Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: OKR7FoDnO/z5jFKMdqa3PHriUVa7yKdDMNFr9wyuZ5E=
Subject key identifier: 0A:EC:5C:4E:3E:67:6A:93:4F:20:46:D8:D9:DF:E0:E6:B6:DF:53:24
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 01A0CE91F44205BF436C53F535DDE9650326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 14:01:06 +0000
Manifest this update: Wed 23 Sep 2026 14:01:06 +0000
Manifest next update: Thu 24 Sep 2026 14:01:06 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: mHqkxLO8vTOROXaOMvzqb9cx+Yq1vkauyatyia0NYAM=)
2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:f4:42:05:bf:43:6c:53:f5:35:dd:e9:65:03:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Sep 23 14:01:06 2026 GMT
Not After : Sep 24 14:01:06 2026 GMT
Subject: CN=0aec5c4e3e676a934f2046d8d9dfe0e6b6df5324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:db:60:b8:5e:02:86:64:01:68:bb:f9:e8:
35:b8:ba:65:c0:71:67:fe:f9:83:f9:5a:45:75:a2:
d4:bc:3b:ad:53:87:94:88:da:86:58:ae:e7:d1:23:
88:6d:83:92:39:23:4a:ce:60:eb:91:3c:2c:48:4c:
b4:77:3e:41:99:a3:c0:89:5a:24:d1:78:b4:7e:76:
c3:f8:45:46:f8:4c:1c:73:52:95:9a:b0:dd:c4:9b:
6b:9e:d5:1e:4a:85:c7:36:2d:da:ab:16:72:0c:7d:
98:47:98:06:f8:d3:4f:37:87:64:85:93:04:82:44:
a0:f6:b9:de:69:c1:1d:1d:50:73:3d:43:8c:9a:96:
a3:65:e1:e2:9f:a3:dd:4d:09:65:6c:b3:23:6b:5a:
2b:c1:ca:f7:ac:55:1f:05:c5:d4:d3:7f:51:d1:01:
93:c1:4b:8d:52:6a:41:70:2e:da:0d:4b:69:89:5a:
68:40:8d:47:55:a4:e9:8d:b9:3e:0e:7f:75:58:fb:
c1:77:b2:a1:b5:ba:0b:47:4a:21:5c:34:4d:40:43:
52:b7:8c:4e:0f:69:3f:57:1a:fc:d2:4d:6c:0d:bd:
86:a4:a3:d5:cd:7d:ea:5a:c9:38:df:b9:db:b1:b7:
26:18:b3:17:6e:3c:b9:d0:75:38:6f:3f:9e:f5:05:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:5C:4E:3E:67:6A:93:4F:20:46:D8:D9:DF:E0:E6:B6:DF:53:24
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b3:1a:f0:a0:f9:ae:a4:2a:d7:f2:79:61:71:fb:d4:ed:8f:
9e:c2:b6:f9:83:36:eb:b6:3f:77:9d:be:3c:b5:65:90:0d:88:
10:f4:c6:77:5c:d3:7a:88:fd:76:5b:08:a5:6a:ed:c2:3e:4e:
e3:9a:9f:47:7b:60:01:45:fb:5e:70:75:ed:a4:30:37:c1:90:
3c:8a:96:cc:a9:0e:18:92:5f:32:60:bd:a5:f8:3d:2c:7a:de:
fd:04:16:65:0d:f3:85:a4:b4:08:f7:49:af:cf:d9:36:43:8c:
39:8d:e7:57:fa:ea:7b:61:79:65:82:25:c2:fa:97:e3:45:e0:
24:c8:47:28:b5:a4:ae:dd:b2:2c:1d:71:cb:cd:54:36:7d:ac:
54:5a:d4:77:bb:7f:01:93:a8:de:31:64:4e:dc:8c:e6:14:50:
c0:5a:1a:cb:7f:07:03:96:9c:c3:46:e3:0d:43:39:c7:5b:67:
2b:2a:a7:5d:a5:01:32:18:a5:e0:c6:6d:29:d9:3c:cd:9d:16:
95:24:54:f6:eb:da:26:71:a9:cf:e3:94:8d:33:9a:aa:e2:12:
fc:f7:d5:95:2b:d6:ff:38:0e:00:21:22:d8:be:b5:3b:16:79:
4c:0e:80:ef:86:f4:a3:56:7d:e9:88:c6:dd:1e:cf:58:ff:f5:
8d:63:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:56:47 2026 by rpki-client