Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
File: CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft (raw, json)
Hash identifier: NwxvNVxAYevdp+Jk0v+b+jNzJe61+KL1qwGiD3uA6FM=
Subject key identifier: DA:8A:5F:A4:24:01:F7:C6:31:E7:5D:D5:E2:DA:B4:30:92:04:9A:0F
Authority key identifier: 0A:91:AA:40:BB:61:DA:84:3D:90:6C:B5:66:23:95:0C:B3:7F:59:B3
Certificate issuer: /CN=0a91aa40bb61da843d906cb56623950cb37f59b3
Certificate serial: 01A040853FACB37453518841B1A3B29C0593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
Manifest number: 0166
Signing time: Thu 27 Aug 2026 00:01:09 +0000
Manifest this update: Thu 27 Aug 2026 00:01:09 +0000
Manifest next update: Fri 28 Aug 2026 00:01:09 +0000
Files and hashes: 1: CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl (hash: QW5FoXW/NVYA9hHO4fBZa9j3v4VwCIk/97cQE7WhHiI=)
2: VYr2J8PU6qvoHNkXxdUk2poOpeg.roa (hash: qyR8POc6dovbUK8HiGSmXu2L7YbxUwe4Rbtm4a/aTuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:3f:ac:b3:74:53:51:88:41:b1:a3:b2:9c:05:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a91aa40bb61da843d906cb56623950cb37f59b3
Validity
Not Before: Aug 27 00:01:09 2026 GMT
Not After : Aug 28 00:01:09 2026 GMT
Subject: CN=da8a5fa42401f7c631e75dd5e2dab43092049a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:b4:90:62:5b:30:87:37:6e:ab:a2:58:ed:
33:c0:1c:fe:01:b8:f3:42:b4:20:c0:e8:26:29:32:
8b:af:86:1c:2b:9f:91:9c:a7:7d:84:a1:8d:36:36:
d0:2d:ee:92:64:22:a2:d0:19:af:fe:55:4c:b4:54:
da:b5:a0:c8:74:5b:10:7b:60:01:a4:bf:9c:3a:a7:
35:58:c5:c0:17:e5:2a:12:f7:fa:f8:b0:06:e8:89:
6b:ad:ef:fa:7d:bc:eb:1d:64:34:e2:97:28:2b:cd:
38:35:e6:f0:4a:dc:8d:ca:09:b0:29:d5:1e:d3:2b:
fa:be:79:b0:80:3c:5d:6e:cc:2b:0c:8c:ff:fa:64:
7f:d7:bc:32:f4:af:59:b4:3b:e0:7a:80:ba:97:df:
1c:50:f3:b8:aa:40:d8:38:2c:3d:dc:af:4e:f1:1f:
24:8a:73:3e:90:07:35:70:7e:f3:c1:af:9a:f1:e2:
e5:3c:5b:8b:1e:c8:4a:85:12:ad:30:21:57:40:3c:
41:4e:2a:6a:68:9e:3c:c9:3b:2f:9b:23:e4:73:65:
c8:dc:cb:83:e7:c8:51:f4:4f:e3:68:a3:b5:84:8a:
d8:e1:fb:ce:c6:d2:7d:4d:5a:0d:26:31:b8:2c:26:
e8:33:af:e2:6a:e2:39:c8:ab:ae:66:e4:38:0c:4f:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:5F:A4:24:01:F7:C6:31:E7:5D:D5:E2:DA:B4:30:92:04:9A:0F
X509v3 Authority Key Identifier:
keyid:0A:91:AA:40:BB:61:DA:84:3D:90:6C:B5:66:23:95:0C:B3:7F:59:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3e48c2-3db7-4269-9cda-8e5938ddad24/1/CpGqQLth2oQ9kGy1ZiOVDLN_WbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d1:f9:f1:d2:b7:5d:ce:b6:7d:14:3c:37:e0:5d:b9:bd:8a:
