Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: vIWuU1IexpEIjIENkblONcC/hk38IvxW7mxYOyzGHlc=
Subject key identifier: D0:A7:0C:A9:7F:95:6A:F1:D6:20:B8:03:D0:D9:DA:68:19:BD:59:99
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019E30A9A5D1E51CED2DC253393D8559717B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 12:01:24 +0000
Manifest this update: Sat 16 May 2026 12:01:24 +0000
Manifest next update: Sun 17 May 2026 12:01:24 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: 7iqITqGXT/e0Knj27xzcAYWa90JiSUTj66qdWqkF97c=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:a5:d1:e5:1c:ed:2d:c2:53:39:3d:85:59:71:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: May 16 12:01:24 2026 GMT
Not After : May 17 12:01:24 2026 GMT
Subject: CN=d0a70ca97f956af1d620b803d0d9da6819bd5999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:f5:12:c9:c0:01:43:5e:6e:b1:87:87:a6:
8f:b2:b0:92:9c:ea:46:c3:a8:a9:53:04:5a:6c:62:
8d:e9:a1:22:e5:8d:f7:8b:c2:8e:60:e7:eb:79:5f:
ef:82:8e:db:d8:f9:67:3f:c1:26:11:24:50:fd:44:
83:a9:fd:98:ba:e0:ac:7c:61:e0:a4:b0:09:11:46:
4b:50:fb:d4:b3:03:f5:81:b1:99:8f:58:9a:ed:c9:
42:4a:9d:a7:26:b1:7a:7d:16:a1:ed:d4:72:fe:38:
c5:9a:8a:8c:9d:2a:e7:41:3d:0b:60:35:16:8b:ca:
48:92:c9:1d:c8:78:40:6d:24:77:35:2f:36:a0:42:
1d:d2:1b:6f:93:c7:db:04:ea:8d:55:52:64:43:16:
8b:9b:30:a5:e0:4f:6d:74:7c:55:71:03:b3:f0:46:
27:9b:9d:98:03:db:6b:74:13:f4:f7:fa:e2:9a:76:
7b:ea:33:b4:3b:3c:05:9b:a7:e3:f9:62:07:ec:8e:
a9:d4:60:65:9c:94:c9:bd:bc:fd:39:7e:44:a9:2a:
ef:92:e8:f5:5e:33:9a:42:3e:76:c8:af:1c:23:b9:
dc:2a:1e:23:86:55:e4:bd:73:8c:70:0f:ee:fb:37:
c9:c5:33:e2:a0:e8:ef:63:c4:34:27:91:5b:de:52:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A7:0C:A9:7F:95:6A:F1:D6:20:B8:03:D0:D9:DA:68:19:BD:59:99
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fc:71:14:67:88:54:01:90:9a:15:e1:92:84:ba:2f:d0:ba:
20:e7:8e:b4:dd:db:1e:9d:60:33:f5:21:e8:d7:6c:72:86:80:
3b:96:6e:1e:ee:92:61:48:01:79:9e:d9:9d:7e:2a:c3:b4:77:
bd:fe:94:8f:9d:75:fd:48:b3:66:6e:7d:65:30:3f:01:33:61:
44:85:6a:d3:52:f0:00:bb:23:57:81:ea:ba:db:87:4a:8a:98:
05:3d:eb:2f:fb:0c:27:eb:80:de:71:5e:7b:1e:de:1f:f3:6f:
08:fd:d9:ca:74:dc:92:18:21:70:33:95:b4:34:11:a0:e2:28:
32:2c:9b:5a:0b:fe:68:b4:b9:0a:4c:fc:97:6f:ef:8d:85:9f:
19:63:5f:b7:e5:3c:d3:fd:81:b8:4b:c4:a8:6c:7a:0a:d1:2c:
83:86:d7:c9:b5:4a:e9:de:30:dd:19:f1:b6:b1:16:0d:3c:0a:
7c:07:b4:73:9f:9e:28:48:94:bf:6f:96:81:10:60:4b:43:08:
c4:e5:51:ae:cf:d3:7f:76:b0:1d:71:7b:44:39:c3:45:b2:61:
9e:af:61:6d:83:67:1b:2f:86:34:b8:1a:0f:4b:df:cd:d9:45:
8a:2b:c5:3b:18:76:cd:c0:56:5c:27:ef:51:45:6d:56:bd:29:
ac:86:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:22 2026 by rpki-client