
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: 2/2QKVQlZEdck7zCYs99wi/Yz+kJz6VUKhTnS4HCUcY=
Subject key identifier: B0:9C:E5:25:CC:C5:77:A1:29:13:1D:FA:F9:11:C7:B7:58:0D:A9:4B
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 019E1D22E893996CF74ECCFBF9D2A115A872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 17:01:27 +0000
Manifest this update: Tue 12 May 2026 17:01:27 +0000
Manifest next update: Wed 13 May 2026 17:01:27 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: 7Q3NgoqTP4UigQI7HU7/JTmOt3SpzeOlApJOmArgJrU=)
2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:e8:93:99:6c:f7:4e:cc:fb:f9:d2:a1:15:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: May 12 17:01:27 2026 GMT
Not After : May 13 17:01:27 2026 GMT
Subject: CN=b09ce525ccc577a129131dfaf911c7b7580da94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:d7:25:0c:d6:77:45:09:d0:f4:f0:54:d6:
24:c1:31:11:cc:10:09:2c:30:1d:cd:ea:32:81:2c:
71:b4:79:ad:5c:46:69:b8:3b:be:92:ba:74:67:f4:
d4:e5:fc:7b:15:16:50:c1:ca:e5:2a:d7:15:da:41:
fc:5d:1f:16:94:d0:73:dc:2b:93:17:53:9a:1a:51:
58:e7:83:e1:5e:c1:f8:66:d9:39:da:cc:66:8c:98:
a1:71:dc:54:80:75:82:6c:3f:d1:c8:a9:7a:08:4b:
59:e3:31:52:b8:59:7d:14:0a:6c:c5:97:69:aa:b6:
1f:aa:eb:ea:7d:02:c0:a2:94:a3:4c:0a:93:4c:f3:
30:99:43:24:50:03:84:58:3a:0c:6c:5f:00:10:aa:
d7:97:4c:bf:d3:a2:a9:77:9a:30:a9:98:27:be:6c:
a9:9e:3e:95:73:d9:10:13:f4:39:91:36:83:6b:14:
32:03:d9:0e:5e:08:db:e6:6a:d1:a0:b8:77:6e:e5:
f4:f6:8d:84:e6:08:6e:d7:9e:20:45:7e:aa:e9:d7:
d7:41:2c:38:7b:6a:1e:c9:a7:de:d6:f8:fe:b1:d5:
f1:14:5f:7d:a2:b2:74:65:68:d3:01:31:57:fc:cc:
a3:52:10:eb:af:7a:69:6b:d9:fb:ca:67:c2:9d:d9:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:E5:25:CC:C5:77:A1:29:13:1D:FA:F9:11:C7:B7:58:0D:A9:4B
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:54:f6:cb:e0:20:b4:84:fd:85:1e:44:e4:c6:ff:7e:a0:61:
a2:e6:e3:11:4b:74:5f:84:f7:c0:03:c7:e5:5a:61:87:eb:fe:
70:c8:69:d8:c4:17:16:36:ce:31:9d:99:c3:6c:1a:66:72:aa:
73:02:4d:f5:64:70:03:37:48:9c:08:b0:0c:b1:a2:f9:0f:bd:
40:65:8c:5f:bf:16:51:5c:cb:0d:4a:e8:a9:88:4a:40:ff:11:
ef:1c:65:a9:b6:d9:59:58:08:57:47:4d:89:64:17:53:6d:73:
e2:73:9e:cf:86:d3:a5:72:26:9b:5f:ff:56:27:ee:c1:9b:30:
57:7c:7b:e7:32:a6:e4:d5:6b:8c:d7:45:c2:fe:f9:68:49:72:
3d:5e:c5:72:83:44:ec:66:73:50:df:a3:9d:8d:98:3c:b7:7d:
30:ef:44:a3:6c:65:5f:dd:f3:4d:cf:f2:77:42:79:8d:35:79:
a8:9f:31:94:32:0d:e8:ed:62:46:19:1f:1e:03:27:8e:5f:d6:
cc:9f:ef:36:49:16:72:74:a0:76:0f:1e:a8:55:8c:9e:e0:bc:
00:e9:67:c0:25:8d:5d:26:ca:09:df:70:cd:b9:37:df:c6:1c:
77:75:89:5f:c5:7e:33:ed:22:1e:01:1e:99:cc:9e:8d:94:c7:
2c:c2:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:07 2026 by rpki-client