Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: lH0sua8VCb0gXm9VcN5oXACtLz2LsR7eq/w3K+e876o=
Subject key identifier: 04:84:39:00:F0:1D:55:E9:99:F2:95:5A:03:A6:92:A2:84:39:3A:F9
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019CB5EECC4C40C9DABE8A1BF1BCA9F5C928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0F5B
Signing time: Tue 03 Mar 2026 23:00:51 +0000
Manifest this update: Tue 03 Mar 2026 23:00:51 +0000
Manifest next update: Wed 04 Mar 2026 23:00:51 +0000
Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=)
2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: WnkxHC9y0LSNTeBDu3hGBbkb0wfD1Te+bRWfEruvhLg=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b5:ee:cc:4c:40:c9:da:be:8a:1b:f1:bc:a9:f5:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Mar 3 23:00:51 2026 GMT
Not After : Mar 4 23:00:51 2026 GMT
Subject: CN=04843900f01d55e999f2955a03a692a284393af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:4c:82:b0:c5:5d:2b:36:1a:31:45:45:a2:
0e:ec:fe:e0:24:cd:a2:40:22:fb:47:34:8f:d9:a4:
5b:84:b6:e5:6d:7a:51:e5:d6:32:ac:d3:22:6e:a7:
a8:e4:24:ad:34:5b:cd:3a:96:08:bb:07:03:be:92:
0a:92:c7:29:5e:b3:71:ce:d6:b0:33:ca:8c:9a:da:
be:cd:86:ed:07:39:2c:8d:c5:4f:f7:78:fb:8b:25:
ed:ac:d4:c9:9a:81:7c:7c:f3:0b:d8:99:c0:b7:1d:
5c:73:45:d0:51:2b:e0:89:3d:3b:a1:d2:6a:27:78:
23:ac:c2:41:14:4a:65:c1:89:ef:8f:dc:32:b5:f8:
a1:4d:92:fb:22:85:26:b5:7a:a9:84:32:94:ea:ac:
41:f4:98:0d:48:29:5d:26:ce:2c:b0:86:83:8f:54:
09:b0:84:97:90:93:10:de:38:83:3a:5c:b8:cd:24:
05:99:46:0d:13:19:e2:80:42:1d:ec:3d:b3:fc:7f:
b6:eb:cd:33:0d:23:18:d6:81:14:1a:4c:9a:ff:2b:
16:90:a0:c2:96:48:4e:02:e5:73:e4:dc:94:b1:81:
62:7b:0b:95:95:2c:e9:69:4c:5e:c5:26:fc:0b:a6:
57:da:d3:29:e3:8c:cc:dd:f0:cd:b2:e0:bb:95:0c:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:84:39:00:F0:1D:55:E9:99:F2:95:5A:03:A6:92:A2:84:39:3A:F9
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b2:25:e1:71:ae:74:73:e2:38:6b:d8:72:44:03:9e:5d:23:
2e:a5:e0:03:fe:6f:fe:58:27:68:85:0e:ed:99:e7:99:56:7a:
84:40:e0:80:b1:7f:2e:82:cb:1e:d8:ad:46:66:4d:a0:50:eb:
ce:3c:e6:54:ca:d9:17:43:7a:14:69:90:02:9f:13:ff:df:23:
a7:8e:bc:85:32:fb:85:ed:22:80:2b:86:49:30:1b:75:26:d1:
e1:79:8f:81:3f:ea:08:9c:04:8f:ba:b0:91:98:09:b3:a9:07:
58:42:d4:68:9a:1b:c0:19:2a:2d:36:a0:1b:11:8a:96:7f:b9:
c6:3a:ff:eb:77:f0:94:5c:c6:be:62:f6:7a:0e:6b:64:24:d4:
84:06:4b:f9:78:16:e0:2c:ba:73:ba:b6:aa:38:04:67:03:62:
ca:54:20:9e:49:87:e0:30:2d:b8:2d:e5:f7:26:3c:36:09:77:
71:17:36:1c:c1:8c:52:98:9c:9b:f5:29:25:38:47:8c:c1:4e:
77:17:5f:f7:92:58:27:63:27:48:a1:7c:1e:7f:ff:eb:e6:43:
2d:c3:f4:5d:48:5c:01:83:f9:b7:53:6a:6b:f0:ec:02:4a:e0:
13:c6:21:75:27:e7:46:45:c1:e9:c3:c6:82:8e:5d:cf:20:60:
ff:b9:8f:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy17sxMQMnavoob8byp9ckoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjYwMzAzMjMwMDUxWhcNMjYwMzA0MjMwMDUxWjAzMTEwLwYDVQQD
EygwNDg0MzkwMGYwMWQ1NWU5OTlmMjk1NWEwM2E2OTJhMjg0MzkzYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YBMgrDFXSs2GjFFRaIO7P7gJM2i
QCL7RzSP2aRbhLblbXpR5dYyrNMibqeo5CStNFvNOpYIuwcDvpIKkscpXrNxztaw
M8qMmtq+zYbtBzksjcVP93j7iyXtrNTJmoF8fPML2JnAtx1cc0XQUSvgiT07odJq
J3gjrMJBFEplwYnvj9wytfihTZL7IoUmtXqphDKU6qxB9JgNSCldJs4ssIaDj1QJ
sISXkJMQ3jiDOly4zSQFmUYNExnigEId7D2z/H+2680zDSMY1oEUGkya/ysWkKDC
lkhOAuVz5NyUsYFiewuVlSzpaUxexSb8C6ZX2tMp44zM3fDNsuC7lQxK0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASEOQDwHVXpmfKVWgOmkqKEOTr5MB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArIl4XGu
dHPiOGvYckQDnl0jLqXgA/5v/lgnaIUO7ZnnmVZ6hEDggLF/LoLLHtitRmZNoFDr
zjzmVMrZF0N6FGmQAp8T/98jp468hTL7he0igCuGSTAbdSbR4XmPgT/qCJwEj7qw
kZgJs6kHWELUaJobwBkqLTagGxGKln+5xjr/63fwlFzGvmL2eg5rZCTUhAZL+XgW
4Cy6c7q2qjgEZwNiylQgnkmH4DAtuC3l9yY8Ngl3cRc2HMGMUpicm/UpJThHjMFO
dxdf95JYJ2MnSKF8Hn//6+ZDLcP0XUhcAYP5t1Nqa/DsAkrgE8YhdSfnRkXB6cPG
go5dzyBg/7mPbQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 07:37:35 2026 by rpki-client