Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: PgT5tJ4IJ3j0ueu5URGq3W3h3e4lBSEAQi9c0geJWw4=
Subject key identifier: D7:0C:5E:20:FB:D3:04:86:30:7F:07:A2:1A:5C:72:1F:4F:A1:EA:E7
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01A0C96BBA3692D6C1E68B6FC724FBA465CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 1178
Signing time: Tue 22 Sep 2026 14:01:15 +0000
Manifest this update: Tue 22 Sep 2026 14:01:15 +0000
Manifest next update: Wed 23 Sep 2026 14:01:15 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: zsOev2nCX2jGVYpdECOKlzeyDLZNF88kAsopM/hzcos=)
2: Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (hash: IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:ba:36:92:d6:c1:e6:8b:6f:c7:24:fb:a4:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Sep 22 14:01:15 2026 GMT
Not After : Sep 23 14:01:15 2026 GMT
Subject: CN=d70c5e20fbd30486307f07a21a5c721f4fa1eae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:43:84:9d:e4:ac:06:e3:a2:2e:3f:00:c5:
ae:33:33:0e:03:fa:db:3e:e3:0b:3e:81:e0:ec:6e:
f8:82:4e:6a:54:5b:ca:90:45:56:94:27:f9:90:77:
4d:22:2b:e6:1a:7a:a9:b7:c8:63:76:df:db:b2:2a:
ef:5a:38:64:c2:02:e5:89:86:fc:30:48:79:4b:d6:
b8:2e:e9:c9:99:9d:f2:60:50:8a:20:7e:7c:10:a2:
5f:74:c1:73:63:fc:a8:2d:34:65:01:6f:0c:52:a9:
dd:0b:d3:e5:10:90:bf:65:6c:cf:0e:92:1f:86:23:
15:d9:e6:8d:92:c8:b4:e1:2b:83:1d:22:0f:3c:93:
b6:51:09:26:6a:8d:08:f6:07:c2:12:85:18:1c:4b:
c8:98:ea:14:d2:dd:09:81:36:4d:35:79:24:0a:38:
d5:93:4b:7c:2a:ad:32:b2:8b:07:f8:dd:d1:a4:cd:
b5:6c:15:df:a5:98:94:bc:ec:b6:f3:c7:79:f3:4a:
5d:3b:88:be:cc:fd:59:66:4f:f1:8d:39:f5:08:0b:
18:99:df:5d:fe:d9:a0:ad:4f:75:c4:11:43:03:10:
23:7f:f1:65:9a:2f:d2:cd:ba:cd:8d:5c:dd:36:c4:
8d:fb:92:35:1a:3c:b9:77:f1:0c:42:58:f7:c6:a3:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0C:5E:20:FB:D3:04:86:30:7F:07:A2:1A:5C:72:1F:4F:A1:EA:E7
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9a:09:1f:b8:f2:02:4f:42:be:71:ae:7a:b5:41:bf:db:1e:
8f:ad:00:ff:dc:66:09:53:ff:a5:3a:9d:2a:bd:6f:96:28:f7:
78:e1:69:6b:10:29:f1:5c:a7:96:38:ea:85:e6:14:52:3f:88:
f7:3d:00:43:4c:b8:8a:73:cb:d1:54:32:8d:79:13:cc:81:90:
25:ac:a2:18:93:4f:40:86:b4:4b:5d:5a:8c:8c:f9:36:96:62:
50:d3:b4:7e:a4:ab:48:20:f3:6a:2e:69:5d:8d:41:53:b2:ed:
82:b7:6c:ad:85:18:1b:23:5b:92:6d:98:13:3a:2d:1d:88:fd:
da:e2:35:14:06:5f:78:56:63:3f:39:8f:cc:e2:56:a4:84:1d:
dd:f1:14:bc:26:e5:ae:57:b2:53:73:eb:52:bc:55:f8:9d:79:
83:32:90:f2:ce:21:13:72:1d:08:b4:01:d6:4e:33:f6:af:09:
a4:8d:54:09:3d:bf:38:6a:f0:92:46:c2:46:6e:c2:8a:18:a4:
38:66:2b:5a:78:17:b7:0d:ea:83:6b:e7:77:84:be:33:b5:39:
03:ed:de:0c:46:06:65:d1:f1:0c:fc:06:45:73:a3:cd:5e:27:
c4:f5:e2:cd:f3:10:1d:f4:51:c3:9e:7d:27:c6:59:54:5d:52:
78:bc:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:01 2026 by rpki-client