
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: sn4rPDMKQc1rWjnJFgXb+4BwVJkYxfc5tx0O8SZzzfM=
Subject key identifier: 80:00:F9:F3:36:82:55:1A:67:1C:6D:EC:2B:02:6A:23:CC:3C:BC:26
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 019D996298DFF61EFACA76A88A70DABF8224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 0CEB
Signing time: Fri 17 Apr 2026 03:01:08 +0000
Manifest this update: Fri 17 Apr 2026 03:01:08 +0000
Manifest next update: Sat 18 Apr 2026 03:01:08 +0000
Files and hashes: 1: DgE7qpXbhbps6DJDYkdwBbjFG4U.asa (hash: JXqb/d+p8C0uPTZtibuHHJ5kSrbcCvMBiMCMoX7QBZY=)
2: K2NfFx3TkrXQP8nQwasIAH5qXuk.roa (hash: eOpjTh0ebYyTZWv6iqBeMtDuPL0eSZ5JWmYsy8J7I/A=)
3: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: l/Cc7BZKFoNGjEz6ZOK2J4VPhNWvv10eyA9s7wP7FfY=)
4: dazL3iKbsjKxy4HddRH3nz-7Dnw.roa (hash: qq3zl4qFIOovDjZr1RPB2doiGCNi2c1snUt8x3cExWg=)
5: jgD1GTXsm3n5JwyXP57oSoUwOXs.asa (hash: nBQL1SbLriRKXkdqanEpebon9wOpjIUD2AKKZwRdH68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:98:df:f6:1e:fa:ca:76:a8:8a:70:da:bf:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Apr 17 03:01:08 2026 GMT
Not After : Apr 18 03:01:08 2026 GMT
Subject: CN=8000f9f33682551a671c6dec2b026a23cc3cbc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:7c:16:62:ac:97:e1:c3:31:4a:73:57:5b:
ba:b7:b5:30:97:19:3d:39:28:c6:ea:4e:96:2a:c8:
e1:ba:c3:86:47:6f:1c:c8:4c:85:0d:40:18:b8:a7:
7e:79:bd:dd:e8:25:f6:1f:cf:64:13:76:e2:61:bd:
6f:1e:fc:ad:4f:67:be:1a:97:99:d6:bc:ce:93:a2:
04:d0:b2:06:05:ae:2d:be:84:49:dc:15:a6:e1:89:
e6:f7:37:ee:40:e1:b6:3e:a3:8f:ea:15:3f:28:39:
c9:82:f0:aa:00:06:4d:77:5b:e1:35:9c:87:a7:0e:
0c:85:1f:01:fd:1e:a4:3c:31:02:e7:9e:ef:07:e5:
b0:2a:d0:e7:e7:5b:5b:08:e6:fc:e6:b2:c5:0f:29:
1b:d7:65:0c:07:23:14:2e:2d:1e:cc:36:b3:3b:30:
bd:f1:4a:a3:de:df:08:d9:7b:7c:91:cc:9b:cf:72:
41:cd:7f:05:35:52:ae:d8:df:71:c3:2e:00:39:45:
e1:09:48:b2:58:07:a5:f4:80:49:f9:05:f9:01:ef:
b8:d9:aa:92:fb:b7:f8:3c:12:28:12:1c:2a:c2:40:
c2:f8:aa:c0:1b:67:7c:56:88:cb:70:91:2e:f0:96:
f8:98:af:5e:7d:6d:b7:a8:fe:f9:d0:77:34:a4:36:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:F9:F3:36:82:55:1A:67:1C:6D:EC:2B:02:6A:23:CC:3C:BC:26
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:18:cb:6e:09:dc:92:ed:f2:56:0e:ae:18:53:92:cd:c5:60:
