Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: H2moUga/tvVc0bpeX5cE2yAZ4ens6rpvDP3tZckqZuw=
Subject key identifier: DB:32:97:CA:CD:F8:B1:82:AD:72:FE:1D:E8:53:C3:15:D7:AA:7F:AD
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01A00213A134E8B439417222D82B6406A1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:00:35 +0000
Manifest this update: Fri 14 Aug 2026 21:00:35 +0000
Manifest next update: Sat 15 Aug 2026 21:00:35 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: 2TGICadjSSrD5Sw5sS3khKOQOitOx5Lz6k1XJf8R83Q=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:a1:34:e8:b4:39:41:72:22:d8:2b:64:06:a1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Aug 14 21:00:35 2026 GMT
Not After : Aug 15 21:00:35 2026 GMT
Subject: CN=db3297cacdf8b182ad72fe1de853c315d7aa7fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:7d:46:81:b8:ab:77:b7:4e:3a:9d:c1:ff:
15:96:3e:ff:ce:2e:07:85:b4:17:2c:73:73:8d:b4:
aa:96:4c:b1:94:e2:26:1a:7f:d0:89:4e:22:4b:6e:
cf:c7:d1:e8:90:1e:26:da:a1:84:29:0b:3d:b7:ad:
4d:6e:9f:63:d8:07:06:ab:d7:7a:21:05:1e:ef:c4:
4e:9e:cb:ed:03:93:ca:7a:a2:66:cd:96:8c:06:6e:
bb:59:44:42:4b:c6:db:7b:1e:74:58:fc:ce:30:5b:
3e:03:8a:b1:ca:eb:e3:86:4e:90:a0:8b:c2:c1:09:
02:65:c3:63:3d:4e:f1:59:cb:50:2a:e1:0e:59:2e:
2d:fd:f5:c6:19:20:f3:48:64:40:5f:ae:39:4a:5f:
a2:a2:bd:0d:10:d8:88:54:87:6f:61:83:a2:22:f0:
22:fe:60:3e:ac:b8:b2:15:66:c9:35:58:ad:78:03:
d1:50:d8:08:84:4d:86:9c:e3:b6:e3:e1:b7:bc:fa:
c5:d4:fe:ea:3a:40:a6:c6:1b:c2:d0:46:29:68:66:
3f:c0:38:e2:19:b1:52:a0:14:5e:a8:04:5b:87:e4:
b0:da:9f:7f:d0:93:0e:ea:2e:3a:be:05:ec:5a:56:
09:7b:e5:3d:bd:d8:3d:d1:ec:92:38:d1:e8:c5:df:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:32:97:CA:CD:F8:B1:82:AD:72:FE:1D:E8:53:C3:15:D7:AA:7F:AD
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:69:16:b7:73:90:f2:57:40:fd:3f:f2:86:40:52:4e:cb:ef:
c3:55:b9:7f:c7:f7:7f:41:35:14:27:dd:94:b6:c7:8e:3b:85:
67:68:b9:3d:75:2e:db:5d:16:62:6b:d3:57:3e:86:5c:aa:37:
90:bc:ac:57:9d:d1:fd:95:97:33:bd:de:fd:b3:bf:2c:82:47:
68:fd:6f:57:46:72:42:d2:00:70:73:d1:30:14:3e:48:a0:8a:
62:36:11:e6:b5:22:bd:3a:b9:c1:1a:8a:a7:dc:d5:54:ea:1a:
9c:92:2b:6f:4a:ac:0b:97:eb:ad:e3:d2:13:ac:6b:27:7d:89:
26:fc:69:59:7c:6f:b0:8c:d2:74:8d:4f:56:ed:ac:8b:a4:46:
86:b7:49:94:e2:d9:64:e1:cc:17:64:6b:e3:45:ca:da:62:99:
3e:f3:42:fd:fa:fc:75:5b:e5:8a:51:ab:83:4f:33:2d:46:e2:
54:f4:63:81:61:4d:80:26:5c:61:15:54:d8:6c:cf:fd:b8:9a:
47:4e:90:92:ea:a5:b6:50:54:e4:0d:2c:4a:82:a5:34:bd:25:
53:00:0e:fe:fc:86:36:14:72:46:bf:10:0d:1e:3c:28:e7:f8:
16:56:e0:1d:fa:c7:1c:b8:02:fa:99:c8:f7:6f:8f:b9:4c:c5:
c4:30:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:31:13 2026 by rpki-client