Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier: HIGTvLqc1I/yPeb+R0eoI1ZphTzKU7aU4Lf8jz8l0gQ=
Subject key identifier: 7B:DE:2A:A8:F4:E4:FC:B7:B6:94:6C:E4:92:A2:8A:3B:A3:95:0C:D0
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial: 01A0FA8FC4DC786030EEB34735B57BAA931C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number: 1A88
Signing time: Fri 02 Oct 2026 03:02:00 +0000
Manifest this update: Fri 02 Oct 2026 03:02:00 +0000
Manifest next update: Sat 03 Oct 2026 03:02:00 +0000
Files and hashes: 1: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: CwL4ut6Mgrh64IHQcbckbWyDDif5eu78TkUu4uS+VEU=)
2: pJjBMVgjU8TU3lF8ocox453j5Jw.roa (hash: GXNU56VqxczP2JIPD5AYPnfq2TU7EH3n/lf3ph9JEPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:8f:c4:dc:78:60:30:ee:b3:47:35:b5:7b:aa:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Validity
Not Before: Oct 2 03:02:00 2026 GMT
Not After : Oct 3 03:02:00 2026 GMT
Subject: CN=7bde2aa8f4e4fcb7b6946ce492a28a3ba3950cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:26:4e:41:02:63:a6:61:69:91:ec:64:30:
f3:2f:ca:4e:0b:cf:35:b7:39:00:1e:b0:aa:ef:9f:
46:27:5b:36:19:d5:01:0d:bb:b8:30:f8:8d:da:7d:
87:6d:85:e8:26:25:41:39:15:1c:8a:16:f6:91:00:
96:9a:87:04:83:5d:a2:8f:95:e9:99:2d:e3:15:25:
f0:88:ea:0a:92:77:4d:f4:b7:3d:74:ab:39:53:d1:
22:24:4b:81:39:68:5a:52:da:aa:d1:b7:23:fb:92:
f7:3b:12:5a:41:53:9f:a4:a5:47:44:87:36:4b:49:
63:b4:f1:03:98:b6:44:2a:64:16:23:34:51:32:42:
a2:07:8c:23:28:00:6c:65:40:be:73:69:e1:c4:87:
26:5c:35:60:4e:f9:75:5e:d8:50:d6:09:93:2f:e6:
28:0b:11:15:b2:d4:ca:d9:4b:5f:a8:20:96:bc:d7:
c1:20:86:7b:da:e4:9b:d3:13:a1:eb:a3:a6:16:20:
4b:60:bf:b2:14:ff:1e:1f:4e:d4:cd:c8:4a:67:8b:
ce:22:e6:86:89:00:84:32:f2:a4:f1:94:90:56:1b:
f8:c6:bd:27:83:f3:23:c1:6b:64:8c:cd:e3:76:cc:
48:86:4b:5f:77:a9:64:85:4e:f8:cc:09:de:f0:d0:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DE:2A:A8:F4:E4:FC:B7:B6:94:6C:E4:92:A2:8A:3B:A3:95:0C:D0
X509v3 Authority Key Identifier:
keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5c:60:f4:5a:e4:80:3d:3d:45:4b:9d:5b:33:ef:a0:33:82:
1f:de:3d:c0:b3:21:4b:4d:c5:a0:7d:59:ee:5e:aa:8b:68:2f:
7a:60:4f:af:d0:8d:df:7a:36:36:2f:56:90:14:92:b1:dc:52:
f2:45:29:f2:de:09:7c:b5:f4:a8:a6:f4:d6:7b:0d:f8:55:43:
b0:cb:24:a7:77:a0:6e:72:9f:6b:83:9c:d6:1e:5b:fa:ce:74:
45:b9:6f:af:7a:65:71:fc:54:7f:dd:15:8a:c8:b7:b2:57:3d:
a5:3f:f7:91:18:20:d6:36:00:bc:38:e1:74:8c:62:51:cd:0b:
a3:b9:fb:07:53:12:15:4d:8e:1e:7d:9c:7e:62:4e:92:cc:88:
e3:d5:42:09:57:f0:5d:98:14:6b:34:80:52:d6:64:3d:d7:e2:
ca:01:51:5d:a8:5c:06:00:6f:9d:73:f3:77:2d:77:b3:02:b6:
30:09:da:e4:5f:d4:cb:fc:4e:28:68:03:23:76:e1:8e:f1:ff:
d1:5c:98:90:02:9d:22:1a:f2:97:c7:c4:5e:93:1a:4d:75:f7:
8e:c7:d0:d6:71:36:28:9c:70:c4:87:99:ea:5b:13:41:a8:ed:
61:65:25:51:4e:66:83:3c:9c:2e:d2:75:51:85:91:57:cc:99:
9b:9a:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:00:53 2026 by rpki-client