Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: qJmV1RQBhuTHM16ChQe92QRVrYnzZL1z02bvEQIJgto=
Subject key identifier: 72:F9:51:61:97:53:0A:13:F2:6F:C3:38:B5:83:6A:74:D2:B7:CA:C1
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019D28165C8699D1CA9E2F93F10CEC0AB2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:47 +0000
Manifest this update: Thu 26 Mar 2026 03:00:47 +0000
Manifest next update: Fri 27 Mar 2026 03:00:47 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: g44sHfyDF/seoDMDs6orTcu+/iiy1RBjTcoWxoZtcBs=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5c:86:99:d1:ca:9e:2f:93:f1:0c:ec:0a:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Mar 26 03:00:47 2026 GMT
Not After : Mar 27 03:00:47 2026 GMT
Subject: CN=72f9516197530a13f26fc338b5836a74d2b7cac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:64:12:2e:38:33:d0:9b:9c:55:85:b5:7a:
06:f1:bd:ab:c1:09:18:ae:cd:c8:70:3a:e5:78:ab:
46:66:3c:e3:ff:d6:cb:ad:18:94:63:e9:8a:7e:c1:
07:84:bf:6f:fc:4f:5d:e8:9b:72:cb:70:98:0c:37:
b5:23:b1:39:02:5e:de:d8:37:d1:7a:95:cc:ac:c5:
8e:1e:bf:24:d0:8a:1d:de:3c:7f:07:c8:a8:c4:d6:
f5:db:f7:8e:f8:60:66:09:83:fa:57:31:01:b9:67:
ae:aa:a6:50:de:c8:20:46:b8:50:06:93:94:0d:8f:
a5:52:4f:26:9b:6e:95:15:d9:04:cc:e1:ce:50:cf:
6e:31:53:85:05:aa:4f:23:62:31:f5:f9:42:c7:51:
29:bd:3f:62:2d:50:28:8f:49:03:ce:95:8f:e9:ab:
99:0a:8d:7c:b6:79:3b:43:01:64:b8:4e:70:c7:b4:
b5:eb:00:2b:51:6c:99:1c:8f:3d:33:8e:ad:89:3c:
7a:c5:b2:d0:30:1b:23:9b:35:eb:54:41:9c:d9:19:
7b:13:ab:dc:22:6d:45:48:55:e9:1d:7c:d2:f5:8d:
87:98:86:bd:73:e6:16:f7:51:66:10:4a:62:61:9f:
54:06:5b:1c:1b:24:e1:6a:04:5d:0b:5e:c5:5c:b0:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:51:61:97:53:0A:13:F2:6F:C3:38:B5:83:6A:74:D2:B7:CA:C1
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f4:b7:65:96:fc:cf:17:7a:a1:16:83:a0:77:12:d0:58:8f:
d1:78:25:26:09:46:59:41:ad:ce:38:2e:fb:6b:c8:74:ff:ff:
c5:70:52:b6:d9:d2:6a:b2:ab:29:cb:7b:7c:aa:bb:e4:97:37:
27:87:4f:5c:23:a6:7c:d9:90:05:69:2f:4b:06:86:6e:6b:e8:
58:a8:81:fc:7d:a4:15:6c:e8:bb:c9:04:ba:69:9c:24:e4:4d:
3f:b9:30:97:85:ca:dc:6b:ec:d8:ab:47:e3:2e:9c:16:e7:a2:
e4:6f:b6:4c:85:09:68:01:a5:f1:3a:14:42:53:d7:c1:c5:88:
6e:a3:c0:8d:4e:a6:43:09:f6:05:16:ca:70:1c:2d:18:d1:bc:
0d:9c:53:20:d1:fe:89:e4:04:7d:ec:b4:66:5d:1f:ac:9b:7e:
bc:ab:bf:f4:32:af:ba:c3:04:ec:33:46:35:d7:ce:ef:3c:fd:
54:81:61:93:98:bd:bf:d8:a3:12:76:dd:23:f3:68:bd:70:da:
2f:a0:ff:e2:2f:98:a6:35:69:4e:c0:e2:d7:c9:3b:c1:31:0e:
3d:5c:df:82:ff:d0:f2:2b:ba:58:ce:76:e5:e7:05:c6:77:c4:
95:2e:3f:fc:94:39:ee:db:7b:be:f3:28:62:4b:20:6d:fc:2c:
d8:eb:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:28 2026 by rpki-client