Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: cFbGnx1JOsKsaWagx2iNM7S//THvENGJIal7NHH7X90=
Subject key identifier: 89:76:4C:FA:63:28:9D:C5:85:45:A4:C7:8F:FE:2C:9C:CA:2A:4C:F4
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019E1F47991DF3EA3066924E6D979EFC7312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:00:46 +0000
Manifest this update: Wed 13 May 2026 03:00:46 +0000
Manifest next update: Thu 14 May 2026 03:00:46 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: UhEA64uk9uqkDY6NXXmzRF89oHzbpG/HiS3z6Kwmvyo=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:99:1d:f3:ea:30:66:92:4e:6d:97:9e:fc:73:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: May 13 03:00:46 2026 GMT
Not After : May 14 03:00:46 2026 GMT
Subject: CN=89764cfa63289dc58545a4c78ffe2c9cca2a4cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:a7:71:92:ad:11:32:d5:3f:9d:08:2f:eb:
4e:c5:56:8b:e3:64:88:cd:a2:d5:ff:1b:32:71:96:
c3:3c:af:e9:42:92:1e:32:d7:86:a1:d7:b5:d1:87:
a9:1d:51:4a:a0:e4:9b:ea:39:20:da:e9:7b:30:36:
b4:88:ab:a6:de:d2:3c:f0:d9:f1:31:b8:a4:fc:81:
9e:3f:b3:8e:9e:28:ba:0d:1b:80:76:81:2b:d7:65:
d5:d0:6a:bf:56:94:d7:c0:af:6d:3e:e3:9f:39:57:
dd:4f:14:e6:7f:56:d8:c7:10:2a:e8:43:a0:f6:aa:
6c:9f:07:1c:00:05:66:dc:7d:04:91:e6:18:d6:c7:
46:8e:c6:90:b9:73:68:b1:9f:23:75:bd:29:bb:68:
2c:11:ee:ee:c0:9c:2f:43:dd:47:a7:e4:55:8c:bb:
37:35:bc:11:d0:ba:be:39:a3:77:66:66:49:f8:aa:
c3:97:79:cb:b2:e5:98:e1:1c:c9:f1:82:c2:2a:1a:
2c:25:63:5d:6f:02:9c:34:e5:34:80:17:4f:40:bf:
16:23:65:ce:07:e4:49:95:a6:0d:ed:aa:bf:1f:24:
dc:a6:9d:18:c4:9e:60:62:8d:c1:f1:88:e9:ca:41:
10:5f:a2:16:91:21:ad:ad:96:01:66:26:bf:93:f4:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:76:4C:FA:63:28:9D:C5:85:45:A4:C7:8F:FE:2C:9C:CA:2A:4C:F4
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:28:36:23:18:65:d6:7b:d5:42:6b:fb:0d:86:a7:c0:02:e4:
cf:b1:4c:7b:2b:02:93:39:ab:eb:8c:8b:23:c1:58:81:10:64:
fe:19:a9:e2:b2:8d:93:cf:ad:36:df:72:53:ae:04:46:85:42:
d5:a5:44:20:d3:90:db:cf:5b:46:1a:44:5d:5b:fc:94:6f:8a:
90:27:3f:5a:2c:65:54:38:96:47:17:86:03:7f:9b:0f:85:8e:
71:61:e7:8a:95:50:36:6b:42:b0:3b:f9:be:3a:73:ef:fe:41:
ff:6b:11:c5:89:88:25:e2:b2:30:09:e5:5c:c3:b1:1b:df:70:
5a:28:f8:c8:bc:e5:72:32:43:20:90:40:69:c3:88:49:47:a3:
da:e2:b2:3f:02:55:65:a2:60:4c:52:a1:93:53:18:e5:cb:c9:
0b:bf:7d:15:0e:af:75:57:2d:81:c6:d5:6e:62:31:65:4d:e8:
10:c5:dd:c4:d1:e0:ea:11:8f:72:1f:8c:02:11:c1:1e:3d:a9:
17:63:1e:21:9d:ab:42:64:09:ce:98:18:5c:59:c6:01:6b:74:
bb:e5:93:4c:ae:5e:32:4a:38:a7:8e:5a:e5:f5:59:47:db:24:
fc:cb:02:c1:50:72:e1:74:4b:a1:e9:d5:fb:e1:6d:d3:29:d3:
85:a0:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:13:17 2026 by rpki-client