Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: jdMk8ct3QPDo0C5IMUPAENG+WbmTo+mbPcZ9odJfd1I=
Subject key identifier: 41:30:26:E2:E0:2D:39:3E:0A:68:7A:1B:C2:C0:8F:C8:34:C7:4C:27
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01A0E475A95D8F12532D77BE7295AF8AD139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 1186
Signing time: Sun 27 Sep 2026 20:01:51 +0000
Manifest this update: Sun 27 Sep 2026 20:01:51 +0000
Manifest next update: Mon 28 Sep 2026 20:01:51 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: hWt6prgWy/0Gtbxh0bUgGn1lTmwrMpmc8sIEfLWbFLI=)
2: Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (hash: IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:a9:5d:8f:12:53:2d:77:be:72:95:af:8a:d1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Sep 27 20:01:51 2026 GMT
Not After : Sep 28 20:01:51 2026 GMT
Subject: CN=413026e2e02d393e0a687a1bc2c08fc834c74c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:08:8a:7b:4f:80:f4:16:27:94:16:49:8d:
51:b3:84:70:80:10:71:ba:d1:a5:8c:19:38:dd:f1:
a4:a7:64:14:a5:f9:66:c5:f1:fb:61:56:8f:96:51:
10:91:d6:f7:fc:b6:b7:1f:f6:5f:ea:9a:19:3c:cb:
24:0c:cf:45:c3:e7:a1:6f:88:4d:84:63:46:1d:14:
70:08:b9:62:01:06:3b:e3:40:98:05:e7:04:7d:76:
78:f0:8d:ac:a5:36:dc:dd:f2:6a:0d:a3:e3:81:58:
75:98:49:dc:a7:02:ae:45:32:44:97:51:c4:0f:1a:
4b:73:86:59:ef:c8:39:5c:d9:b1:f7:10:e2:ec:87:
e1:d6:8e:3c:61:71:59:6c:db:68:75:13:25:75:07:
13:38:aa:a3:ae:7f:e7:04:0f:89:ac:72:d4:20:26:
09:b6:dd:9d:07:4b:6b:75:50:80:32:73:70:8f:10:
68:6a:1e:23:63:1f:6e:34:c6:df:f7:bc:38:4e:91:
6b:d1:67:83:76:84:88:6f:e2:87:3e:9d:41:fb:9d:
bd:a3:d0:b1:0b:de:40:ee:15:fa:0e:4b:75:65:33:
83:70:7c:f0:4d:09:3c:f1:bd:2f:4c:a0:04:af:73:
25:1c:ac:47:57:76:c3:ca:5e:1f:21:30:6b:ae:e9:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:30:26:E2:E0:2D:39:3E:0A:68:7A:1B:C2:C0:8F:C8:34:C7:4C:27
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:05:05:64:03:6c:b7:e1:6f:8a:4e:62:b4:e3:cc:06:57:1d:
69:2c:45:55:fc:07:f7:6c:e9:f1:51:e6:18:b7:ca:51:9b:3c:
d8:b8:af:8f:f7:76:a0:8e:ee:f3:34:fa:cc:a5:e7:84:d9:2d:
ad:81:01:e9:a7:6d:03:09:ed:22:c2:0e:57:17:82:0b:4d:6b:
f7:26:11:db:87:93:aa:e7:cd:16:9c:c5:0d:92:50:20:38:dc:
ff:04:88:c0:18:98:25:e6:91:39:bc:dc:5b:d7:3d:bd:00:42:
2c:19:a6:ce:94:18:a8:ad:f7:c6:9f:95:a6:97:68:33:0f:e7:
e4:4f:89:7f:82:62:ae:70:8d:fc:0b:7f:36:9c:fc:ff:01:57:
25:9f:44:a8:c5:f8:cc:06:c9:63:9e:59:69:f3:af:64:b7:86:
b6:5d:f0:29:02:51:99:1d:2e:05:92:03:16:cf:47:ac:6e:19:
45:7a:9d:cc:04:5e:52:0b:e7:bd:42:79:15:df:cc:8e:bf:e1:
81:d8:64:f3:78:db:e1:36:f4:68:86:b5:bb:61:19:b1:aa:1f:
50:72:28:8b:e8:15:3e:db:76:50:d3:27:e8:9b:a3:33:7e:ce:
11:b2:0c:b1:2c:35:d6:b2:cd:51:a3:51:45:d2:84:47:e6:0a:
50:58:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:45:46 2026 by rpki-client