Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: Fw1nkBGrVu4to7K3ddco1MPtrP9Go/8m57dpFxHeY/M=
Subject key identifier: 35:77:40:FA:02:BC:D1:60:AE:30:8E:6A:13:7A:37:B4:AE:82:9A:8C
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01A148733F86A9A5852C655F91FD1B29A438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 06:01:14 +0000
Manifest this update: Sat 17 Oct 2026 06:01:14 +0000
Manifest next update: Sun 18 Oct 2026 06:01:14 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: Sns16pSBiGZ9e94RBd5LwXpfGn6+WgGOFcLcYXgMQHI=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:73:3f:86:a9:a5:85:2c:65:5f:91:fd:1b:29:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Oct 17 06:01:14 2026 GMT
Not After : Oct 18 06:01:14 2026 GMT
Subject: CN=357740fa02bcd160ae308e6a137a37b4ae829a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:55:5d:b0:c1:07:bf:2b:ce:4e:68:e6:51:
7e:2d:93:0e:61:0e:f2:7f:c9:15:58:41:b5:4d:f4:
90:3b:2e:49:04:51:ba:c0:11:0b:2b:b7:8f:a1:d6:
33:85:46:54:9c:11:a2:dc:6a:00:e9:fb:24:17:7c:
73:90:e5:31:87:9d:53:1e:07:14:d2:11:be:a7:3b:
05:cd:87:ee:47:57:89:1e:d4:f8:b2:1d:f5:c1:58:
a8:49:b6:32:10:f1:9f:66:3e:a4:7f:ca:3d:b1:fe:
f2:a8:29:0e:76:fc:1e:83:6e:4c:a7:af:e0:7e:cb:
1c:89:f0:ee:0a:66:ce:fa:18:ef:21:b2:e9:2c:6c:
c5:62:d4:c9:e8:2f:b0:af:16:3a:35:e4:d2:e3:a3:
6e:0e:36:8d:f7:41:a7:58:af:a7:42:c4:8c:de:58:
35:d2:7a:db:59:b9:02:92:ba:c2:1f:bc:b3:6e:5b:
a4:e4:bf:f9:c9:53:d1:1d:3a:d7:24:69:7d:f2:82:
c2:32:3a:f8:fb:f2:39:c6:e9:21:9f:5c:ad:35:f5:
01:31:87:aa:c9:51:cc:c1:e2:67:0a:74:ff:09:c9:
5a:08:48:d6:f0:c4:c1:75:fc:9c:5a:49:10:b5:51:
fb:f0:24:c8:e4:db:85:ec:ee:25:d9:97:f4:24:f9:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:40:FA:02:BC:D1:60:AE:30:8E:6A:13:7A:37:B4:AE:82:9A:8C
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:ec:38:f8:1c:0f:8b:3b:7b:a8:b3:8d:84:dd:4c:3d:3d:4f:
ec:27:1d:58:67:57:24:bf:cb:5c:4b:4b:10:75:0c:dd:7b:e9:
cf:b0:87:83:4a:09:b8:8d:b3:af:c9:ff:b2:84:46:be:2f:31:
05:21:00:89:53:78:5a:75:08:7c:48:5b:5e:5b:8a:3a:88:1f:
3e:e0:09:77:ef:e6:a6:aa:9a:0a:94:b2:92:af:4a:83:4c:5c:
1d:a5:2f:b7:28:3d:0b:47:58:63:cd:ee:d4:ae:df:09:39:df:
67:dd:e6:c6:3b:a6:d4:fe:f8:4a:81:b5:42:67:4c:78:98:b1:
fb:8d:a8:6e:94:05:c8:37:a8:d1:01:9b:2b:8b:d4:49:1c:48:
75:05:19:46:c3:03:23:8c:c2:99:0b:24:a5:f5:b3:d8:9c:2e:
f2:b3:cf:b7:81:64:6c:09:9d:82:87:48:08:10:da:20:b1:14:
50:60:33:46:9a:2a:75:83:2c:e9:0b:55:f7:a9:6c:e2:b1:fd:
18:3c:52:37:35:a1:03:d3:72:6e:98:38:66:da:b2:1b:a2:c6:
7c:af:20:bf:3c:ae:03:5c:56:65:f9:e5:06:dd:ef:ad:c4:62:
9b:b7:95:84:40:cd:19:1a:9e:35:72:55:6f:50:cb:df:85:3b:
11:41:7e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:12:28 2026 by rpki-client