Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: 5DuY9rUniAPpHDeSenB39kf/f23406Pi1OKqT5/98MQ=
Subject key identifier: 86:E7:41:73:8E:40:4D:DC:5E:2F:00:E8:0D:EE:D9:3D:75:26:CC:1F
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019DDD67B36FA75203252C17A565021053D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0FF4
Signing time: Thu 30 Apr 2026 08:00:54 +0000
Manifest this update: Thu 30 Apr 2026 08:00:54 +0000
Manifest next update: Fri 01 May 2026 08:00:54 +0000
Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=)
2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: k2P8STobDq8uRlRUCBPVG7i8ZT/RRukp/knXGrq3dTQ=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:67:b3:6f:a7:52:03:25:2c:17:a5:65:02:10:53:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Apr 30 08:00:54 2026 GMT
Not After : May 1 08:00:54 2026 GMT
Subject: CN=86e741738e404ddc5e2f00e80deed93d7526cc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:da:0d:68:66:ed:6d:5f:54:2b:b1:4d:f7:
c1:da:ca:fc:50:57:08:5b:87:b2:06:7c:7d:de:3c:
1c:e4:3d:23:d9:b9:8b:85:58:a6:07:f2:91:bd:04:
63:06:a7:8e:fc:3b:49:31:9c:e9:ed:34:3a:ea:a7:
3d:1e:66:4d:e7:f3:b5:02:a5:1d:0a:56:30:f7:b4:
a8:15:fa:d1:cd:a6:3a:ca:46:74:60:a4:be:7a:fd:
35:11:70:db:d8:cc:6c:8c:76:77:06:80:f5:ae:93:
ab:9b:34:74:10:60:9c:51:0c:ce:32:52:2c:ed:45:
bf:2e:82:b7:6d:ea:a3:c7:f0:83:12:85:da:aa:0e:
4a:55:37:97:9a:96:3f:41:24:d1:d6:6f:6b:9c:a3:
7e:f8:35:64:ac:eb:28:53:96:a2:63:ef:45:e9:8d:
38:2d:36:04:da:e2:76:35:68:77:7f:a9:5e:be:ae:
60:37:09:fa:b0:1d:d0:d2:d1:0d:92:d4:4f:27:d8:
01:87:ba:71:65:0c:3a:31:2d:c8:06:31:3a:12:58:
e4:e2:23:b0:44:98:51:2e:07:5b:90:2e:ae:26:5c:
3d:32:15:b6:72:06:f2:9b:33:9d:b3:4e:d8:fc:de:
1e:50:73:b4:10:5c:22:a7:7f:a1:f7:df:cd:d2:db:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:41:73:8E:40:4D:DC:5E:2F:00:E8:0D:EE:D9:3D:75:26:CC:1F
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6d:e8:f9:6b:1a:8c:9d:c7:8c:95:9a:93:98:1b:f4:e2:e2:
5e:46:3c:82:ac:d7:d2:7e:21:6f:77:1a:95:2b:33:08:62:1f:
21:46:5d:cf:a5:c3:b2:09:4d:49:48:9f:84:46:4e:b8:22:f9:
be:9c:9d:2a:28:64:4c:28:91:e9:65:62:43:41:81:f2:7b:7e:
88:9f:db:ce:2f:06:e2:81:0e:86:e6:93:74:50:e5:ce:7b:56:
c5:50:63:43:35:69:e9:71:9a:7c:8d:61:7c:44:cb:65:40:fc:
ff:47:5d:0d:32:f0:67:4d:5e:13:97:aa:98:86:91:62:a6:58:
33:49:58:73:db:18:03:8f:82:1b:e9:3d:10:59:4a:a9:4a:42:
63:6b:53:9c:de:61:72:ae:63:ac:46:71:a2:d0:55:b2:9c:5c:
2c:3f:4d:3d:6d:86:88:39:59:e8:bb:91:51:05:09:9b:c5:b4:
2e:b8:a5:55:4a:5f:96:52:43:0a:01:6b:87:27:be:1c:ea:6e:
77:38:da:c6:df:28:17:a0:13:8e:0c:46:a8:4c:7b:5a:d9:08:
34:13:28:6b:1e:c0:1f:33:9c:3c:68:e5:da:a2:bd:e2:9e:83:
84:5b:29:0a:35:b6:4f:10:27:30:eb:c0:37:ff:21:db:08:22:
64:6b:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 14:07:35 2026 by rpki-client