Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: PDhNxYR/vKrAOgp7IHcjF7Xmze4D72e9I3tdMY1A9wY=
Subject key identifier: E3:60:6E:F5:9F:7D:5B:FA:62:43:13:A5:2F:77:0B:06:C2:9B:4F:84
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019FF8DA82B418F0AF331A82365612260478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 110C
Signing time: Thu 13 Aug 2026 02:01:37 +0000
Manifest this update: Thu 13 Aug 2026 02:01:37 +0000
Manifest next update: Fri 14 Aug 2026 02:01:37 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: ZRXdB9ASYuvXb88i7bx97Iu6kqueRWw4top7xLuX9Lo=)
2: Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (hash: IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:82:b4:18:f0:af:33:1a:82:36:56:12:26:04:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Aug 13 02:01:37 2026 GMT
Not After : Aug 14 02:01:37 2026 GMT
Subject: CN=e3606ef59f7d5bfa624313a52f770b06c29b4f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:8d:a8:87:88:e4:b1:6f:0d:37:28:9e:ee:
b8:ae:56:6c:07:98:47:11:cf:41:2b:7c:ca:37:50:
64:55:09:45:a9:2b:99:66:b2:53:9d:32:f2:aa:fe:
c2:d0:38:8b:17:16:73:b6:cf:53:b2:47:3c:d9:03:
0f:6a:c7:5e:7d:db:79:ed:04:4e:c8:09:a7:92:80:
4a:29:38:a2:eb:12:eb:bb:e8:e5:a9:54:c7:60:8c:
b5:57:7d:46:38:94:67:a2:0c:ef:ab:41:a0:8f:a3:
13:b9:08:39:69:9f:b1:73:0a:70:11:2e:a8:55:9f:
56:85:a6:20:e5:7c:30:49:18:9e:4e:7c:51:58:88:
a4:52:02:51:2c:6a:23:b3:9d:69:b0:a6:0f:0e:17:
a9:52:73:3e:fd:14:b5:19:75:5f:c5:b8:bb:70:bf:
e6:f5:b6:8e:a5:3f:6f:7d:88:c9:a8:e6:12:15:dc:
9e:ee:e1:64:ea:df:93:65:f9:56:a1:b6:61:f5:d9:
70:ed:13:17:ff:74:01:7a:d0:e5:ea:80:fe:ee:19:
78:4e:07:bf:ac:31:cd:a1:16:a6:e6:6e:ac:a1:6f:
e0:a3:5b:5a:32:51:5e:1c:17:a1:b2:47:57:8f:4a:
64:32:14:46:17:4f:40:1c:7a:d5:e0:bb:29:9d:06:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:6E:F5:9F:7D:5B:FA:62:43:13:A5:2F:77:0B:06:C2:9B:4F:84
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:11:f4:bb:b8:6c:09:cc:98:a6:fe:ee:32:4f:b9:7f:bb:19:
85:b7:df:88:f2:92:03:14:21:b3:1d:a5:b7:45:48:06:f8:4b:
37:c8:1c:bb:73:6f:01:78:96:3a:a4:9f:12:9e:68:f9:9a:5a:
e6:9e:f8:d9:88:ec:d5:70:42:cd:4d:69:de:8f:8b:76:2d:48:
2e:b2:57:8f:ed:a2:b1:ce:0f:c9:15:aa:37:a0:ee:6d:9d:78:
49:cf:11:dd:27:50:2e:df:23:e7:64:ad:0e:35:14:47:e6:38:
00:fb:43:b0:ad:f3:0d:74:a9:17:64:09:44:c8:f0:be:08:8a:
2e:e1:9f:5a:4f:c6:b9:1d:e0:a0:50:40:86:88:11:f3:51:8d:
f4:d0:f8:32:aa:36:f1:fb:08:2a:bf:1c:13:0f:c3:ea:75:ad:
2b:be:50:57:ff:a8:64:cd:f0:bc:4a:16:ac:2a:0e:ce:45:de:
28:df:36:e2:ab:55:e7:a4:19:42:5e:06:c1:f2:66:e7:d0:eb:
9e:01:1d:a0:3f:90:8f:bc:49:a2:f2:c2:1b:a0:4a:2d:40:e7:
d4:88:29:87:e3:df:cc:13:cf:b0:64:1a:e9:3a:c0:6a:d3:b9:
e3:c6:1e:ff:a0:ca:18:21:3b:7b:3b:4d:a3:f2:98:0a:0d:f6:
5e:c4:cd:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42oK0GPCvMxqCNlYSJgR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjYwODEzMDIwMTM3WhcNMjYwODE0MDIwMTM3WjAzMTEwLwYDVQQD
EyhlMzYwNmVmNTlmN2Q1YmZhNjI0MzEzYTUyZjc3MGIwNmMyOWI0Zjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5WNqIeI5LFvDTconu64rlZsB5hH
Ec9BK3zKN1BkVQlFqSuZZrJTnTLyqv7C0DiLFxZzts9Tskc82QMPasdefdt57QRO
yAmnkoBKKTii6xLru+jlqVTHYIy1V31GOJRnogzvq0Ggj6MTuQg5aZ+xcwpwES6o
VZ9WhaYg5XwwSRieTnxRWIikUgJRLGojs51psKYPDhepUnM+/RS1GXVfxbi7cL/m
9baOpT9vfYjJqOYSFdye7uFk6t+TZflWobZh9dlw7RMX/3QBetDl6oD+7hl4Tge/
rDHNoRam5m6soW/go1taMlFeHBehskdXj0pkMhRGF09AHHrV4LspnQYvbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONgbvWffVv6YkMTpS93CwbCm0+EMB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRH0u7hs
CcyYpv7uMk+5f7sZhbffiPKSAxQhsx2lt0VIBvhLN8gcu3NvAXiWOqSfEp5o+Zpa
5p742Yjs1XBCzU1p3o+Ldi1ILrJXj+2isc4PyRWqN6DubZ14Sc8R3SdQLt8j52St
DjUUR+Y4APtDsK3zDXSpF2QJRMjwvgiKLuGfWk/GuR3goFBAhogR81GN9ND4Mqo2
8fsIKr8cEw/D6nWtK75QV/+oZM3wvEoWrCoOzkXeKN824qtV56QZQl4GwfJm59Dr
ngEdoD+Qj7xJovLCG6BKLUDn1Igph+PfzBPPsGQa6TrAatO548Ye/6DKGCE7eztN
o/KYCg32XsTNZA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:24 2026 by rpki-client