Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: atgdBIOwrBHpVGDh2p+zEiqexxR0IVqOb9rqOV+/tMQ=
Subject key identifier: 65:A2:04:1F:2B:8B:E7:75:00:E1:49:BB:41:B2:47:74:A6:B6:85:5A
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01A0D2A670333F65504DC614BCCC201B8AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 09:01:58 +0000
Manifest this update: Thu 24 Sep 2026 09:01:58 +0000
Manifest next update: Fri 25 Sep 2026 09:01:58 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: SKKtcZC/E73WG4u2bCaN96mmq7M/K+F9/sGWa8xhdV0=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:70:33:3f:65:50:4d:c6:14:bc:cc:20:1b:8a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Sep 24 09:01:58 2026 GMT
Not After : Sep 25 09:01:58 2026 GMT
Subject: CN=65a2041f2b8be77500e149bb41b24774a6b6855a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:01:35:7c:0f:41:4a:72:32:ac:d7:c0:c2:
0a:c4:0a:3c:4c:63:ef:a7:f1:7f:b2:ed:5a:c5:d7:
11:91:ed:91:17:dd:db:ef:c4:48:d3:e8:ab:f1:b4:
25:db:5c:b7:cd:99:6b:8a:0c:ca:b1:70:0a:fc:26:
12:84:3f:bc:14:98:7b:06:5f:bd:af:d7:0f:87:c3:
0b:d4:2f:fd:10:64:16:d5:f8:b5:02:8e:1b:95:db:
ff:85:65:e8:5e:06:7f:bc:e3:98:36:24:b5:6f:ab:
cd:0b:1e:cc:25:f0:b7:7c:4d:36:ff:7d:06:2d:00:
d5:12:7d:f4:5d:f4:43:b7:3f:6a:97:47:f8:fb:c8:
e8:92:b6:8d:f1:29:36:78:5d:f8:8b:9f:2b:01:d2:
d3:8d:ad:44:d4:06:eb:0e:d2:1f:79:21:70:26:8b:
f2:8e:4e:c2:0a:66:6f:c0:6d:c3:28:33:bb:c8:2e:
92:30:34:0d:1f:56:f5:c3:35:43:4d:3c:a1:b8:38:
dd:9d:a0:ca:93:dd:22:96:2f:22:7d:c3:51:d4:bf:
0c:ab:82:29:4c:d4:f6:53:9b:2a:d3:45:23:0f:68:
15:86:47:6c:46:b0:66:14:b8:d4:fe:d6:2b:ea:c8:
05:c6:20:ce:b7:d6:bd:bb:f9:86:85:2d:aa:bf:a5:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:04:1F:2B:8B:E7:75:00:E1:49:BB:41:B2:47:74:A6:B6:85:5A
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:70:d3:05:64:f9:3c:84:6a:e6:22:10:41:62:8b:87:f4:a9:
4e:2f:44:03:59:a9:27:b5:8e:82:55:80:36:92:25:b6:80:18:
ea:7a:00:ff:b6:1e:f6:2a:6f:10:e5:ca:55:30:ef:54:1e:ea:
e1:39:b7:6c:cb:23:80:91:c4:0a:fd:09:55:8b:74:d6:15:9a:
ee:e6:c7:20:e1:49:37:53:b8:01:e1:60:cb:56:a3:d9:8f:b3:
27:0c:e1:47:1c:7f:68:66:33:17:6d:71:c8:23:da:a4:2a:94:
a7:18:2e:ce:1d:2e:81:73:5b:33:e2:70:f8:ca:75:45:98:9b:
98:8a:5f:eb:e0:cf:2e:bd:ba:3a:a7:1c:82:99:f2:81:81:99:
aa:a7:c3:52:28:25:ba:1d:13:92:d3:eb:1a:ee:b1:03:ec:e4:
39:86:e7:73:51:8d:f6:65:f3:91:d7:59:95:5c:0b:89:71:60:
da:40:2c:26:2b:06:0d:7f:96:23:25:a2:5d:1d:80:ad:7a:28:
d6:35:9e:59:88:b8:a3:e3:63:9c:4f:d2:05:a5:72:91:e3:d1:
63:aa:4d:20:d0:d8:48:23:88:32:ad:08:97:37:b8:14:87:c4:
50:85:5c:84:55:47:df:e7:7d:cd:ee:07:3d:02:1f:2a:e4:92:
3c:65:ca:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpnAzP2VQTcYUvMwgG4rxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0
MzQ0YjMwHhcNMjYwOTI0MDkwMTU4WhcNMjYwOTI1MDkwMTU4WjAzMTEwLwYDVQQD
Eyg2NWEyMDQxZjJiOGJlNzc1MDBlMTQ5YmI0MWIyNDc3NGE2YjY4NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorwBNXwPQUpyMqzXwMIKxAo8TGPv
p/F/su1axdcRke2RF93b78RI0+ir8bQl21y3zZlrigzKsXAK/CYShD+8FJh7Bl+9
r9cPh8ML1C/9EGQW1fi1Ao4bldv/hWXoXgZ/vOOYNiS1b6vNCx7MJfC3fE02/30G
LQDVEn30XfRDtz9ql0f4+8jokraN8Sk2eF34i58rAdLTja1E1AbrDtIfeSFwJovy
jk7CCmZvwG3DKDO7yC6SMDQNH1b1wzVDTTyhuDjdnaDKk90ili8ifcNR1L8Mq4Ip
TNT2U5sq00UjD2gVhkdsRrBmFLjU/tYr6sgFxiDOt9a9u/mGhS2qv6W8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWiBB8ri+d1AOFJu0GyR3SmtoVaMB8GA1UdIwQY
MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt
YzEwMGE5ODZiYzVjLzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj
LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3DTBWT5
PIRq5iIQQWKLh/SpTi9EA1mpJ7WOglWANpIltoAY6noA/7Ye9ipvEOXKVTDvVB7q
4Tm3bMsjgJHECv0JVYt01hWa7ubHIOFJN1O4AeFgy1aj2Y+zJwzhRxx/aGYzF21x
yCPapCqUpxguzh0ugXNbM+Jw+Mp1RZibmIpf6+DPLr26OqccgpnygYGZqqfDUigl
uh0TktPrGu6xA+zkOYbnc1GN9mXzkddZlVwLiXFg2kAsJisGDX+WIyWiXR2ArXoo
1jWeWYi4o+NjnE/SBaVykePRY6pNINDYSCOIMq0Ilze4FIfEUIVchFVH3+d9ze4H
PQIfKuSSPGXKhw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:23:59 2026 by rpki-client