Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json)
Hash identifier: kBdTQUzhyTMLRgaLF4BqMCWazYV3vh4g0DBV5CA6JUk=
Subject key identifier: 6C:E0:5B:81:09:68:0E:2A:5D:F5:5D:6A:30:CA:FC:16:DC:CA:34:4A
Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a
Certificate serial: 019D25BAB80B733A85427678857E54D240A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
Manifest number: 0157
Signing time: Wed 25 Mar 2026 16:01:26 +0000
Manifest this update: Wed 25 Mar 2026 16:01:26 +0000
Manifest next update: Thu 26 Mar 2026 16:01:26 +0000
Files and hashes: 1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: +OxFfTumwQ8YsvjUcftquMfsdUnJIXJ8iXYdAYBvM1c=)
2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b8:0b:73:3a:85:42:76:78:85:7e:54:d2:40:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a
Validity
Not Before: Mar 25 16:01:26 2026 GMT
Not After : Mar 26 16:01:26 2026 GMT
Subject: CN=6ce05b8109680e2a5df55d6a30cafc16dcca344a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:55:e1:a1:8f:86:55:f1:e2:47:ea:ea:a6:
e9:e9:d1:c4:a1:e8:14:7f:2a:96:5c:ac:c2:f7:b0:
6b:c5:b6:1b:61:dc:d3:61:12:70:38:d4:85:a5:1f:
f3:da:2e:cd:7b:66:87:7c:88:6b:9d:d9:29:39:ea:
b6:1f:5a:14:3e:1c:80:2f:6b:8d:e2:88:ca:1a:d4:
8d:54:ba:6c:29:bd:ce:0e:a0:bb:84:eb:0e:06:df:
4b:89:7b:cc:27:9d:18:d0:e0:8c:f8:ff:35:3f:fd:
cb:42:26:3c:b8:e6:da:06:1b:43:51:d5:4f:56:bd:
7c:f5:43:87:f3:81:b0:e1:44:28:0b:79:b1:9d:4f:
6a:7d:9c:87:ea:76:17:26:23:19:44:d6:da:1d:36:
44:89:52:30:9f:51:7e:77:69:fe:9c:f8:ee:ae:67:
cf:aa:ea:99:83:d7:9b:c0:75:6f:63:64:6b:3b:0b:
0d:6c:48:d4:55:f0:0d:52:4d:ca:88:73:d9:45:ee:
96:48:d1:10:54:86:72:2c:bf:b4:8f:b0:6e:9f:a8:
02:5b:d4:dc:e1:a3:9e:b7:a3:7c:f6:8c:09:8c:93:
df:06:a9:48:79:3c:0f:4c:58:34:ca:b9:46:b7:19:
11:73:1a:b5:46:bd:74:c3:ac:42:c4:d4:5d:10:a6:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:5B:81:09:68:0E:2A:5D:F5:5D:6A:30:CA:FC:16:DC:CA:34:4A
X509v3 Authority Key Identifier:
keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:65:08:93:ea:ec:16:e5:05:07:fc:bd:1b:ad:a5:6e:24:
fb:a4:9b:7b:45:92:00:cd:f1:e4:47:8c:f9:81:aa:aa:84:a2:
25:a6:80:14:53:86:4c:c1:71:3e:c1:d2:16:2c:05:ec:e0:7e:
49:91:d6:0d:79:7e:c0:cd:b2:aa:67:33:27:82:85:db:9a:71:
d0:6b:ac:9d:b9:26:6d:6c:6c:62:5a:94:cb:4a:7a:9e:86:58:
99:f8:1a:22:da:d3:d7:db:23:fe:07:3e:17:8d:af:55:8d:a5:
4c:02:20:33:9b:a8:7c:3a:2a:52:61:8d:28:98:75:7b:83:74:
e4:94:32:79:ac:c3:4a:aa:6b:f6:5f:c7:21:91:69:ec:63:90:
65:16:58:f0:0c:c7:f6:88:cc:ce:54:42:ae:ee:b7:d0:bf:2a:
84:98:7f:4f:4a:48:44:8d:a6:da:5b:31:5f:aa:0b:99:b4:cb:
28:fe:e0:3a:fe:9b:ba:20:2a:10:46:3e:be:34:19:e1:22:e4:
75:98:bc:c5:68:81:cd:66:4f:ad:b7:0f:08:ff:22:d2:b4:12:
97:01:d7:c2:ca:ae:a6:ea:db:bd:ec:5c:eb:3b:25:fb:a3:2e:
3b:56:48:e3:72:b6:b1:a3:d5:a5:ce:27:1d:60:f0:33:00:55:
98:08:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:38 2026 by rpki-client