Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: KNBUXFahABIT7gEYsCqXg6nnxtLhdwUiDOlLdB5bhik=
Subject key identifier: D3:2A:18:52:A1:46:E2:52:94:22:B2:12:7A:B5:28:D3:53:40:36:42
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019EFD2731B283F19F7167079F69E0EFC3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 1089
Signing time: Thu 25 Jun 2026 05:01:04 +0000
Manifest this update: Thu 25 Jun 2026 05:01:04 +0000
Manifest next update: Fri 26 Jun 2026 05:01:04 +0000
Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=)
2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: Osro0E3/JLS0EhfPxmDbzZB9oy4qvEQ7Ig8dpic8S+0=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:27:31:b2:83:f1:9f:71:67:07:9f:69:e0:ef:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Jun 25 05:01:04 2026 GMT
Not After : Jun 26 05:01:04 2026 GMT
Subject: CN=d32a1852a146e2529422b2127ab528d353403642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:59:24:65:11:ed:7f:47:7f:3b:2d:1b:e5:
e4:fa:b5:db:24:a3:94:f1:28:3d:95:5f:7a:e0:a7:
28:4e:2e:9e:6f:af:a0:1b:04:e3:f0:34:bf:90:56:
23:6c:cc:18:75:46:c7:21:08:d8:87:99:1a:b8:86:
30:0c:88:3a:e0:01:a0:ea:7e:e4:62:49:21:d4:20:
ad:46:77:f8:9d:81:5b:87:ed:30:d9:b7:84:4e:8c:
2c:e4:09:62:6d:b1:4c:5f:32:d6:39:cf:3a:35:04:
63:19:88:34:34:56:76:55:91:bb:bb:d9:9d:88:9a:
91:c6:95:0d:40:97:c7:93:17:ec:7d:5a:a9:5e:a1:
a6:8a:67:65:51:f5:5b:eb:7e:91:52:05:3e:d4:13:
03:d9:43:a3:43:7c:f6:16:c5:4b:28:b9:96:4b:36:
6a:40:7c:bc:d2:50:aa:75:fc:fe:70:59:40:69:d7:
f0:0c:6b:6d:70:1c:27:57:d2:90:67:00:96:d5:4a:
53:f1:21:b5:cc:e7:99:30:75:d7:42:b6:ee:4a:d5:
80:53:d9:23:50:48:cd:8c:4c:23:41:74:54:56:c6:
8f:d3:6c:bc:8a:0b:d3:cc:af:0e:33:1b:0b:96:39:
6d:fc:c6:a0:9b:e6:4d:b0:e7:9d:31:fa:05:53:76:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2A:18:52:A1:46:E2:52:94:22:B2:12:7A:B5:28:D3:53:40:36:42
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d8:0c:7e:be:c5:48:d5:08:e4:a2:d7:9c:cf:71:48:b4:49:
75:a4:15:65:22:67:04:b4:e4:19:c8:66:db:48:a0:a0:72:66:
f6:19:2e:a6:5f:a1:4c:d7:93:ff:4f:cb:39:d9:cf:20:4d:24:
76:53:a1:7c:68:13:0d:b7:ad:15:b3:62:32:42:7d:ef:d9:9a:
af:d6:95:34:57:59:d9:8f:32:57:99:25:cc:65:5d:35:69:b0:
ac:c3:05:41:ad:ad:ed:07:37:4a:e9:d9:b4:30:5f:45:81:8f:
be:33:9c:fa:8a:91:cd:85:19:a1:fe:3d:40:37:18:1d:8c:e1:
1c:70:8e:46:7d:a2:7c:cb:7d:96:99:eb:5d:09:67:d0:61:e9:
8e:d1:63:6c:4d:cd:b1:7d:ae:97:17:e8:cd:64:6e:4e:26:c1:
ad:24:5a:9a:0d:e9:fd:f2:7c:c6:08:1a:31:6d:0b:7e:fc:7b:
7a:c2:a2:a3:fb:20:65:dd:46:52:80:02:c2:6e:0b:a8:09:85:
ea:41:60:e6:31:3f:1b:c3:04:8e:7f:7e:e9:99:f1:3b:96:59:
01:39:9b:74:c8:b8:ac:0c:5a:28:ef:09:7f:49:f4:ae:87:11:
dc:e8:e3:61:53:87:2c:ef:9c:2e:20:42:d4:be:e2:9a:b5:f3:
78:ac:8d:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ79JzGyg/GfcWcHn2ng78O+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjYwNjI1MDUwMTA0WhcNMjYwNjI2MDUwMTA0WjAzMTEwLwYDVQQD
EyhkMzJhMTg1MmExNDZlMjUyOTQyMmIyMTI3YWI1MjhkMzUzNDAzNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3dZJGUR7X9HfzstG+Xk+rXbJKOU
8Sg9lV964KcoTi6eb6+gGwTj8DS/kFYjbMwYdUbHIQjYh5kauIYwDIg64AGg6n7k
Ykkh1CCtRnf4nYFbh+0w2beETows5AlibbFMXzLWOc86NQRjGYg0NFZ2VZG7u9md
iJqRxpUNQJfHkxfsfVqpXqGmimdlUfVb636RUgU+1BMD2UOjQ3z2FsVLKLmWSzZq
QHy80lCqdfz+cFlAadfwDGttcBwnV9KQZwCW1UpT8SG1zOeZMHXXQrbuStWAU9kj
UEjNjEwjQXRUVsaP02y8igvTzK8OMxsLljlt/Magm+ZNsOedMfoFU3aIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMqGFKhRuJSlCKyEnq1KNNTQDZCMB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItgMfr7F
SNUI5KLXnM9xSLRJdaQVZSJnBLTkGchm20igoHJm9hkupl+hTNeT/0/LOdnPIE0k
dlOhfGgTDbetFbNiMkJ979mar9aVNFdZ2Y8yV5klzGVdNWmwrMMFQa2t7Qc3SunZ
tDBfRYGPvjOc+oqRzYUZof49QDcYHYzhHHCORn2ifMt9lpnrXQln0GHpjtFjbE3N
sX2ulxfozWRuTibBrSRamg3p/fJ8xggaMW0Lfvx7esKio/sgZd1GUoACwm4LqAmF
6kFg5jE/G8MEjn9+6ZnxO5ZZATmbdMi4rAxaKO8Jf0n0rocR3OjjYVOHLO+cLiBC
1L7imrXzeKyNyA==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:06 2026 by rpki-client