Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json)
Hash identifier: N3uJ60eQswWZffhhKOqbRKo+4hIBPTx0mGYc4XMXM98=
Subject key identifier: 90:4F:E1:2E:97:24:8D:95:69:80:7E:F8:18:40:95:9E:E5:56:DA:7E
Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a
Certificate serial: 01A0CA7D5E47CF47F37BB425EDE10C1520F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
Manifest number: 033A
Signing time: Tue 22 Sep 2026 19:00:08 +0000
Manifest this update: Tue 22 Sep 2026 19:00:08 +0000
Manifest next update: Wed 23 Sep 2026 19:00:08 +0000
Files and hashes: 1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: Z0puszXJbWxpxHnkxwmTGrc2alsUV0on3ugM107keNc=)
2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:5e:47:cf:47:f3:7b:b4:25:ed:e1:0c:15:20:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a
Validity
Not Before: Sep 22 19:00:08 2026 GMT
Not After : Sep 23 19:00:08 2026 GMT
Subject: CN=904fe12e97248d9569807ef81840959ee556da7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:3d:99:30:d0:1a:7a:2a:21:fe:fc:95:b5:
3d:a6:17:dc:ec:9e:af:0f:ce:7c:94:96:7b:ea:38:
ae:f4:47:18:1a:87:d8:67:8e:36:cc:3c:0b:b2:2f:
43:5d:0c:07:60:9c:90:08:f5:87:20:2b:8a:a0:f0:
27:9b:70:10:81:3a:2d:61:c3:7b:f6:d1:83:94:a0:
2a:33:a8:85:0c:1b:d3:6e:25:01:d4:73:cd:e0:d7:
09:e9:71:6e:ab:96:74:f1:43:70:01:63:76:4a:8e:
1f:30:7c:a2:4b:e5:3d:78:2b:b7:16:b5:65:b3:99:
cc:3a:95:f2:90:86:32:02:3b:d8:0d:c3:08:fb:de:
37:26:3b:0b:a1:2c:3b:66:eb:a2:94:a5:ff:0d:f4:
ce:3b:bd:c5:12:fb:83:59:02:8e:22:c2:ad:fd:88:
d8:7d:4d:59:96:61:75:4e:59:7a:ce:11:39:8f:38:
da:e2:04:ac:f3:1a:f5:65:df:39:4a:a2:59:b7:47:
d5:9d:8f:9d:89:61:3b:1d:08:37:a6:1e:06:de:6a:
cf:84:56:9f:cd:11:db:0b:c0:f9:25:76:ca:e4:b5:
5a:e5:00:59:f5:c3:64:b7:54:60:fc:35:68:b4:ab:
78:de:eb:4e:05:c2:ca:8b:95:21:b1:73:54:09:93:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:E1:2E:97:24:8D:95:69:80:7E:F8:18:40:95:9E:E5:56:DA:7E
X509v3 Authority Key Identifier:
keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:34:fd:39:23:ee:fb:d1:97:65:b6:e2:44:36:ff:b5:e1:18:
dd:6c:d0:1a:3f:ba:04:85:69:41:fa:7b:f2:ce:6e:49:94:50:
4b:6f:77:e5:2c:bc:c4:d3:12:8d:d0:19:55:56:49:af:b2:81:
49:08:76:bf:a2:d7:30:d6:cc:28:ea:07:31:e5:87:9e:75:d7:
21:26:fb:1f:0e:86:14:d0:ab:d3:89:be:6a:33:e8:75:1a:1f:
5f:8a:c6:b3:f7:b6:b6:fe:19:43:90:f6:60:c4:76:26:6f:70:
42:f2:f5:4c:15:f7:1e:95:87:77:44:06:ed:09:8b:58:96:4a:
f8:2c:81:b7:da:a9:20:30:3e:72:1c:29:73:83:12:49:6f:2f:
1d:7b:c2:1b:79:83:ba:12:36:2e:a9:fe:06:09:d3:a9:99:aa:
9f:35:ec:ca:26:8f:96:7b:89:db:ed:d3:22:ce:18:c3:c1:e0:
52:39:a5:d2:ad:53:cf:3a:03:d1:d2:0b:64:a3:43:b8:71:80:
f6:8b:7d:bd:8f:a6:69:05:e6:de:26:81:69:b3:c7:d8:8c:d5:
49:24:e7:ae:8f:ad:d6:50:cb:68:e6:86:1e:cb:51:b8:36:27:
fb:88:38:d7:04:96:a7:fa:d9:7c:ae:c7:5d:89:44:55:6e:33:
ef:e5:c5:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfV5Hz0fze7Ql7eEMFSD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjQ2YmZhMjA0NmZiYzk4ZTYyN2Y0MDM0ODMyNzExMjNi
ZWNhMGEwHhcNMjYwOTIyMTkwMDA4WhcNMjYwOTIzMTkwMDA4WjAzMTEwLwYDVQQD
Eyg5MDRmZTEyZTk3MjQ4ZDk1Njk4MDdlZjgxODQwOTU5ZWU1NTZkYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt49mTDQGnoqIf78lbU9phfc7J6v
D858lJZ76jiu9EcYGofYZ442zDwLsi9DXQwHYJyQCPWHICuKoPAnm3AQgTotYcN7
9tGDlKAqM6iFDBvTbiUB1HPN4NcJ6XFuq5Z08UNwAWN2So4fMHyiS+U9eCu3FrVl
s5nMOpXykIYyAjvYDcMI+943JjsLoSw7ZuuilKX/DfTOO73FEvuDWQKOIsKt/YjY
fU1ZlmF1Tll6zhE5jzja4gSs8xr1Zd85SqJZt0fVnY+diWE7HQg3ph4G3mrPhFaf
zRHbC8D5JXbK5LVa5QBZ9cNkt1Rg/DVotKt43utOBcLKi5UhsXNUCZODMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBP4S6XJI2VaYB++BhAlZ7lVtp+MB8GA1UdIwQY
MBaAFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDkt
Y2Q1MjU1NzMzMzA0LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDktY2Q1MjU1NzMzMzA0
LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjT9OSPu
+9GXZbbiRDb/teEY3WzQGj+6BIVpQfp78s5uSZRQS2935Sy8xNMSjdAZVVZJr7KB
SQh2v6LXMNbMKOoHMeWHnnXXISb7Hw6GFNCr04m+ajPodRofX4rGs/e2tv4ZQ5D2
YMR2Jm9wQvL1TBX3HpWHd0QG7QmLWJZK+CyBt9qpIDA+chwpc4MSSW8vHXvCG3mD
uhI2Lqn+BgnTqZmqnzXsyiaPlnuJ2+3TIs4Yw8HgUjml0q1TzzoD0dILZKNDuHGA
9ot9vY+maQXm3iaBabPH2IzVSSTnro+t1lDLaOaGHstRuDYn+4g41wSWp/rZfK7H
XYlEVW4z7+XFXw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:26 2026 by rpki-client