Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: vw5gQngmP53QC2px1fXaJnFZhIFoasI73j8iQntU1Sg=
Subject key identifier: 16:1A:CF:F4:EC:20:1F:46:A7:F5:C9:42:73:2A:11:98:F0:D1:31:70
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019F190CAB24FF13408AB9361E09D09192EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:28 +0000
Manifest this update: Tue 30 Jun 2026 15:01:28 +0000
Manifest next update: Wed 01 Jul 2026 15:01:28 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: qYqRXaLWDQ+ovPLC2B/Rad3N0p5itmI5M6YjYSkkzME=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:ab:24:ff:13:40:8a:b9:36:1e:09:d0:91:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jun 30 15:01:28 2026 GMT
Not After : Jul 1 15:01:28 2026 GMT
Subject: CN=161acff4ec201f46a7f5c942732a1198f0d13170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:40:9b:de:8b:fc:a1:46:8e:80:81:6e:dd:
aa:03:10:7f:73:17:14:9e:cf:5c:2b:52:4e:73:ef:
80:00:23:b4:08:0b:9c:40:65:0d:33:ff:48:32:fd:
27:74:0e:3a:8a:6a:62:ca:ed:54:57:37:8d:0b:19:
51:91:ac:16:4e:65:55:ae:f7:6c:fc:62:a3:30:15:
e5:c3:16:25:62:5b:8e:12:8c:56:f2:30:c2:c4:42:
77:26:b4:c8:8b:d0:4c:32:e7:cc:b0:dc:75:09:b8:
71:70:e4:66:a2:ad:bf:a0:2d:83:3e:3f:14:b2:e7:
58:08:32:c9:00:d0:32:7a:56:48:05:0a:be:fc:bc:
10:17:54:68:20:9e:94:9a:27:ab:34:85:dc:0f:52:
db:62:d7:89:87:7f:8f:0c:27:d3:84:cb:9d:3c:3a:
77:4c:14:8a:19:d3:c4:30:30:20:20:ba:08:d0:31:
1f:4f:51:c0:ef:8c:8d:90:02:d3:3a:9d:63:5b:b8:
44:c7:c7:79:b9:88:89:65:ce:90:19:9a:0b:71:d9:
1f:37:c4:77:53:fb:fb:d9:18:2b:1b:ec:44:9b:1b:
95:24:58:c6:af:ca:60:7f:63:8f:13:e7:3d:06:31:
a0:5d:68:52:39:79:e4:df:ee:fb:2a:3b:58:86:25:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1A:CF:F4:EC:20:1F:46:A7:F5:C9:42:73:2A:11:98:F0:D1:31:70
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dc:0b:2f:e2:2e:64:4b:5c:c5:ae:33:0d:83:b8:70:5b:69:
c7:3a:26:c9:4b:da:49:a5:74:73:44:a4:8f:66:e2:92:dd:0d:
84:dd:07:91:0d:4f:b7:f7:a5:fc:b2:df:88:8b:16:7f:74:a2:
d2:31:ef:ef:40:d1:e6:bf:b2:8f:83:07:2d:52:f6:18:c4:70:
f8:5a:d2:03:a2:59:1e:34:1c:d1:f2:9b:21:09:6f:21:65:4a:
90:5b:7f:66:c5:38:c8:4c:55:0f:8c:86:a5:5e:a0:e2:53:78:
1b:3e:26:32:4f:01:68:d0:1b:98:9d:f9:c8:20:91:4c:7c:8b:
ec:96:c9:dd:42:5d:3d:c0:51:65:4f:89:57:51:42:77:35:d9:
3b:da:3b:4e:35:ce:8e:8b:f7:df:b1:24:00:a9:31:2e:eb:a7:
8c:fa:bb:0c:b1:3e:4f:4c:e9:03:c3:fb:0b:b8:90:68:99:48:
be:4a:86:93:5a:05:c5:41:3d:20:1c:36:27:f1:9a:55:54:12:
37:47:4e:29:0c:ef:c4:cf:53:bb:88:4e:d1:6b:d7:06:33:fb:
e1:8c:59:da:6f:22:45:24:53:f1:e6:df:fd:5e:55:17:7a:7d:
23:65:14:6c:e0:1d:c9:22:33:bd:2a:ab:35:7a:d5:29:5c:45:
e3:d8:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:44 2026 by rpki-client