Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: pShicyic41tuVu6noiBRsYfiQRjflC9Q5PWfPQelb4w=
Subject key identifier: 5D:BE:21:8D:91:B5:EB:A8:9B:D8:AB:3F:08:7A:21:C5:57:6C:AA:80
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 01A0D3157A06297D09B229B894516C13ACB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 0475
Signing time: Thu 24 Sep 2026 11:03:15 +0000
Manifest this update: Thu 24 Sep 2026 11:03:15 +0000
Manifest next update: Fri 25 Sep 2026 11:03:15 +0000
Files and hashes: 1: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: j/DA1Ap3dNdZJWRaIA5yq6wl5BLiPK7QF9Q/6ZH3vno=)
2: iFr6HF7AcAIE7SL_xgtb9gghgjM.roa (hash: 1+PHdAJ98duf/VMqvgx7vNiRWzao2CXjvddd5jArPf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:7a:06:29:7d:09:b2:29:b8:94:51:6c:13:ac:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Sep 24 11:03:15 2026 GMT
Not After : Sep 25 11:03:15 2026 GMT
Subject: CN=5dbe218d91b5eba89bd8ab3f087a21c5576caa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d6:5c:4d:70:b3:49:f4:3d:0e:d2:2d:ea:b0:
dc:1a:94:92:4a:78:3d:94:eb:ad:5c:b0:29:af:92:
6c:ba:01:72:86:9c:f1:36:b9:a4:f0:d2:f3:95:59:
9c:18:cf:02:5c:30:89:82:5c:4a:e3:c3:a6:b0:73:
3a:b4:bd:0a:98:97:e9:48:b7:16:3a:12:1f:b8:20:
a7:14:a8:24:4e:45:42:1a:d1:91:f0:72:bc:4d:c4:
6f:62:87:08:8d:c2:1a:27:e1:c7:ad:cd:2a:46:0f:
ab:99:ac:dd:11:58:fd:10:cb:20:25:56:07:f3:63:
27:37:c5:88:64:3f:dc:fa:79:a2:0f:36:0c:d8:dc:
f1:0b:cc:e8:52:e8:93:60:1b:cc:4e:66:3a:11:0b:
62:a1:ad:a8:9c:f2:96:86:f2:cc:ed:08:88:2d:a3:
38:f3:17:01:d8:f4:d7:49:04:b6:b2:35:f7:dc:d8:
2e:88:51:6c:d0:c7:43:3b:19:3e:d8:0a:c2:27:7e:
94:94:d8:35:f0:61:0e:3d:0d:c8:c2:e6:56:db:79:
c1:a6:91:2d:13:30:12:8c:16:fb:18:bc:bb:04:54:
7b:cd:f1:32:59:32:8a:9f:ca:33:7d:4d:ae:50:38:
35:80:ae:ec:08:8e:7a:c4:5a:c7:b0:02:db:97:66:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BE:21:8D:91:B5:EB:A8:9B:D8:AB:3F:08:7A:21:C5:57:6C:AA:80
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:de:55:9b:8b:a3:59:e6:9f:0a:95:48:50:d8:5c:ef:b3:ad:
70:c1:db:6f:ec:57:cf:74:94:3b:02:68:62:2d:ca:1e:69:d8:
a5:5b:79:aa:91:d9:94:1f:7c:bc:b5:43:16:bc:20:87:0e:51:
72:3e:e6:52:74:b5:75:14:3a:77:55:5e:ea:73:8c:cd:ec:89:
a4:10:4b:5e:0c:d6:50:8f:8e:0d:c0:3a:fe:7a:8c:7a:40:85:
10:89:20:64:0b:39:9f:19:d1:68:bb:82:53:e3:40:b3:69:6f:
34:e7:99:c8:71:69:21:fe:ce:95:84:bd:9e:8d:a8:b5:33:8b:
f0:9b:b8:97:a1:89:db:9e:94:49:a4:d1:83:32:1e:24:0b:39:
a5:dd:00:c8:e4:87:fa:97:79:4e:b7:a3:04:30:4e:fe:e0:29:
12:af:0c:94:05:bb:9d:ad:fb:4a:9f:0c:52:27:8e:d5:81:d9:
1a:c6:47:fe:01:88:21:25:3d:1d:4c:5d:73:83:4b:2f:95:88:
3d:64:f4:43:d3:2e:f0:32:13:98:d1:d2:57:99:41:2b:77:22:
bc:e7:17:77:ff:f7:89:ed:86:d1:22:16:b1:7e:23:77:50:b4:
7b:66:08:9c:e3:be:ae:74:e0:68:d5:2c:c1:71:8a:a0:30:19:
c6:6b:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:06:57 2026 by rpki-client