Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: otayV8cwMqRwqTYICgZ3a4beF17+WByNeC3lL/6iX/E=
Subject key identifier: BE:9A:5B:D9:D9:FE:3D:0C:58:4C:F0:3F:32:F5:6C:01:CD:81:AE:B2
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 01A0D502784624523E4E253D3AA823988BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 20:01:43 +0000
Manifest this update: Thu 24 Sep 2026 20:01:43 +0000
Manifest next update: Fri 25 Sep 2026 20:01:43 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: VyaRi45gAFWA796xNc1zGXsktsJz2oRQeQTJPiN31yY=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
3: qjFyOVNC7cy2BWp-9aeHp4PinTw.roa (hash: fOUXYgSgvqQL9hg9nKQBJUXVnY8YtOYVKAMT4wMofyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:78:46:24:52:3e:4e:25:3d:3a:a8:23:98:8b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Sep 24 20:01:43 2026 GMT
Not After : Sep 25 20:01:43 2026 GMT
Subject: CN=be9a5bd9d9fe3d0c584cf03f32f56c01cd81aeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:3d:70:37:d4:70:56:9f:78:07:69:91:ed:
78:be:9b:d1:1e:21:01:3f:09:05:2c:f3:0f:cf:0a:
09:e9:b8:b0:2f:27:eb:27:2b:a7:c3:d7:d7:48:3f:
49:1f:b3:d0:0e:11:d8:35:b4:d6:92:69:0a:04:ce:
68:3b:41:68:de:96:64:55:5e:1d:bc:04:61:e4:94:
c7:94:34:f0:c2:69:1b:e4:3a:25:ac:62:77:4f:f3:
87:21:35:07:e3:61:12:d8:c7:02:20:8a:53:06:e9:
92:03:8a:55:9b:80:41:71:27:27:7b:df:b1:37:29:
5c:0d:18:b1:0c:8e:0d:18:c6:32:6c:61:63:5f:89:
d1:9e:76:13:34:ff:4b:db:be:1b:30:a5:e2:d0:76:
7d:9f:81:59:09:3a:17:93:fe:c9:d3:3a:0d:d2:bc:
f6:6f:0e:56:e9:a4:0a:2d:d8:86:95:cd:72:82:da:
59:71:18:8d:20:1d:6f:83:72:b7:51:57:54:75:15:
82:4e:ef:7c:33:13:c5:42:9d:32:47:1c:fb:e6:af:
31:93:a3:44:ee:02:f2:f2:cf:3e:55:c3:65:dc:9c:
4f:81:68:52:ff:07:66:4e:d5:9e:60:48:0b:50:48:
f5:12:83:c0:71:18:43:c6:68:7d:34:e5:48:9d:c5:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:5B:D9:D9:FE:3D:0C:58:4C:F0:3F:32:F5:6C:01:CD:81:AE:B2
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:90:ee:7b:4a:96:30:9f:22:52:be:1b:cc:3c:11:e2:7b:c2:
19:b8:cb:da:e4:ea:1b:9a:ad:2f:a8:1f:5c:49:b9:bc:dd:59:
3e:de:58:43:74:34:cc:54:8e:c2:1e:26:05:95:47:b3:c4:16:
4a:9b:99:9c:c8:58:bf:64:1a:3d:a7:b6:ae:06:ea:cd:0c:3a:
3b:be:a1:80:25:39:58:b3:e2:dd:b5:09:26:6b:12:b0:58:46:
47:4f:42:09:c8:f5:f3:63:38:2b:d6:c9:16:cc:fe:33:71:3d:
84:c6:f6:ca:e7:72:52:44:35:96:32:03:ad:65:86:2e:73:0d:
3e:c2:09:81:d2:50:47:1c:ce:25:47:1c:5d:eb:46:1f:38:06:
90:08:73:76:1c:ef:d2:a8:97:8a:d4:30:8b:7b:f6:d3:af:be:
47:3b:e6:ec:29:83:b1:cc:22:d7:c7:da:99:aa:d7:2b:ba:18:
40:a7:e1:ce:3f:25:bd:71:b6:ad:82:db:cc:7f:41:c8:15:c0:
eb:92:5f:bb:32:c9:62:39:a4:a2:22:92:c8:17:e6:42:24:ce:
5b:bc:38:e6:d1:8e:0c:e6:d9:39:1a:2c:33:4e:e9:7b:98:ba:
c5:59:97:e4:26:f7:37:58:25:d8:cb:21:49:47:f1:1a:18:11:
b3:f1:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:17:03 2026 by rpki-client