Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
File: CPyf1Et5SoQuKacYi0qMbkcuHVA.mft (raw, json)
Hash identifier: 8U0GQvNWPcIyYKArCP/1vnSg07TxpN8vcFXnJaDYMzs=
Subject key identifier: 1B:43:48:9E:22:95:0C:45:01:26:86:58:33:AE:29:44:97:FA:07:8E
Authority key identifier: 08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50
Certificate issuer: /CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50
Certificate serial: 019F927FC00CA6A2A440F3BB01DE7D691B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
Manifest number: 01E9
Signing time: Fri 24 Jul 2026 05:01:13 +0000
Manifest this update: Fri 24 Jul 2026 05:01:13 +0000
Manifest next update: Sat 25 Jul 2026 05:01:13 +0000
Files and hashes: 1: 2Cp0m0oboXHVnEkkibc7MZ0iVno.roa (hash: 0rfuIAzK1SMPi5hQRwB+Vwr/Z1zW0RzBLtrMrDa24eI=)
2: CPyf1Et5SoQuKacYi0qMbkcuHVA.crl (hash: YJwMgGzn3jbRU7PSzMcKpZCOu+SscyrwdW7sCQ1jskk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:c0:0c:a6:a2:a4:40:f3:bb:01:de:7d:69:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50
Validity
Not Before: Jul 24 05:01:13 2026 GMT
Not After : Jul 25 05:01:13 2026 GMT
Subject: CN=1b43489e22950c450126865833ae294497fa078e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:c0:39:cc:32:4a:16:8c:be:e3:42:43:d6:
25:d8:ba:00:08:08:f4:70:86:09:3a:14:1a:1d:91:
52:df:f9:d4:95:9c:9c:a1:c9:ba:95:95:08:87:c3:
09:20:56:ba:cb:e4:b6:03:00:c6:0a:4d:88:23:2f:
c8:f4:47:67:67:15:a8:7b:f2:70:de:6d:46:ac:b7:
68:f2:2f:01:9d:f6:ca:29:74:dc:ad:f5:24:5c:74:
26:2a:c7:32:38:0a:9b:6b:d9:b5:32:e0:d3:cb:16:
01:7a:ba:5d:cc:eb:8d:13:fa:db:fa:9d:9e:5e:89:
c8:16:80:2c:4a:27:80:31:2b:6f:74:04:3e:6a:4e:
40:43:88:48:0f:d8:88:e8:8e:e9:74:1a:04:1a:01:
ae:a8:cb:53:fc:d2:a6:14:26:a6:36:ba:ea:45:f9:
9f:2c:78:0d:62:22:d3:69:91:9e:b9:30:72:75:dc:
78:3a:93:f6:1b:38:68:9e:ff:5f:67:f7:8d:7d:83:
d6:ac:2f:be:9b:06:6e:fb:28:a4:f2:33:1b:d9:29:
b0:96:31:ec:ab:9b:ac:f1:73:b4:31:0a:40:60:df:
59:88:23:95:79:8e:11:c4:27:55:25:1b:ec:c8:c4:
c4:3a:54:0b:f1:25:e7:26:46:8f:55:3e:cb:2b:b9:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:48:9E:22:95:0C:45:01:26:86:58:33:AE:29:44:97:FA:07:8E
X509v3 Authority Key Identifier:
keyid:08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5e:8a:d3:c5:74:ff:7a:df:b8:91:7f:9f:cc:e5:28:b2:03:
db:6e:96:28:37:13:b2:5a:3a:50:5c:a3:48:bd:a7:05:a0:16:
3a:f6:9b:f9:3a:33:07:82:62:73:61:8f:97:33:c8:2e:f2:3b:
63:73:67:37:7e:b3:ad:5e:87:41:6d:3e:cc:d6:6a:d5:d8:ad:
50:54:8e:69:1d:28:0d:bd:53:13:6e:e3:01:3f:70:01:8f:2d:
ca:fd:b4:a4:3f:cb:0b:1f:e4:52:d6:4a:d0:76:de:e9:f7:fc:
e6:50:39:c9:07:42:08:3f:58:22:a5:31:8f:63:7d:89:08:ef:
92:9b:97:78:dc:0a:1d:e9:98:6c:09:42:0f:ff:8e:9e:3d:8e:
58:f4:e9:8b:95:64:f9:25:f7:f5:bb:c4:28:63:07:25:5b:79:
37:48:2c:87:f9:1f:0e:81:91:85:d5:d0:7b:6b:0e:2f:2e:a3:
1d:a6:c0:88:30:c7:6d:de:41:35:6e:d0:89:9d:b8:50:0c:91:
e1:26:22:60:11:e8:c1:87:a4:04:71:b7:52:2b:eb:6e:21:1f:
e5:de:1a:8d:a3:ce:e3:d7:80:98:94:4d:f6:78:b5:4e:eb:b0:
04:ad:e9:43:ba:a8:8d:5c:52:e2:22:4b:71:ab:00:23:bc:ff:
d8:7f:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:55 2026 by rpki-client