Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: gzM4+RuLFZQTHbeuPpV+UwcW5Eca2Pc+zWiVWdCIrZ4=
Subject key identifier: 23:76:BF:F8:8E:2B:8B:BA:55:B5:FB:A7:19:96:1A:20:86:86:9A:17
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019D96CECFFB614A6A01CC67075051B040E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 02C1
Signing time: Thu 16 Apr 2026 15:00:29 +0000
Manifest this update: Thu 16 Apr 2026 15:00:29 +0000
Manifest next update: Fri 17 Apr 2026 15:00:29 +0000
Files and hashes: 1: 6B4kFs8m6XNqOOXEEwtoCnODGNs.roa (hash: ii2wo/z5TVJ2lcGEsUjXOcj+E4rGSY8QRKqGHtg/05U=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: uhhqtQcNYavaBUNusfCIv3QFaOxOreuoSnDTG4pvPw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:ce:cf:fb:61:4a:6a:01:cc:67:07:50:51:b0:40:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Apr 16 15:00:29 2026 GMT
Not After : Apr 17 15:00:29 2026 GMT
Subject: CN=2376bff88e2b8bba55b5fba719961a2086869a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:81:20:08:f9:81:68:66:9f:16:0f:00:c6:
67:bc:89:5e:6a:28:35:de:5c:78:8e:73:e3:3e:d3:
03:6f:2a:7b:42:e3:5c:6d:b1:b2:ca:fe:9d:aa:47:
4a:88:88:8f:69:b6:5f:ae:14:75:4c:5a:1e:a0:48:
41:9d:b4:c8:91:95:da:2c:90:df:f7:68:78:66:3e:
ab:d4:74:8d:9c:44:40:c8:05:bd:ef:1e:82:74:43:
68:e1:b6:1d:8f:e3:08:76:62:ee:46:03:4a:cb:36:
f3:4d:e1:97:01:4f:30:34:f4:22:d0:b0:30:cb:08:
64:94:31:da:da:ba:f0:d1:da:da:0a:a7:62:99:38:
d7:6a:c4:e2:e6:2e:58:b1:6a:4d:ab:d6:89:54:a6:
7e:97:35:62:30:db:3b:f7:7d:6c:b8:29:1e:f5:e9:
87:08:2a:3e:f2:aa:2c:ff:34:b9:11:55:a4:fc:e7:
16:96:34:ef:d9:81:e6:70:c2:47:4f:03:b2:93:29:
03:f7:3e:e4:6a:40:77:18:d4:d0:5d:d1:a2:95:e0:
4f:d7:e5:9e:07:e8:f6:43:89:56:b5:bb:45:18:3c:
88:98:91:5d:f3:5a:58:da:35:70:8c:09:31:3b:b2:
29:c5:15:a5:e8:b9:06:7b:0f:8f:d8:1d:6c:7d:6f:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:76:BF:F8:8E:2B:8B:BA:55:B5:FB:A7:19:96:1A:20:86:86:9A:17
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:c6:bb:9f:63:bf:92:49:1f:02:21:7e:f2:b3:de:35:a1:
80:b1:09:3b:81:5a:12:ae:c9:d0:a3:61:1b:10:8e:71:8f:d3:
3e:e0:91:7a:68:12:23:10:30:86:14:2f:60:31:c4:8e:dd:0b:
99:3b:6c:99:5e:62:cb:fc:68:9f:5b:10:c4:ab:96:a8:e2:c7:
85:bc:45:de:93:1d:3d:7f:0b:52:c0:f8:a6:09:95:e5:20:3f:
87:eb:d1:92:bf:5f:25:bf:56:95:e9:48:5d:db:eb:66:9d:4b:
e4:29:56:ba:84:35:46:7d:3c:87:da:82:c9:4f:ee:fa:62:f8:
c8:8a:67:b4:d7:38:a3:de:28:bf:87:8d:85:98:75:2a:29:eb:
b3:df:0c:1e:7e:28:a0:55:0b:fb:b4:51:3b:50:38:4f:3e:40:
51:50:69:1f:cc:15:e4:94:eb:c1:de:9d:55:b0:18:68:34:db:
91:df:22:3b:dc:f0:73:ae:77:59:02:76:f4:ba:aa:17:cc:fa:
9c:13:7d:53:fe:08:1f:ed:36:00:95:7d:bf:92:da:af:ec:56:
6c:65:c3:55:9b:f1:4a:0c:1c:01:da:12:27:c4:59:10:04:75:
09:ab:26:9f:8f:c7:99:3b:a0:af:b6:ed:4e:8c:47:f8:52:9b:
24:58:b0:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Wzs/7YUpqAcxnB1BRsEDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWNhNjNlNmQyYjUwNDQ0OTIxN2RjMDc4OGM5ZDM3NDg5
YjRjNDUwHhcNMjYwNDE2MTUwMDI5WhcNMjYwNDE3MTUwMDI5WjAzMTEwLwYDVQQD
EygyMzc2YmZmODhlMmI4YmJhNTViNWZiYTcxOTk2MWEyMDg2ODY5YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMOBIAj5gWhmnxYPAMZnvIleaig1
3lx4jnPjPtMDbyp7QuNcbbGyyv6dqkdKiIiPabZfrhR1TFoeoEhBnbTIkZXaLJDf
92h4Zj6r1HSNnERAyAW97x6CdENo4bYdj+MIdmLuRgNKyzbzTeGXAU8wNPQi0LAw
ywhklDHa2rrw0draCqdimTjXasTi5i5YsWpNq9aJVKZ+lzViMNs7931suCke9emH
CCo+8qos/zS5EVWk/OcWljTv2YHmcMJHTwOykykD9z7kakB3GNTQXdGileBP1+We
B+j2Q4lWtbtFGDyImJFd81pY2jVwjAkxO7IpxRWl6LkGew+P2B1sfW/bcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCN2v/iOK4u6VbX7pxmWGiCGhpoXMB8GA1UdIwQY
MBaAFHKcpj5tK1BESSF9wHiMnTdIm0xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2Ut
NTU5ZTNkNzZjNWI2LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2UtNTU5ZTNkNzZjNWI2
LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWHGu59j
v5JJHwIhfvKz3jWhgLEJO4FaEq7J0KNhGxCOcY/TPuCRemgSIxAwhhQvYDHEjt0L
mTtsmV5iy/xon1sQxKuWqOLHhbxF3pMdPX8LUsD4pgmV5SA/h+vRkr9fJb9WlelI
XdvrZp1L5ClWuoQ1Rn08h9qCyU/u+mL4yIpntNc4o94ov4eNhZh1Kinrs98MHn4o
oFUL+7RRO1A4Tz5AUVBpH8wV5JTrwd6dVbAYaDTbkd8iO9zwc653WQJ29LqqF8z6
nBN9U/4IH+02AJV9v5Lar+xWbGXDVZvxSgwcAdoSJ8RZEAR1Casmn4/HmTugr7bt
ToxH+FKbJFiwZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:57 2026 by rpki-client