Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json)
Hash identifier: 07S1niP/w7ix5hy7lOwAHleEh7si4/ZaGS5n/a7eKEY=
Subject key identifier: 58:CC:02:9E:14:58:67:F1:E5:5B:A4:38:46:69:6F:39:93:87:8D:2C
Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a
Certificate serial: 019D126ADA54E492C3D9FC5C35EB7AFACABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
Manifest number: 014D
Signing time: Sat 21 Mar 2026 22:01:25 +0000
Manifest this update: Sat 21 Mar 2026 22:01:25 +0000
Manifest next update: Sun 22 Mar 2026 22:01:25 +0000
Files and hashes: 1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: 207ZMz17/qZ7a0eITPB7RSLzguD3KJ7ts9Rlos35h3c=)
2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:6a:da:54:e4:92:c3:d9:fc:5c:35:eb:7a:fa:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a
Validity
Not Before: Mar 21 22:01:25 2026 GMT
Not After : Mar 22 22:01:25 2026 GMT
Subject: CN=58cc029e145867f1e55ba43846696f3993878d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:5a:7c:a8:b3:23:d9:02:4d:b2:9a:a6:b5:
7a:95:07:5d:7d:25:bd:04:9d:d9:6c:cf:e8:0e:d7:
65:2f:42:09:ea:86:78:0d:32:ea:0e:52:d9:df:72:
ea:4f:c6:28:f4:2b:33:3d:6f:3d:24:9e:33:39:ab:
dd:df:1c:ef:a3:16:54:18:fc:6d:31:4c:45:e0:cc:
b6:bd:1e:bc:de:09:0b:45:0b:49:e5:82:ef:85:51:
fb:ea:ae:3e:74:1f:20:0a:e0:1e:44:2d:ce:a7:90:
e2:e0:21:a6:e9:ac:79:56:32:a7:3e:17:a9:d2:b1:
71:4f:c2:7a:dd:03:2e:d1:c3:44:63:07:cd:e3:47:
d2:26:7e:85:6a:a3:df:42:9d:da:79:41:15:b7:74:
72:95:63:44:60:1f:68:6c:2b:6e:62:97:e8:9f:30:
49:14:3d:a7:94:d3:86:87:f1:2f:a5:79:4d:32:a2:
1b:9c:e6:e3:44:78:7d:86:e9:87:61:52:fa:1d:c1:
fd:2f:ee:9a:39:71:6e:be:71:e0:25:e0:97:67:58:
c6:54:fc:11:3a:26:9e:eb:23:5b:69:84:31:22:8e:
51:48:7b:08:35:a6:65:a7:f9:c0:ba:7c:88:99:b8:
4d:22:03:59:72:33:8d:b7:7e:84:db:e5:ee:1e:bc:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CC:02:9E:14:58:67:F1:E5:5B:A4:38:46:69:6F:39:93:87:8D:2C
X509v3 Authority Key Identifier:
keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:c3:87:e8:70:9c:4a:a2:b9:50:e4:67:f9:e4:39:4c:0c:
60:7f:ad:99:2e:39:28:f3:92:b7:ba:02:bd:51:14:43:7f:1f:
dc:eb:06:c6:92:67:d2:6f:fb:7d:31:0c:be:4c:a5:ae:75:f5:
aa:55:be:7d:1c:94:d6:37:30:c9:4c:9f:c7:97:d6:88:9b:08:
aa:ab:9e:9e:c8:d8:6b:60:a2:1d:e4:ae:8c:36:f7:7b:b0:28:
17:0b:47:aa:a0:37:99:54:c2:66:5e:71:ea:6c:1f:7b:63:97:
ed:57:89:7a:10:7b:82:51:01:67:60:71:09:58:fb:35:a2:07:
ac:f1:91:68:74:6b:6e:86:73:42:36:9e:82:91:4c:4d:90:82:
1d:af:e3:9b:9e:d4:8e:b9:bf:a4:72:e6:74:e6:10:a0:b4:18:
41:60:a8:2f:72:a2:1d:ff:19:bd:db:6c:1c:b1:9d:aa:3b:ad:
c3:b0:d9:d2:6f:93:7e:d0:41:ce:ba:fc:51:b7:38:75:f6:cb:
2a:c9:3f:6e:b2:f4:bb:77:a8:aa:c1:dc:e4:55:18:20:43:cf:
f8:f2:07:0a:40:e7:1d:41:14:90:15:18:33:43:01:8a:25:6a:
f7:b6:71:43:10:47:44:8b:87:9c:d8:78:06:70:75:ff:84:7d:
6b:48:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 07:18:46 2026 by rpki-client