Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: zQk1nWU3Q4pFavdNCqQOvHJk2x4rBkuWhYeyqiS3cmY=
Subject key identifier: 00:88:BF:96:E8:08:43:FA:73:5B:91:D9:63:59:25:1C:5F:D3:8D:24
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019FAAF54A592710A795C43588F87FB37A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 03D9
Signing time: Tue 28 Jul 2026 23:00:29 +0000
Manifest this update: Tue 28 Jul 2026 23:00:29 +0000
Manifest next update: Wed 29 Jul 2026 23:00:29 +0000
Files and hashes: 1: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: zK7DOKBBeeLN897PLoVPp6ITSdhIxvmzNnXWP5i2Z8U=)
2: jOAZ3E7oW-kBXNuE4GL1fYgaDyI.roa (hash: YE6xZb8RdMntJLYJXnM9I5dsHeZDxxUZFJG8X5S7g60=)
3: xg8FA0hnqIPi8c0XibhiGNYtnk8.roa (hash: 7TvENL0uN7mnUqef36Fz7XzZlZOxli3AqStudaibnxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:4a:59:27:10:a7:95:c4:35:88:f8:7f:b3:7a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Jul 28 23:00:29 2026 GMT
Not After : Jul 29 23:00:29 2026 GMT
Subject: CN=0088bf96e80843fa735b91d96359251c5fd38d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:c4:ed:c7:45:6c:9e:de:3f:74:f1:58:07:
17:10:c6:d6:0a:ef:b6:e0:7c:5e:d4:7b:d2:9f:95:
62:a3:f1:41:2b:f1:93:cf:66:3e:9e:7e:6c:d8:aa:
03:24:21:31:26:21:b7:64:90:e5:67:01:85:ae:62:
b3:32:61:46:bf:e5:48:4e:2d:80:56:dc:c4:e1:a5:
17:7e:ca:b4:c5:d6:a5:55:00:f4:eb:c5:04:a9:a9:
e9:b4:4c:a7:59:c5:fd:45:88:8f:cd:12:33:24:d8:
69:96:e5:cd:22:47:97:44:9a:f3:ee:da:ff:73:b6:
38:35:5b:2c:f9:46:5d:1d:15:e8:41:f9:67:a1:d7:
70:37:6e:f9:06:11:7a:e0:5c:6d:a1:18:85:c8:06:
8b:d7:65:1a:a7:52:d6:ca:af:fb:64:f1:10:fa:22:
f7:ba:bc:69:e8:4d:26:cb:53:b9:c2:18:36:52:d1:
c4:1a:84:df:2c:24:16:3b:1a:83:38:65:35:bb:48:
34:1a:7d:62:53:8b:5a:16:99:79:61:55:59:b0:de:
b2:ca:4e:f6:49:f1:52:e3:df:87:79:2b:d6:83:57:
35:52:aa:e1:23:34:ff:18:f2:31:4e:2d:ce:43:26:
9a:f5:3e:d0:3b:bd:96:e5:19:d8:55:68:4d:a2:23:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:BF:96:E8:08:43:FA:73:5B:91:D9:63:59:25:1C:5F:D3:8D:24
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4d:a5:55:b1:86:77:0e:15:07:d4:4d:4c:33:78:cc:f8:63:
94:af:bb:31:ae:60:17:b7:88:2a:13:2e:0a:d1:fe:d4:df:d0:
6a:0e:71:fb:b5:62:56:81:1c:bc:54:28:73:e0:14:ae:0d:0b:
aa:1f:73:a3:ed:86:cd:11:84:90:d2:ed:90:18:a7:b0:16:a0:
23:f5:59:3e:e0:55:1d:49:26:0a:c2:df:72:0d:1f:3f:21:f2:
2a:c4:1e:8b:8c:cd:0c:ab:ab:df:a6:36:70:46:37:97:89:ea:
5e:72:e8:c2:38:26:c2:b4:b6:fa:f0:01:8e:e7:bc:85:07:e8:
ce:27:68:cd:fc:59:aa:2f:45:f6:c7:40:23:ef:24:fb:1c:74:
47:c8:83:42:10:a4:71:b2:7e:38:be:98:9f:ab:e9:40:6a:00:
2b:e2:3c:7e:45:ab:43:9f:6a:32:2d:52:d3:a5:3d:96:0e:81:
cb:15:9c:a6:08:f8:c1:8c:87:37:47:5b:18:54:4f:6f:98:d8:
ea:f5:af:6e:65:09:10:1e:fa:b2:6b:7c:8d:ea:6c:ce:20:39:
ef:34:84:c5:68:06:0d:44:81:b9:0d:eb:9a:55:7a:e6:a3:ba:
de:9b:fb:ee:7a:24:98:09:a0:32:21:3b:e9:b2:4d:57:14:84:
7f:e7:2d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:10 2026 by rpki-client