a3:1e:6e:36:96:e2:3d:37:0d:a7:9d:01:d3:f7:2f:46:68:5a:
d3:df:10:bf:6f:d2:3b:2e:48:8c:a0:61:f2:5e:c2:3c:63:e5:
69:b5:50:41:51:52:f5:24:d3:ad:6b:d1:8b:b1:e6:b3:c7:16:
5b:50:97:59:9b:35:41:fa:0a:b5:57:dd:3e:55:20:7c:43:53:
2c:9a:a4:9b:c8:47:86:f6:03:af:53:55:d6:38:90:c9:85:8d:
3e:d3:65:5c:47:89:f4:04:39:83:c6:70:80:55:8f:9a:60:b5:
f0:25:b8:67:3b:ff:52:4d:86:4b:58:14:83:9a:2f:93:d8:49:
8e:c5:06:16:8e:2d:67:d2:1a:f2:43:18:27:de:fc:94:5d:ff:
fb:74:35:61:8b:d0:0e:c4:cf:de:01:3b:aa:79:db:ff:94:d0:
ac:e5:1f:17:75:43:63:43:64:7a:d0:0c:76:9d:fc:e8:8e:f5:
76:be:a3:35:03:20:39:ba:08:12:9e:0e:01:d0:35:36:4f:ab:
1b:f7:83:08:c6:3d:64:05:43:ee:89:74:08:ba:18:56:43:09:
5e:c5:54:61:a8:ec:db:e7:c8:8f:ab:d7:a4:95:0a:2c:30:cd:
b2:21:8a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAhT+ss3RTUYhBsaOynAWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOTFhYTQwYmI2MWRhODQzZDkwNmNiNTY2MjM5NTBjYjM3
ZjU5YjMwHhcNMjYwODI3MDAwMTA5WhcNMjYwODI4MDAwMTA5WjAzMTEwLwYDVQQD
EyhkYThhNWZhNDI0MDFmN2M2MzFlNzVkZDVlMmRhYjQzMDkyMDQ5YTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquS0kGJbMIc3bquiWO0zwBz+Abjz
QrQgwOgmKTKLr4YcK5+RnKd9hKGNNjbQLe6SZCKi0Bmv/lVMtFTataDIdFsQe2AB
pL+cOqc1WMXAF+UqEvf6+LAG6Ilrre/6fbzrHWQ04pcoK804NebwStyNygmwKdUe
0yv6vnmwgDxdbswrDIz/+mR/17wy9K9ZtDvgeoC6l98cUPO4qkDYOCw93K9O8R8k
inM+kAc1cH7zwa+a8eLlPFuLHshKhRKtMCFXQDxBTipqaJ48yTsvmyPkc2XI3MuD
58hR9E/jaKO1hIrY4fvOxtJ9TVoNJjG4LCboM6/iauI5yKuuZuQ4DE+yjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqKX6QkAffGMedd1eLatDCSBJoPMB8GA1UdIwQY
MBaAFAqRqkC7YdqEPZBstWYjlQyzf1mzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BHcVFMdGgyb1E5a0d5MVppT1ZETE5fV2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZTQ4YzItM2RiNy00MjY5LTljZGEt
OGU1OTM4ZGRhZDI0LzEvQ3BHcVFMdGgyb1E5a0d5MVppT1ZETE5fV2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zZTQ4YzItM2RiNy00MjY5LTljZGEtOGU1OTM4ZGRhZDI0
LzEvQ3BHcVFMdGgyb1E5a0d5MVppT1ZETE5fV2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdH58dK3
Xc62fRQ8N+Bdub2Kox5uNpbiPTcNp50B0/cvRmha098Qv2/SOy5IjKBh8l7CPGPl
abVQQVFS9STTrWvRi7Hms8cWW1CXWZs1QfoKtVfdPlUgfENTLJqkm8hHhvYDr1NV
1jiQyYWNPtNlXEeJ9AQ5g8ZwgFWPmmC18CW4Zzv/Uk2GS1gUg5ovk9hJjsUGFo4t
Z9Ia8kMYJ978lF3/+3Q1YYvQDsTP3gE7qnnb/5TQrOUfF3VDY0NketAMdp386I71
dr6jNQMgOboIEp4OAdA1Nk+rG/eDCMY9ZAVD7ol0CLoYVkMJXsVUYajs2+fIj6vX
pJUKLDDNsiGK9A==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:23:16 2026 by rpki-client