Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: A7GsQ/v7W/6ZkXOXxtstLalMuBTxP2YdScJu8gDyi8w=
Subject key identifier: FB:33:D8:87:D8:E0:3B:03:32:E7:32:9D:D5:F7:FF:EA:D2:75:B2:92
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019F1867956DBCDD175CAD90977774F4E89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 12:01:09 +0000
Manifest this update: Tue 30 Jun 2026 12:01:09 +0000
Manifest next update: Wed 01 Jul 2026 12:01:09 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: 79D7VQwerD0Is1TIG0fwG7huB7XwF5lwjoF1ISou79E=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:95:6d:bc:dd:17:5c:ad:90:97:77:74:f4:e8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jun 30 12:01:09 2026 GMT
Not After : Jul 1 12:01:09 2026 GMT
Subject: CN=fb33d887d8e03b0332e7329dd5f7ffead275b292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:e4:a7:b1:19:18:e9:ce:7c:e3:6c:62:91:
1f:f8:40:98:5f:bc:54:d3:15:e9:fe:44:6b:ff:0f:
18:a6:a4:c3:f7:06:12:a0:8b:a0:50:0e:8b:37:54:
0d:92:1b:55:31:d1:07:0a:f3:03:7c:05:d0:d5:d2:
74:a5:d1:20:bc:7e:af:5e:d3:b5:f0:8b:eb:e9:96:
e1:86:f1:87:07:94:62:fa:c2:c2:e6:58:b0:4a:28:
34:d7:4a:28:10:5e:74:24:fd:ea:f7:4c:85:bd:42:
74:63:6a:2e:ac:9d:38:b3:63:bb:b3:fb:3e:f4:8e:
79:c3:89:de:83:34:ad:b4:88:94:00:04:62:01:14:
24:75:74:2c:65:62:0a:56:ca:04:78:d0:3f:07:c4:
53:4b:c4:28:e3:2a:9e:07:44:2f:dd:ac:f9:5f:ef:
cf:96:9d:35:43:ca:f8:8b:05:64:df:21:8e:27:02:
f3:f8:61:dd:25:63:20:3e:36:70:f7:b6:5e:dc:fc:
98:d1:a4:c6:db:46:58:ba:c5:8d:9a:a7:74:7a:b0:
89:b4:4c:03:64:ed:ea:23:b8:d6:48:75:19:16:72:
ec:fd:f4:f8:3a:2c:2a:6c:4f:04:47:c5:f7:35:2b:
b7:60:aa:b0:a5:29:4d:17:45:0e:56:03:a5:eb:1f:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:33:D8:87:D8:E0:3B:03:32:E7:32:9D:D5:F7:FF:EA:D2:75:B2:92
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:26:ae:98:d2:39:77:48:39:6f:64:64:7e:0f:8e:9f:5a:27:
78:21:32:fa:01:10:4b:75:c4:bc:01:ab:16:b7:b0:da:75:f4:
55:3d:45:58:a8:61:a9:35:86:af:16:d3:53:ec:d6:6b:db:e3:
50:89:5f:4a:8a:b9:d1:29:f7:7f:a3:6a:65:c7:cf:37:dd:d0:
d5:53:54:d1:37:ca:be:0d:96:12:24:ba:98:2e:4e:2d:87:ce:
8e:d0:19:e5:79:bb:c2:a0:f4:ff:4f:32:cd:dc:59:2e:5b:5e:
35:b6:3a:4a:c2:8c:b7:51:6d:5f:f3:33:fb:b1:1e:f3:70:1c:
73:63:96:6c:24:d0:ee:48:8e:b4:a8:82:ee:35:83:f6:03:be:
b4:19:06:e9:6e:44:aa:33:d3:fb:77:32:32:32:07:9e:41:a8:
4f:f2:39:c1:97:db:6c:f3:79:a9:3e:09:9a:19:c2:e9:c1:06:
88:da:9d:ad:a3:96:bf:2e:73:49:c3:73:e7:b7:20:f8:a1:87:
93:bd:b8:66:48:59:26:60:95:9c:fd:73:84:8c:0b:08:b4:1f:
0c:6f:0e:7d:a5:7c:9c:25:b3:0d:4f:94:95:34:d3:3b:75:12:
79:9a:56:9f:80:80:c2:4f:3c:f3:32:cd:fb:2f:13:1e:db:d1:
4c:c6:13:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ5VtvN0XXK2Ql3d09OifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0
MzQ0YjMwHhcNMjYwNjMwMTIwMTA5WhcNMjYwNzAxMTIwMTA5WjAzMTEwLwYDVQQD
EyhmYjMzZDg4N2Q4ZTAzYjAzMzJlNzMyOWRkNWY3ZmZlYWQyNzViMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjInkp7EZGOnOfONsYpEf+ECYX7xU
0xXp/kRr/w8YpqTD9wYSoIugUA6LN1QNkhtVMdEHCvMDfAXQ1dJ0pdEgvH6vXtO1
8Ivr6ZbhhvGHB5Ri+sLC5liwSig010ooEF50JP3q90yFvUJ0Y2ourJ04s2O7s/s+
9I55w4negzSttIiUAARiARQkdXQsZWIKVsoEeNA/B8RTS8Qo4yqeB0Qv3az5X+/P
lp01Q8r4iwVk3yGOJwLz+GHdJWMgPjZw97Ze3PyY0aTG20ZYusWNmqd0erCJtEwD
ZO3qI7jWSHUZFnLs/fT4OiwqbE8ER8X3NSu3YKqwpSlNF0UOVgOl6x/MnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsz2IfY4DsDMucyndX3/+rSdbKSMB8GA1UdIwQY
MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt
YzEwMGE5ODZiYzVjLzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj
LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5yaumNI5
d0g5b2Rkfg+On1oneCEy+gEQS3XEvAGrFrew2nX0VT1FWKhhqTWGrxbTU+zWa9vj
UIlfSoq50Sn3f6NqZcfPN93Q1VNU0TfKvg2WEiS6mC5OLYfOjtAZ5Xm7wqD0/08y
zdxZLlteNbY6SsKMt1FtX/Mz+7Ee83Acc2OWbCTQ7kiOtKiC7jWD9gO+tBkG6W5E
qjPT+3cyMjIHnkGoT/I5wZfbbPN5qT4JmhnC6cEGiNqdraOWvy5zScNz57cg+KGH
k724ZkhZJmCVnP1zhIwLCLQfDG8OfaV8nCWzDU+UlTTTO3USeZpWn4CAwk888zLN
+y8THtvRTMYTJw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:39 2026 by rpki-client