Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
File: CPyf1Et5SoQuKacYi0qMbkcuHVA.mft (raw, json)
Hash identifier: 0KSKb0nQ1Uuxc7DwmzGTIBNGhQYzIF9Ge3XH8k55ibw=
Subject key identifier: 44:BD:56:95:9A:3F:CC:62:4F:D5:15:5E:BB:74:FC:6D:C0:FE:86:DC
Authority key identifier: 08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50
Certificate issuer: /CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50
Certificate serial: 01A0FF7E64AE8FCAB844342150E31A39D732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
Manifest number: 02A6
Signing time: Sat 03 Oct 2026 02:01:08 +0000
Manifest this update: Sat 03 Oct 2026 02:01:08 +0000
Manifest next update: Sun 04 Oct 2026 02:01:08 +0000
Files and hashes: 1: 2Cp0m0oboXHVnEkkibc7MZ0iVno.roa (hash: 0rfuIAzK1SMPi5hQRwB+Vwr/Z1zW0RzBLtrMrDa24eI=)
2: CPyf1Et5SoQuKacYi0qMbkcuHVA.crl (hash: wurRGzSUmFcAl8WJOlsrHENI/BaLdIql8q/a+TZXrmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:7e:64:ae:8f:ca:b8:44:34:21:50:e3:1a:39:d7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50
Validity
Not Before: Oct 3 02:01:08 2026 GMT
Not After : Oct 4 02:01:08 2026 GMT
Subject: CN=44bd56959a3fcc624fd5155ebb74fc6dc0fe86dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:5a:1d:66:37:c9:df:6a:29:67:1b:c9:f0:
14:df:e7:19:60:a0:95:83:6f:fe:52:97:d6:95:fb:
93:fd:78:d3:f9:34:b1:38:0d:e4:cc:08:a0:f8:a5:
29:b2:79:da:75:f9:a0:4d:e2:b8:5f:a3:ce:c5:64:
99:ab:24:af:a8:4f:70:c9:dc:7f:29:4c:88:b6:78:
47:49:8b:8a:e7:23:b3:e3:44:b0:f7:20:00:34:a2:
03:77:c5:b2:ad:23:f9:c6:1e:fb:2f:57:d2:9a:53:
64:4d:06:82:2f:fe:22:c2:c1:16:95:fe:5c:12:2e:
62:7c:f7:b0:07:d2:b2:3f:99:66:db:1c:c5:ca:d1:
f0:59:16:df:f7:2c:cf:5b:de:31:40:63:79:65:d0:
c2:4d:1e:94:9b:43:32:ac:39:8a:e5:93:c1:69:38:
5b:fe:ee:35:1c:87:7d:88:21:a7:55:6a:e8:08:75:
bf:b4:95:01:9e:9a:35:46:b7:90:94:42:5e:03:5f:
90:6c:02:a5:f0:de:02:7b:84:de:2c:77:59:54:dd:
cf:28:96:e5:17:fc:ba:fd:51:1b:e3:8b:65:48:bc:
e7:ac:84:86:90:21:83:33:34:c0:83:af:92:2c:f3:
13:84:b7:24:e5:69:34:b9:35:8b:cb:18:67:40:10:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BD:56:95:9A:3F:CC:62:4F:D5:15:5E:BB:74:FC:6D:C0:FE:86:DC
X509v3 Authority Key Identifier:
keyid:08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:a4:61:e7:79:a6:12:c3:0d:23:75:4d:bf:ee:0b:79:cd:
0d:80:48:50:ae:da:10:72:5b:e4:c6:b6:0d:f1:58:28:c5:f4:
c4:1d:8e:9f:85:39:bf:ec:5c:fd:5c:9b:93:a9:b7:a8:cc:f3:
c4:0b:9b:2d:d8:5e:11:45:6e:fd:a4:b5:27:af:4c:fd:ae:ff:
4c:fa:2b:b2:28:ac:7b:82:30:ea:6a:ea:70:3d:8d:4f:b3:6d:
89:fd:3d:f0:0c:39:50:eb:dd:8a:1e:1f:6c:a3:ac:4b:2e:d6:
4f:69:2c:d9:db:b3:6f:af:df:81:fb:86:9b:f3:b1:30:00:35:
99:82:94:9f:cb:15:76:fe:b6:14:8d:01:b1:3d:ef:86:3b:b0:
57:1f:e3:f2:b1:a1:e6:94:70:d9:ab:56:26:31:d0:af:69:b2:
54:b2:59:fb:85:48:2d:a4:0a:ae:65:de:89:0c:a0:c5:f8:a9:
9c:09:3a:1d:1c:93:b7:09:69:7d:89:d7:7a:c2:81:07:c6:b8:
fc:55:b8:ac:2a:3b:88:58:8d:71:40:da:0c:8e:86:8b:ce:f3:
f5:25:cb:f0:cb:0a:37:3b:a3:3d:31:13:3e:e9:3b:0f:04:0e:
2a:77:eb:15:61:2d:fd:bb:46:c6:51:82:86:3a:0a:b7:5f:bf:
cc:58:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:09:53 2026 by rpki-client