Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: OApJlx9Fz8S0wScR7efOjaRhaXAoKHZeBD9l6DMYDXk=
Subject key identifier: 33:DC:3B:0D:F0:F7:55:85:BE:DF:88:CB:AC:A6:69:9A:2E:A4:93:F6
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 019FA7184A0085764D0C1D8C9C1753CE1115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 0DFC
Signing time: Tue 28 Jul 2026 05:00:14 +0000
Manifest this update: Tue 28 Jul 2026 05:00:14 +0000
Manifest next update: Wed 29 Jul 2026 05:00:14 +0000
Files and hashes: 1: DgE7qpXbhbps6DJDYkdwBbjFG4U.asa (hash: JXqb/d+p8C0uPTZtibuHHJ5kSrbcCvMBiMCMoX7QBZY=)
2: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: Mtr6I+x6avxT9ZiGYfAzbmSYcl1SDvYfbh7FdbVjL7k=)
3: dazL3iKbsjKxy4HddRH3nz-7Dnw.roa (hash: qq3zl4qFIOovDjZr1RPB2doiGCNi2c1snUt8x3cExWg=)
4: jgD1GTXsm3n5JwyXP57oSoUwOXs.asa (hash: nBQL1SbLriRKXkdqanEpebon9wOpjIUD2AKKZwRdH68=)
5: n0ltjUW2u4L-AevEK7WCfM6T9LA.roa (hash: N1gRe4gHex5uwrjtGQXXfVTkeefAztrf56Bgo5TeW0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:4a:00:85:76:4d:0c:1d:8c:9c:17:53:ce:11:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Jul 28 05:00:14 2026 GMT
Not After : Jul 29 05:00:14 2026 GMT
Subject: CN=33dc3b0df0f75585bedf88cbaca6699a2ea493f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:39:68:e0:d1:1f:0b:c7:79:5b:7b:e2:78:
11:24:ce:89:03:14:85:2e:d9:e2:f5:d8:6b:2d:88:
cd:08:0b:e2:1d:f1:62:f3:32:0e:a2:67:23:c4:c4:
3d:44:c5:13:55:1f:63:14:cc:a3:64:71:20:95:e9:
6e:09:96:3e:b6:e3:8e:01:3e:25:70:26:c0:8e:a2:
f4:55:27:5c:d9:54:87:7a:90:b1:92:a3:8f:3a:77:
92:bd:63:14:98:25:59:fd:90:bb:73:a3:27:8a:ed:
79:84:86:75:0f:76:f0:eb:55:3c:5c:0e:f8:28:91:
c1:7c:25:e0:9f:9a:6e:37:d4:f3:7a:22:69:e0:fc:
9c:c2:df:d5:a8:f0:30:28:40:88:1b:85:53:27:15:
c7:ea:7a:ba:02:27:90:39:59:91:62:68:68:d9:61:
db:00:c9:8c:43:ec:e9:ee:68:94:79:40:41:f5:be:
c9:b4:00:f6:ee:37:b2:17:d7:5d:b3:75:55:4d:75:
55:13:cf:9a:8b:af:6f:cf:76:37:55:3d:66:3b:81:
2c:9e:9c:1e:72:a1:e0:1b:4b:97:60:76:a4:17:6f:
a0:75:d6:b9:d3:2b:7d:34:7e:fc:34:9f:45:cf:10:
d0:e1:9b:62:d2:96:a5:97:7c:91:77:48:26:89:dc:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DC:3B:0D:F0:F7:55:85:BE:DF:88:CB:AC:A6:69:9A:2E:A4:93:F6
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:11:0e:83:26:10:34:c3:13:2a:17:0b:d5:b2:3d:3e:38:d7:
b5:e3:f1:35:aa:3b:a6:96:d8:67:f7:1a:67:4f:b5:76:aa:d8:
47:74:42:ff:8b:81:5c:b3:23:fb:3d:2a:22:75:34:e9:18:55:
d3:5d:96:1e:57:ce:86:78:7b:29:28:9e:2e:19:90:a5:7a:3d:
94:c7:66:6f:ad:3e:40:4d:92:13:fe:9c:b7:0b:4d:8d:7b:a7:
31:35:40:13:5d:1d:c2:ad:35:cc:2b:86:f9:72:62:f7:ae:2d:
10:5b:9d:44:72:7a:91:2f:0b:bd:9f:2d:a2:f3:47:96:00:6b:
3a:71:93:a9:74:0c:9e:a5:ce:00:b7:2b:eb:8b:85:7d:74:3f:
9b:04:7a:e9:e4:53:d5:1e:cd:e7:11:0e:28:d2:53:f5:b2:7e:
1a:af:bf:47:a8:88:01:82:46:70:0c:35:c3:b3:f7:ff:ed:34:
53:04:02:81:90:f7:a8:8d:53:27:3a:bc:06:db:c6:d4:35:7d:
75:43:5e:58:49:e1:78:0f:d6:a9:d0:e6:a8:8d:33:df:84:fd:
96:1a:37:c5:ef:db:da:02:c9:31:b3:3b:36:e0:49:cf:fd:ce:
45:d2:4a:27:71:4c:56:a9:7e:39:c4:7d:d9:22:26:e4:00:21:
82:76:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:21 2026 by rpki-client