Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: mXCU8wK05mp2k2+0GyhggiHEmzsYPEd/m4sVrLwMr9Q=
Subject key identifier: 27:C7:BF:09:32:46:5B:EC:70:DF:6C:1A:7D:79:26:BB:45:EB:07:8C
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019D28BB520885CAB70823EE1EE88DEDA92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:57 +0000
Manifest this update: Thu 26 Mar 2026 06:00:57 +0000
Manifest next update: Fri 27 Mar 2026 06:00:57 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: qIxr/xPUFI6wYEJ/BHc6/BkgugIYp9wkeEW8lLhL6/Q=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:52:08:85:ca:b7:08:23:ee:1e:e8:8d:ed:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Mar 26 06:00:57 2026 GMT
Not After : Mar 27 06:00:57 2026 GMT
Subject: CN=27c7bf0932465bec70df6c1a7d7926bb45eb078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:db:e8:cd:ce:db:c3:76:2c:39:11:26:6e:
61:7e:29:7c:9b:1a:cc:9d:6e:ec:c2:41:7c:39:73:
fe:4b:77:b4:ca:73:ed:cc:df:29:4c:68:66:6a:0b:
69:e9:2c:5e:ca:55:68:09:64:08:06:fe:c0:e4:ba:
d4:dd:29:a3:fa:7a:98:6a:17:9e:91:61:ba:71:05:
72:ee:54:1e:12:9b:24:fe:c5:cb:dc:c2:39:86:9d:
66:59:b6:87:03:c2:7f:1c:1f:d5:f3:9f:74:01:a7:
8c:9c:97:dd:24:01:72:db:c3:61:0f:91:e2:32:6f:
ea:aa:f9:cb:46:8a:22:26:df:10:d1:62:f5:fe:64:
e4:ba:f8:2c:16:f0:da:cb:9b:88:2e:1e:47:bf:60:
47:33:06:44:5b:3c:d6:bf:cc:82:54:fc:e0:56:50:
33:1d:3a:77:52:8b:73:17:1e:5c:fa:98:e9:af:7a:
c4:5a:e6:93:ee:fe:14:fe:e7:2e:c2:5f:66:89:57:
6e:2f:80:4f:4d:2e:b7:91:c9:97:5b:89:c9:39:69:
94:58:8d:1b:8b:9f:30:7b:87:75:e2:ba:4a:86:0f:
ad:84:c2:e6:bb:36:44:18:b4:7f:0f:2a:40:87:09:
d4:ff:7b:e2:a3:15:d3:41:d6:49:aa:df:fc:46:6f:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:BF:09:32:46:5B:EC:70:DF:6C:1A:7D:79:26:BB:45:EB:07:8C
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:35:a5:2d:1a:2b:93:53:83:75:f0:90:a3:8f:61:e3:a3:53:
36:8a:83:a2:09:99:99:64:66:d6:7d:06:49:6c:2a:1e:d3:7d:
50:30:f0:1a:e6:eb:b6:76:aa:c1:e6:c3:5a:70:0e:ff:92:e7:
c3:4e:61:cd:15:42:80:20:24:b4:53:df:4a:91:c2:f5:55:d5:
04:b6:7f:f8:f9:26:bc:c4:7b:6b:ef:5a:fb:1d:3e:b4:83:07:
76:04:ac:14:88:f0:ca:6a:97:b0:ff:f8:18:d5:40:f2:fd:6f:
bd:3e:d3:f8:18:a9:58:82:1e:53:ea:9c:c0:6b:ff:88:08:76:
de:63:18:72:a4:97:7a:9a:9f:0e:55:af:a2:53:65:c8:31:2b:
4b:5c:83:31:7e:6b:b3:19:7f:b6:e3:4c:56:0b:6f:2c:aa:f6:
87:1a:24:a1:8f:7a:7a:7f:4f:3f:80:af:b4:19:ec:f5:4d:9f:
10:2f:87:a1:a7:57:79:2a:ba:2b:31:13:b5:0f:39:f4:c5:b9:
35:a7:70:26:74:bc:07:94:4e:f3:50:fb:6a:33:f3:e9:6b:a8:
d9:ae:40:e7:0c:a4:09:3c:8c:8f:fd:96:e7:e8:93:69:6c:52:
c0:17:41:c6:f9:76:c8:8b:e6:58:70:53:db:0d:5f:0d:1a:1a:
72:50:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:47 2026 by rpki-client