Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: 3zxwL+ymP8ZqDs5sVDRSDl5V74pDS2Xp+JMb9sqLX50=
Subject key identifier: 2F:0B:67:AB:21:D2:90:78:0E:CF:0B:EB:40:74:FF:22:9F:FF:CA:4F
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 019D99D005F1746BB07E3FEF05E81BFF5D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 05:00:40 +0000
Manifest this update: Fri 17 Apr 2026 05:00:40 +0000
Manifest next update: Sat 18 Apr 2026 05:00:40 +0000
Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: lIb/GAOmrbIJxe0sBCT3E+lp98k/q/DKFE9j2NiY4rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:05:f1:74:6b:b0:7e:3f:ef:05:e8:1b:ff:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Apr 17 05:00:40 2026 GMT
Not After : Apr 18 05:00:40 2026 GMT
Subject: CN=2f0b67ab21d290780ecf0beb4074ff229fffca4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:e0:46:a3:06:80:ec:86:0e:07:6a:61:46:
db:cd:db:45:70:52:95:4c:10:52:a3:1e:ce:bf:02:
81:59:1b:8f:39:97:c0:10:b6:dc:b2:67:8f:d8:2e:
58:a3:38:f9:5f:d4:d4:55:25:ad:5c:ba:8b:28:8b:
5f:39:01:81:50:da:09:43:92:c0:a2:06:81:3e:26:
b0:b2:2b:e4:f1:01:c1:dc:69:ba:29:0c:9b:ac:d9:
eb:ea:6c:7b:13:ce:b9:a9:89:71:b4:67:fd:00:4d:
e8:f2:b0:c8:6d:eb:6b:64:28:8f:6d:08:ad:a2:18:
4d:6b:7e:1c:70:4c:cd:4d:8c:ee:a4:b8:1a:11:e6:
2f:cd:9f:5e:4b:73:d0:42:98:b4:44:5d:fd:42:95:
85:1b:cf:f4:34:2a:1c:dd:94:8d:79:de:1d:8d:e4:
2d:3c:de:eb:93:4f:5b:45:65:bc:8e:02:f5:52:1c:
75:df:cf:f3:4b:28:63:5e:a9:5f:16:4c:59:fd:db:
d7:81:1f:89:f6:a3:43:ab:86:66:ff:15:de:3d:15:
0f:24:be:d5:e0:c9:81:f8:77:e7:46:0a:27:62:93:
ce:db:18:64:02:52:6c:b9:d1:21:1a:6f:64:01:b0:
94:78:ef:80:36:e3:de:31:24:8f:69:84:2c:45:9d:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0B:67:AB:21:D2:90:78:0E:CF:0B:EB:40:74:FF:22:9F:FF:CA:4F
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c6:92:25:bb:ee:20:b7:5b:4f:c4:c0:f5:58:f4:3d:88:be:
12:ed:06:db:f2:0e:9a:ce:56:85:de:fc:d5:bc:3e:e7:79:82:
4d:3f:c0:70:d8:b8:4b:7f:79:32:70:de:fc:69:ee:39:98:3b:
db:dd:e8:ad:88:96:8e:a8:fa:46:47:e5:48:de:e8:44:17:9b:
85:26:60:b8:da:da:97:b6:b3:e2:ff:8f:fa:23:1a:bb:ac:1d:
3a:5c:4e:b1:79:42:5b:e6:63:2b:c3:88:d9:c0:25:6d:71:7b:
eb:09:30:40:4a:1b:ed:4c:e2:78:bf:56:9a:97:c6:86:46:a1:
72:57:81:49:4c:20:d2:88:dc:1b:aa:a2:27:95:14:6d:0f:16:
bd:6c:c3:b2:b2:f5:bd:9b:b0:17:4b:ae:99:bf:7c:46:95:af:
de:39:40:cd:f5:97:34:b3:cb:f2:bf:ae:dd:95:a3:92:52:66:
8f:01:52:6d:77:be:05:cc:ad:03:55:1f:4c:14:e2:41:2f:ce:
d7:a0:e6:6a:be:c8:e1:45:68:68:ff:a9:1b:0f:bf:f5:12:65:
f0:cb:f1:55:06:49:59:da:79:0d:e3:91:7e:0a:d8:8b:cf:28:
4a:cd:1f:8a:c1:dd:e9:01:8f:8f:a9:cc:c0:6d:03:c9:b7:44:
5e:57:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:20 2026 by rpki-client