Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: rm+aLzrojr4SS1VsfHcfHc6J34oTnjaZfufu4sbZxGM=
Subject key identifier: 00:80:BE:40:DC:FC:08:B7:70:41:69:A6:B9:14:D0:27:84:79:E7:2D
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019D3375F69A793A2BFA4A278D69B843D980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0F9C
Signing time: Sat 28 Mar 2026 08:01:01 +0000
Manifest this update: Sat 28 Mar 2026 08:01:01 +0000
Manifest next update: Sun 29 Mar 2026 08:01:01 +0000
Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=)
2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: aM3CZZCwdTrfgpi9hPbCVFLX7NY/7S7QilhA6CoJcmc=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:f6:9a:79:3a:2b:fa:4a:27:8d:69:b8:43:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Mar 28 08:01:01 2026 GMT
Not After : Mar 29 08:01:01 2026 GMT
Subject: CN=0080be40dcfc08b7704169a6b914d0278479e72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:ea:6a:42:d2:7e:4a:ad:53:3b:45:c1:82:
c1:a5:11:b9:55:fc:9a:5f:2b:2e:0f:ba:da:cc:cb:
1a:76:44:91:97:1e:1c:a0:24:ed:e6:1a:47:9c:89:
06:60:59:9f:d0:bb:4d:3d:00:be:51:35:18:91:6a:
c8:00:53:54:e4:5b:a2:e3:b0:21:0c:5c:fc:c6:6a:
34:c6:d2:2d:2b:3e:a0:65:4a:ac:41:38:26:fd:13:
0a:cb:7a:b4:87:94:23:ac:65:44:50:54:e2:3a:2e:
e4:6a:d4:b8:dc:12:9b:89:11:13:b1:ec:4c:cf:23:
d0:cb:01:8e:df:ca:7e:7f:a0:36:97:bd:df:3b:40:
50:26:fd:ba:f6:bb:17:60:e1:5a:27:b4:7d:1b:c8:
13:b4:79:54:0b:ed:ae:66:45:1b:46:fc:db:66:39:
01:8c:ee:2d:8c:59:f7:c7:5e:82:18:b9:e5:b4:71:
73:d3:d8:83:70:8a:60:14:97:da:55:8c:cb:11:73:
97:96:81:cb:d1:68:4e:fa:bd:69:7c:a6:33:c5:2a:
0f:fe:ae:3a:8c:78:eb:a6:1a:70:cf:da:4f:c3:ad:
63:31:5b:5e:bb:19:29:a3:70:6a:07:04:65:ed:90:
75:69:15:ae:fc:e5:e0:74:30:87:85:d2:0d:a3:df:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:80:BE:40:DC:FC:08:B7:70:41:69:A6:B9:14:D0:27:84:79:E7:2D
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e0:8a:0b:de:5a:89:98:5a:fd:14:8e:79:05:e2:d7:3b:25:
46:ea:68:cc:c9:e3:0c:4c:ca:a0:6d:86:ee:20:0e:7e:53:59:
82:e1:aa:c9:4a:a9:e5:7a:5d:01:bd:2a:0c:dc:11:b8:1f:1c:
45:45:f0:e8:5a:4b:ae:e3:23:c0:c0:4d:28:a4:17:f0:bf:e5:
7d:80:5b:41:e0:f3:b6:d0:58:54:f3:ac:53:57:aa:b9:d1:31:
ee:76:3e:37:74:4c:82:25:df:e9:aa:93:3a:cc:ad:4a:65:ae:
a6:41:8c:b8:d9:a2:40:b9:44:76:36:3e:c8:e8:15:90:ad:b4:
d7:12:dc:c5:41:08:db:a7:7a:e4:74:59:a9:77:58:86:2a:4f:
ce:8c:f5:ac:dc:36:1f:b5:a1:e2:a8:47:ff:00:68:f5:d1:7e:
43:a9:a3:13:96:a5:e2:7f:29:47:11:72:d9:50:af:22:61:1c:
ed:7a:ac:a0:89:c5:4a:b4:78:e3:ee:1e:fa:e9:93:0e:ca:12:
6d:0b:b1:d3:67:2a:99:7d:91:a2:dc:20:79:68:b9:ca:9e:c8:
3c:3f:6c:79:5d:b1:41:9b:63:a7:1c:5d:cf:86:7e:00:79:ac:
c4:c3:c3:9d:0c:26:db:d9:90:52:28:45:5b:ec:a7:30:bb:e4:
34:2b:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:26 2026 by rpki-client