Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: cdmr4pPyKvqBMTMlyxsGXw9+F5KjpYOOZBnhGSCIp98=
Subject key identifier: 35:A9:FE:86:77:DB:BB:3A:58:2E:C6:8D:CC:0E:85:0A:37:45:6D:0C
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019F8EA2B80D89BA05C9DAE36BD15BE74D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 10D5
Signing time: Thu 23 Jul 2026 11:00:56 +0000
Manifest this update: Thu 23 Jul 2026 11:00:56 +0000
Manifest next update: Fri 24 Jul 2026 11:00:56 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: 8VZL97g/seBH/96f3u6Llv1KQLGjuc/oeVqINd/9iGA=)
2: Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (hash: IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b8:0d:89:ba:05:c9:da:e3:6b:d1:5b:e7:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Jul 23 11:00:56 2026 GMT
Not After : Jul 24 11:00:56 2026 GMT
Subject: CN=35a9fe8677dbbb3a582ec68dcc0e850a37456d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:d9:5d:17:6d:b0:cc:e4:b2:0a:11:4a:05:
61:e0:41:4c:5b:2a:76:f1:8e:41:ed:06:b9:12:6a:
11:dd:e0:4c:b2:31:be:9c:73:91:88:d2:fc:27:e7:
53:4d:2b:49:1e:d8:5a:ec:de:5c:52:23:4a:b5:59:
14:a5:5d:40:97:5f:20:bf:af:0a:6e:2e:85:4c:3d:
af:49:9f:41:35:06:35:fd:af:b9:d7:56:e6:27:b6:
dd:d2:01:64:bb:83:b2:b9:c1:f4:3f:d3:34:b4:96:
c3:9a:3e:dc:d8:c8:ac:26:95:35:c3:2a:be:72:2d:
ff:15:91:14:43:d1:cd:2e:b0:94:1e:9f:a2:f3:7c:
52:e4:78:fc:1e:6b:40:da:2a:0f:aa:3b:6f:1b:c8:
eb:35:34:28:2c:76:83:e6:5f:36:0f:51:8f:9d:9f:
f0:4f:c9:55:02:df:be:94:19:ef:a6:94:21:29:71:
78:04:09:7f:01:df:73:f0:60:c1:6b:5b:27:fa:a9:
eb:f2:4e:75:75:00:59:ae:8e:a1:07:23:8e:4f:9d:
db:04:59:c5:f3:70:b1:36:91:4d:c4:3a:cc:14:cc:
f0:9e:5a:48:2c:54:3a:5d:c1:e6:c5:61:20:e4:5e:
d9:2a:58:44:19:f2:29:af:2f:98:7f:33:4e:f9:96:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A9:FE:86:77:DB:BB:3A:58:2E:C6:8D:CC:0E:85:0A:37:45:6D:0C
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:88:c3:e0:33:a4:14:f3:19:9c:4f:20:22:26:53:60:c6:
5a:f9:51:12:3c:8c:f0:b0:5d:e6:1a:39:9d:30:49:81:ee:9d:
f0:66:52:0f:3b:ce:66:93:81:d8:ae:cf:2d:9a:5d:9f:51:22:
7f:f7:bc:8b:36:57:4d:4c:2f:c5:21:4c:37:62:a7:c1:49:13:
b4:30:99:0d:99:33:47:4c:53:c2:64:2a:9f:08:9b:45:a0:01:
0c:d3:f9:5f:5d:5c:d0:f5:4f:70:0e:9a:e5:c8:11:8c:ec:ee:
58:b8:e8:7c:a8:4c:56:c6:61:fc:19:34:5d:87:a7:52:eb:c8:
f2:6e:14:c8:6d:c8:e7:0c:f6:b3:08:68:55:5a:b3:a7:69:76:
2c:52:7a:46:32:fb:26:ec:ec:16:2b:24:34:0d:a5:4c:1b:d8:
fa:5d:21:36:a3:29:75:ee:e9:93:3c:f7:93:6d:a3:14:ce:0d:
48:f8:d6:cc:51:23:76:f3:2d:e3:d3:d5:5a:45:d8:2d:a4:7b:
a9:9b:c6:6b:6a:2d:e1:3a:d7:31:a1:61:77:eb:22:1d:7c:c7:
76:5a:4a:03:59:62:b0:46:ac:8f:6a:96:16:13:39:ef:7a:7b:
35:96:54:c4:c2:2a:38:e6:8a:db:11:f9:a0:a4:06:4a:29:42:
3f:0c:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:49 2026 by rpki-client