Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: UvEu190X+CCprG2jnhb9dh0OlWoal+PWgbyrk2G8Z6Y=
Subject key identifier: 73:D5:B4:5D:29:34:FF:B0:8E:2B:A2:B1:B4:5F:93:25:00:BD:4A:80
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019EC06D61EB74725DD1A2DF4D812BED310A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 035E
Signing time: Sat 13 Jun 2026 10:00:54 +0000
Manifest this update: Sat 13 Jun 2026 10:00:54 +0000
Manifest next update: Sun 14 Jun 2026 10:00:54 +0000
Files and hashes: 1: S9Lhb0W6DQLznm2Ny0nTE0rtZA0.roa (hash: 09s9DPo4YDicwuBRma+J17GCgEogtmblge/75XK9+TI=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: ZAJ6Bq8BXwJdblutm2gxQHysH2JkyA+QW2dHQJr++Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:61:eb:74:72:5d:d1:a2:df:4d:81:2b:ed:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Jun 13 10:00:54 2026 GMT
Not After : Jun 14 10:00:54 2026 GMT
Subject: CN=73d5b45d2934ffb08e2ba2b1b45f932500bd4a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:ed:d9:fd:13:f9:9e:39:31:fc:38:a7:2a:
b4:6f:bc:31:cd:46:f5:7f:a3:76:1b:d4:cc:20:50:
46:5f:b3:15:04:03:99:15:1b:48:7a:61:d0:12:ff:
a3:e7:a4:c7:0a:d0:86:fe:bb:90:cd:20:ef:d2:e3:
dc:f9:8c:0d:58:7e:c7:14:09:70:94:7a:67:27:d7:
27:fd:84:9d:c6:46:ea:99:5e:f5:fb:e0:b2:75:d5:
a4:16:43:7c:0e:55:34:0d:14:c5:b4:85:0f:36:7c:
01:83:42:19:60:24:91:a8:19:e5:b5:4c:48:04:5b:
6c:3e:36:88:87:f2:dc:1e:9b:7f:51:fd:c3:04:94:
72:b1:f1:04:5b:a5:6d:e1:02:6f:3d:2f:a7:a2:77:
3a:30:c4:63:6b:70:ae:8c:0f:24:e7:97:aa:6e:93:
b0:6f:67:24:f5:c5:e3:86:f9:04:f6:f1:b9:b4:5b:
6d:24:b6:41:1d:1c:cc:71:f5:79:ff:17:98:92:f8:
03:ba:07:42:f7:aa:0d:fa:db:a7:09:c1:34:4a:c8:
29:60:18:45:7b:d6:07:50:a9:98:de:25:2b:e5:d2:
a1:cf:63:56:37:d1:63:cb:f9:c8:1d:ed:d7:92:5e:
fa:51:88:35:48:98:46:6a:62:03:32:38:21:ca:ee:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:B4:5D:29:34:FF:B0:8E:2B:A2:B1:B4:5F:93:25:00:BD:4A:80
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0d:51:06:25:71:9d:cb:25:d0:02:b9:27:3a:70:d2:a6:e1:
20:a8:5f:56:3d:1c:5d:a6:b2:d2:6a:57:36:c4:6c:63:b8:39:
52:be:8e:74:64:11:d4:d0:2f:49:ad:9e:1c:4f:8f:38:6f:0f:
58:47:a0:07:df:ec:0a:58:cd:ab:3c:e0:58:50:7f:d4:aa:76:
fa:bf:58:a8:25:d9:02:c8:f2:85:86:29:c8:4a:b5:33:c6:ec:
dc:09:01:bc:cb:9b:f2:75:eb:a1:69:86:4e:fc:2c:2e:ee:01:
07:c8:25:45:0b:06:f7:30:a5:af:a8:3e:75:bb:2b:02:e1:42:
68:83:b6:9d:b5:9f:31:60:93:46:21:b5:60:e1:92:78:10:2b:
52:fa:1c:78:d0:8d:db:77:7c:11:4d:82:44:b0:8d:38:64:87:
78:49:6c:f9:40:ee:34:8a:eb:46:d2:da:66:d9:43:d6:d1:57:
0f:53:2a:db:b6:3e:85:38:a2:52:4c:76:bd:3f:6f:5e:2c:88:
84:bc:c2:52:4b:52:a4:a9:21:22:4d:7b:43:48:67:3d:7a:27:
00:3c:76:96:09:3f:d2:3a:38:89:02:ec:f3:8a:ea:53:70:43:
6b:72:ad:ca:be:5f:22:12:c3:1e:94:a7:2b:8f:ca:cf:69:c3:
39:2b:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:18 2026 by rpki-client