Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json)
Hash identifier: w9wWthu6OgO1sdxXwBC3yBmwazcWHZgElctZi6Wox0s=
Subject key identifier: 11:47:B8:EB:18:A8:9C:AA:BF:BC:FE:F8:74:2C:F3:4C:C5:2B:3D:FC
Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a
Certificate serial: 019F91A366C48D7B85E04FDF63CB00E6FE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
Manifest number: 0298
Signing time: Fri 24 Jul 2026 01:00:32 +0000
Manifest this update: Fri 24 Jul 2026 01:00:32 +0000
Manifest next update: Sat 25 Jul 2026 01:00:32 +0000
Files and hashes: 1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: CzY8SfNw8LPS72upgUAQrRnRU3ojq6cFGLl4P1ChQL0=)
2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:66:c4:8d:7b:85:e0:4f:df:63:cb:00:e6:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a
Validity
Not Before: Jul 24 01:00:32 2026 GMT
Not After : Jul 25 01:00:32 2026 GMT
Subject: CN=1147b8eb18a89caabfbcfef8742cf34cc52b3dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:e3:ed:cc:b0:99:e8:e2:65:6c:fc:6f:81:
12:ba:49:ee:c4:72:57:f6:5f:97:20:63:5f:b4:e8:
1e:45:9a:fc:9c:7e:51:c7:47:0f:b4:79:ec:11:2f:
83:0d:a3:18:39:e9:79:d8:b3:30:5a:cb:94:96:44:
59:62:5a:2c:f3:b3:d3:39:12:a7:9a:e7:fe:55:b9:
31:bd:90:26:3f:6c:de:7d:19:e3:65:ee:fe:65:af:
e4:0d:ea:6c:1f:5e:76:eb:16:bb:3e:14:0c:a4:0e:
a2:91:f4:a4:2e:d2:14:a9:7e:c8:c2:7f:55:6c:3f:
ce:5e:64:8f:67:fd:6c:7e:ee:8c:94:52:35:58:8c:
f0:59:96:0b:b1:9e:31:94:30:f8:c0:a7:7e:9c:de:
e6:73:d3:a3:f9:db:7a:0d:94:4f:4e:d9:39:9b:7e:
1a:25:81:af:89:70:b8:74:43:48:f6:b3:c6:61:5a:
b6:0d:98:f9:e0:ed:eb:b0:50:1d:b0:aa:20:50:e5:
24:46:10:49:0d:8b:12:77:d6:15:66:8e:a7:00:13:
64:eb:94:eb:b9:5a:cf:26:81:54:5a:1a:df:9a:61:
04:43:92:28:14:40:62:80:a2:b5:ec:c8:74:37:85:
d2:b2:84:a1:05:65:34:94:8c:64:45:98:42:e2:cf:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:47:B8:EB:18:A8:9C:AA:BF:BC:FE:F8:74:2C:F3:4C:C5:2B:3D:FC
X509v3 Authority Key Identifier:
keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a3:5b:40:e0:b1:ba:2a:48:05:9c:1b:92:bd:34:c8:84:91:
16:a4:cf:be:10:14:a7:ff:c3:fd:5d:d4:92:b9:27:15:b9:a3:
37:01:87:e3:73:aa:b5:bc:06:02:05:3c:5d:61:45:54:51:3d:
98:c5:b5:4f:cd:67:1a:ae:28:62:d0:be:9d:05:d5:61:d0:63:
b7:71:49:7e:05:69:6e:87:d1:37:2b:bb:bc:ed:e4:e9:34:82:
19:2b:a0:12:63:bb:72:8a:17:c7:b0:cc:6a:07:7b:66:c8:6e:
0f:34:eb:c3:7f:6f:76:d0:de:77:6b:57:84:bc:3f:03:72:08:
9b:e5:a6:ed:4c:11:c5:b0:b2:61:3d:a0:7b:0c:06:72:1e:e5:
6e:8f:ef:3d:41:fc:d0:07:61:3a:0c:f4:90:7c:63:4c:7c:d0:
f0:89:c6:25:8d:f9:67:2d:f5:9b:da:c6:a6:b3:ce:96:33:ad:
1b:20:69:46:84:ec:66:e8:ea:46:15:28:cb:72:8e:52:dc:75:
1c:bc:f1:58:06:fd:21:f2:a0:09:ea:a8:4e:24:5d:7a:d3:81:
f5:74:02:47:f3:e0:20:4a:fa:94:fb:80:66:86:fb:4a:4e:dd:
fd:e6:51:3f:f9:27:41:f1:ad:e2:18:c1:34:82:ab:a7:97:92:
49:99:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:14 2026 by rpki-client