Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json)
Hash identifier: yZAxqN3BHPmzRpp8esBcrxrXaotowlaujmpqDp6Qxbw=
Subject key identifier: 49:E1:2E:A5:05:E1:C3:CB:5B:88:38:6F:44:16:50:9A:52:9F:00:E8
Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a
Certificate serial: 019E1CEB3C1421B0327A6652E418A3B7B81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
Manifest number: 01D7
Signing time: Tue 12 May 2026 16:00:38 +0000
Manifest this update: Tue 12 May 2026 16:00:38 +0000
Manifest next update: Wed 13 May 2026 16:00:38 +0000
Files and hashes: 1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: Xza+zAsCG8bqzfK0mxluRXIzLfbjEjtvMGHyqpa+TQI=)
2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:3c:14:21:b0:32:7a:66:52:e4:18:a3:b7:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a
Validity
Not Before: May 12 16:00:38 2026 GMT
Not After : May 13 16:00:38 2026 GMT
Subject: CN=49e12ea505e1c3cb5b88386f4416509a529f00e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:65:57:6c:51:c9:32:17:18:c6:80:20:4a:
85:93:f5:0b:76:31:31:87:bf:a3:ac:7f:fb:2e:01:
8d:d7:fd:c6:e5:cd:ae:71:2a:38:5d:5c:54:ba:d7:
3d:08:c6:a1:37:c3:29:46:94:42:1b:32:f0:4b:96:
99:b7:f3:07:40:37:7c:9f:99:1e:1a:c6:d2:88:ad:
ca:e6:58:4f:0d:61:5f:20:b2:5e:fa:d4:d8:b4:f9:
3b:06:e1:d2:67:4c:95:3c:6a:9b:69:18:a5:31:66:
f1:24:9f:d2:8c:17:c0:fe:6b:b3:ad:ee:08:42:a0:
69:48:d8:1c:33:c2:2b:08:0c:c0:a0:db:fc:50:30:
1a:e5:f7:46:b4:6d:a4:ea:c4:6b:c1:5e:56:86:30:
fd:14:8e:f4:f2:55:09:45:9a:13:bd:d5:82:48:f2:
1b:3c:ad:8e:10:b5:de:f9:22:c0:b4:ce:ea:9d:71:
02:8e:11:16:92:7a:8b:83:42:08:a6:45:aa:5f:a6:
0a:49:2b:68:ad:4b:ee:c1:3b:06:87:82:1e:29:96:
12:fa:64:45:bd:06:41:41:f3:be:7d:60:d8:e4:ba:
51:93:d1:d5:c1:8e:97:a8:15:80:c9:9a:71:81:23:
01:56:dc:fc:3d:84:40:56:c4:ce:43:f1:f9:5a:15:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:2E:A5:05:E1:C3:CB:5B:88:38:6F:44:16:50:9A:52:9F:00:E8
X509v3 Authority Key Identifier:
keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:62:81:1e:eb:4c:a3:0d:95:22:6f:93:5c:90:e4:fa:50:d3:
06:6a:fa:7c:c1:6f:ac:89:27:8f:b2:f3:96:0a:21:85:42:ed:
61:7f:36:d7:2b:12:33:34:bb:db:c3:15:76:75:bc:f5:da:7d:
a1:52:89:28:c7:a6:a1:7f:20:07:ba:2e:a1:8d:fb:2b:6a:d3:
65:c9:52:26:27:43:ae:5d:f6:75:4d:82:e2:7a:45:9f:dc:3b:
6a:de:ca:53:3e:a6:71:27:c9:39:ae:77:aa:2c:c9:d1:70:96:
73:94:fe:6b:a4:18:4f:93:db:63:14:dc:82:1c:b0:e1:45:c7:
dc:d3:bc:e7:72:bc:f2:f9:a5:77:8e:fe:44:81:ea:e9:b6:85:
c6:bb:a4:82:0b:a8:23:87:56:48:b3:bf:76:dc:66:7b:33:5f:
8f:96:ce:be:67:a2:1b:7e:08:ff:dc:69:ce:4e:f3:47:0c:49:
46:94:17:77:50:54:b1:5b:3b:69:8f:2a:85:0b:c9:45:d8:4f:
be:d1:b7:49:d8:41:19:5a:89:fd:04:49:61:c0:29:cc:d3:dd:
b6:d7:91:7f:f7:f9:ae:fc:82:3c:b9:5e:48:a1:66:29:be:18:
07:46:e4:56:a3:19:8e:6b:b1:29:aa:02:01:62:da:9e:1f:9e:
d9:ec:46:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6zwUIbAyemZS5Bijt7gcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjQ2YmZhMjA0NmZiYzk4ZTYyN2Y0MDM0ODMyNzExMjNi
ZWNhMGEwHhcNMjYwNTEyMTYwMDM4WhcNMjYwNTEzMTYwMDM4WjAzMTEwLwYDVQQD
Eyg0OWUxMmVhNTA1ZTFjM2NiNWI4ODM4NmY0NDE2NTA5YTUyOWYwMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdZlV2xRyTIXGMaAIEqFk/ULdjEx
h7+jrH/7LgGN1/3G5c2ucSo4XVxUutc9CMahN8MpRpRCGzLwS5aZt/MHQDd8n5ke
GsbSiK3K5lhPDWFfILJe+tTYtPk7BuHSZ0yVPGqbaRilMWbxJJ/SjBfA/muzre4I
QqBpSNgcM8IrCAzAoNv8UDAa5fdGtG2k6sRrwV5WhjD9FI708lUJRZoTvdWCSPIb
PK2OELXe+SLAtM7qnXECjhEWknqLg0IIpkWqX6YKSStorUvuwTsGh4IeKZYS+mRF
vQZBQfO+fWDY5LpRk9HVwY6XqBWAyZpxgSMBVtz8PYRAVsTOQ/H5WhWxLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnhLqUF4cPLW4g4b0QWUJpSnwDoMB8GA1UdIwQY
MBaAFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDkt
Y2Q1MjU1NzMzMzA0LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDktY2Q1MjU1NzMzMzA0
LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWKBHutM
ow2VIm+TXJDk+lDTBmr6fMFvrIknj7LzlgohhULtYX821ysSMzS728MVdnW89dp9
oVKJKMemoX8gB7ouoY37K2rTZclSJidDrl32dU2C4npFn9w7at7KUz6mcSfJOa53
qizJ0XCWc5T+a6QYT5PbYxTcghyw4UXH3NO853K88vmld47+RIHq6baFxrukgguo
I4dWSLO/dtxmezNfj5bOvmeiG34I/9xpzk7zRwxJRpQXd1BUsVs7aY8qhQvJRdhP
vtG3SdhBGVqJ/QRJYcApzNPdtteRf/f5rvyCPLleSKFmKb4YB0bkVqMZjmuxKaoC
AWLanh+e2exG2Q==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:53 2026 by rpki-client