e0:2b:54:79:b7:df:74:66:37:1e:ca:59:9e:b8:94:73:5f:bf:
29:7e:e3:9a:98:0d:b8:0b:58:8d:e0:9b:4e:4c:3e:76:f6:40:
c9:8e:a2:9f:7a:55:b5:8d:f3:4f:d9:43:e0:23:07:4a:ba:86:
4c:de:ea:ff:27:08:56:c1:3e:63:52:a1:30:bf:93:ee:f9:49:
ca:68:25:3e:17:b3:c3:a6:fc:6e:e3:0a:ec:1b:9a:8f:b5:5e:
fe:f7:5a:cd:a7:b7:53:de:49:49:63:38:32:96:a0:5b:a4:05:
c4:4c:13:65:2d:70:82:56:8c:2a:4e:2b:c2:bb:3e:5d:9d:b1:
2c:f0:05:b2:9e:ee:39:fd:8d:10:71:4a:2d:a8:18:e7:db:df:
f6:78:ec:60:f7:ee:40:f4:2a:84:8f:0c:66:1c:44:f1:90:03:
a7:df:55:a7:45:48:0e:3e:0a:12:a2:04:7c:93:df:c6:d8:b5:
46:64:67:26:a7:bb:bf:8a:26:0e:5e:2c:24:09:65:00:21:f3:
92:fb:5a:77:bd:b9:e8:b9:27:aa:2e:f9:5a:19:b7:42:0e:c7:
a4:cb:92:8a:93:17:d1:63:d5:c4:07:af:0e:a0:17:0d:93:9e:
1c:9e:6c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYpjf9h76ynaoinDav4IkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTljZTY0YTBmMTYyNGQ3YmIyZDI5NjllNWMxMWFkYmFh
NTQ4NWMwHhcNMjYwNDE3MDMwMTA4WhcNMjYwNDE4MDMwMTA4WjAzMTEwLwYDVQQD
Eyg4MDAwZjlmMzM2ODI1NTFhNjcxYzZkZWMyYjAyNmEyM2NjM2NiYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8N8FmKsl+HDMUpzV1u6t7Uwlxk9
OSjG6k6WKsjhusOGR28cyEyFDUAYuKd+eb3d6CX2H89kE3biYb1vHvytT2e+GpeZ
1rzOk6IE0LIGBa4tvoRJ3BWm4Ynm9zfuQOG2PqOP6hU/KDnJgvCqAAZNd1vhNZyH
pw4MhR8B/R6kPDEC557vB+WwKtDn51tbCOb85rLFDykb12UMByMULi0ezDazOzC9
8Uqj3t8I2Xt8kcybz3JBzX8FNVKu2N9xwy4AOUXhCUiyWAel9IBJ+QX5Ae+42aqS
+7f4PBIoEhwqwkDC+KrAG2d8VojLcJEu8Jb4mK9efW23qP750Hc0pDalAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAA+fM2glUaZxxt7CsCaiPMPLwmMB8GA1UdIwQY
MBaAFHKZzmSg8WJNe7LSlp5cEa26pUhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAt
YzdlYjM0ZTJkY2E2LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAtYzdlYjM0ZTJkY2E2
LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixjLbgnc
ku3yVg6uGFOSzcVg4CtUebffdGY3HspZnriUc1+/KX7jmpgNuAtYjeCbTkw+dvZA
yY6in3pVtY3zT9lD4CMHSrqGTN7q/ycIVsE+Y1KhML+T7vlJymglPhezw6b8buMK
7Buaj7Ve/vdazae3U95JSWM4MpagW6QFxEwTZS1wglaMKk4rwrs+XZ2xLPAFsp7u
Of2NEHFKLagY59vf9njsYPfuQPQqhI8MZhxE8ZADp99Vp0VIDj4KEqIEfJPfxti1
RmRnJqe7v4omDl4sJAllACHzkvtad7256Lknqi75Whm3Qg7HpMuSipMX0WPVxAev
DqAXDZOeHJ5sow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:15 2026 by rpki-client