Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
File: CPyf1Et5SoQuKacYi0qMbkcuHVA.mft (raw, json)
Hash identifier: FK2yTYtOtgBRyUTmza5EMaljVKI5oOoiLXy7I07L9HY=
Subject key identifier: 8E:E8:76:F8:59:CD:67:0D:A8:90:23:AB:2F:F5:E6:3D:7D:D1:A7:F1
Authority key identifier: 08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50
Certificate issuer: /CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50
Certificate serial: 01A0404E03B62A4EA35F31EEAB6BB407F63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
Manifest number: 0243
Signing time: Wed 26 Aug 2026 23:00:49 +0000
Manifest this update: Wed 26 Aug 2026 23:00:49 +0000
Manifest next update: Thu 27 Aug 2026 23:00:49 +0000
Files and hashes: 1: 2Cp0m0oboXHVnEkkibc7MZ0iVno.roa (hash: 0rfuIAzK1SMPi5hQRwB+Vwr/Z1zW0RzBLtrMrDa24eI=)
2: CPyf1Et5SoQuKacYi0qMbkcuHVA.crl (hash: Zat8rXEZ1A3oSFu2qQs95g86Xd5nfAK3w2L5N7R6/Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:03:b6:2a:4e:a3:5f:31:ee:ab:6b:b4:07:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50
Validity
Not Before: Aug 26 23:00:49 2026 GMT
Not After : Aug 27 23:00:49 2026 GMT
Subject: CN=8ee876f859cd670da89023ab2ff5e63d7dd1a7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:f9:95:c0:bf:5a:07:d0:13:79:11:66:e0:
15:27:13:6a:20:44:fb:49:84:95:d7:e1:13:3e:bd:
f9:b5:25:88:6c:41:87:3c:fc:6a:5e:7e:45:58:7a:
0c:0a:ef:15:cb:a5:f1:56:53:57:e9:9a:91:2e:4c:
fd:a7:b1:51:44:4d:14:c7:89:c9:88:15:4d:11:88:
2b:08:f0:e1:31:1a:ba:c6:d1:13:1a:22:e5:a6:16:
19:7d:1f:27:71:a9:37:79:3f:30:f7:be:50:01:eb:
e0:26:00:ca:6a:9b:0d:14:30:02:86:5a:a1:3d:55:
6b:07:f4:0e:27:ff:50:c3:35:5d:4f:95:3d:2b:18:
2d:af:27:04:d3:2b:04:43:aa:30:f0:8d:53:ea:bb:
75:ee:dd:39:0c:9e:33:64:36:1d:c0:ed:58:e5:c9:
fa:9c:8b:5c:77:4d:b3:d2:06:87:17:62:e7:3a:f1:
17:56:23:08:21:8d:89:ed:36:bc:a0:ce:c5:3a:13:
77:5b:22:9b:6a:3e:4e:4d:22:2f:0a:bc:7a:60:b8:
69:88:d7:19:e7:88:94:23:bd:c4:4d:2a:53:32:cd:
7d:61:33:cc:37:05:6d:8c:6e:e1:e2:04:77:02:4b:
91:03:df:bf:66:15:10:9c:fc:47:61:f5:65:41:09:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:76:F8:59:CD:67:0D:A8:90:23:AB:2F:F5:E6:3D:7D:D1:A7:F1
X509v3 Authority Key Identifier:
keyid:08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fa:46:2a:65:0a:ab:f4:f2:92:e3:a7:67:54:b9:7c:be:0d:
f8:a7:8b:41:7b:0c:19:18:8b:09:1e:0f:c3:c5:f6:e3:31:54:
17:26:95:1c:ce:e0:3b:52:37:c0:1e:2a:10:9c:b5:4d:7d:c8:
47:98:a1:f9:f5:06:d0:ed:e1:0a:2b:10:25:a2:43:5c:a4:b3:
ab:56:d0:38:c7:89:f3:54:3a:a1:0a:14:2a:ed:6b:d1:1d:39:
88:be:c4:b4:72:7c:99:83:bb:13:ef:6a:13:8e:d4:07:9f:51:
c0:b9:d4:e6:7d:22:2e:c9:d2:73:6b:9c:23:e7:e9:16:3d:b8:
35:0f:8b:72:f9:4e:f3:08:d5:01:9c:c1:15:7f:50:4c:d5:0c:
38:a1:71:21:3e:38:6b:e9:88:0a:df:2c:b2:5c:dd:49:0b:e8:
74:87:0a:b4:73:ba:7c:6d:05:33:40:a5:53:3f:bd:24:57:ef:
ad:9c:f1:11:13:1c:9c:0b:23:20:2c:7e:41:ca:33:64:f6:bd:
aa:15:ff:e6:36:ad:fa:d4:0a:40:41:d6:b3:ac:58:50:26:b4:
f3:e2:92:4e:b9:95:2e:01:5d:62:c7:58:dc:2e:ac:a4:be:4a:
9f:25:99:b6:b5:a4:ad:8f:36:95:11:43:88:f7:42:e9:04:87:
54:7b:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:32 2026 by rpki-client