Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: y39/W+JXyNzUzT6pTIeW5CR6YqMCQM7iA3k93DwaNgE=
Subject key identifier: 60:9B:48:76:F4:42:3D:7A:08:10:C7:2D:3D:90:B7:8E:66:7D:8D:03
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019F902327D3A32F198C91839C8971FF1F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 18:00:50 +0000
Manifest this update: Thu 23 Jul 2026 18:00:50 +0000
Manifest next update: Fri 24 Jul 2026 18:00:50 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: Opq1cQM8NfvJB8iEeQ1VGS9m9TkU+8FuYh1vaZCn5UE=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:27:d3:a3:2f:19:8c:91:83:9c:89:71:ff:1f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jul 23 18:00:50 2026 GMT
Not After : Jul 24 18:00:50 2026 GMT
Subject: CN=609b4876f4423d7a0810c72d3d90b78e667d8d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:3e:d2:3e:e8:92:56:dd:7c:c2:9c:7e:44:
6d:b6:88:e9:df:df:67:26:d1:f6:43:9c:79:3c:e6:
6b:c1:61:99:ef:7f:e6:4d:18:99:ae:b0:d8:ac:30:
17:dd:a4:8e:9c:08:00:ae:85:08:41:63:10:3d:64:
7d:7e:f4:99:35:f7:09:b9:de:82:bc:73:a3:47:02:
84:e6:50:91:94:3e:d7:12:fb:4f:de:f4:09:ea:91:
27:6d:9e:a3:e9:28:72:23:59:21:3e:44:36:1e:88:
a4:47:8e:51:62:91:72:61:71:b9:6a:09:03:65:61:
1e:d9:27:ec:5d:e1:58:a0:ce:d4:2d:53:92:44:f8:
a4:68:21:d1:6c:7d:c5:3b:c9:ac:12:db:19:ce:2b:
48:77:fd:a6:ce:f4:a2:60:fa:88:de:49:6e:59:c5:
2a:04:08:44:ba:dd:f2:3e:e1:14:65:0e:61:38:0f:
90:25:85:72:08:0e:36:6b:82:d2:bb:cd:0e:7a:54:
1f:e6:07:2a:0d:78:9f:b5:97:29:09:4f:fa:47:63:
fa:93:be:66:ac:36:5b:2b:f4:cb:ba:3c:5c:af:1c:
12:a6:ed:71:a8:96:ff:d8:6b:dc:35:8b:98:ab:a5:
7d:3e:ed:29:c0:46:43:32:8f:9d:17:90:97:4f:e0:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9B:48:76:F4:42:3D:7A:08:10:C7:2D:3D:90:B7:8E:66:7D:8D:03
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:87:f3:96:5f:70:c0:51:73:ca:d4:fd:88:dc:34:a8:0d:e8:
7b:98:23:ea:0f:08:17:33:a4:02:c2:39:37:53:4c:a3:14:a6:
75:84:71:e6:61:f0:93:cd:16:20:c1:f6:83:54:e2:0e:8e:9a:
e4:b4:3a:7a:a7:6c:d2:df:bf:fe:da:f5:27:ca:b3:82:6f:70:
14:5e:1e:82:b4:4e:ce:26:72:1f:45:17:b7:88:30:7f:15:56:
d4:b9:80:28:12:50:a0:63:bb:b0:44:09:e5:06:30:f4:77:44:
ff:78:97:af:ee:06:0f:1b:1a:00:b9:0b:8b:f5:35:98:1d:e3:
bf:e6:39:ce:91:01:93:90:56:68:22:b1:86:4c:09:0e:d2:1e:
82:63:01:33:78:e4:7b:78:93:92:f9:2e:f0:58:9a:fd:1d:fa:
0f:70:ec:d6:a9:aa:8c:21:aa:34:f5:67:fe:68:45:cd:e1:5c:
be:da:00:b3:56:d8:ed:ca:e7:47:21:13:58:4b:d6:94:b3:76:
6e:82:84:9f:0a:b8:4f:aa:a1:48:b6:4e:bd:69:dd:cd:09:06:
0e:84:86:75:b2:d0:ae:9c:63:e6:da:c8:4f:82:bb:d3:7e:bf:
3f:2c:ce:d5:29:53:0b:af:3d:69:22:47:90:fa:bb:6a:e5:f6:
39:3a:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:32 2026 by rpki-client