsRaNv/pZcWv7Wz+OttTCI0reOTQ0A+seVkPwvFr5xRlVJhtbv3+8Y+/1xPDP6q
6EB7PljukM8duQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:42:55 2026 by rpki-client