Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: OvNBuBR7WCjOzY9hzDjmgm7g3hXEmtutCXuzxRGPP4o=
Subject key identifier: 51:18:7C:3F:2A:98:1F:4E:20:60:29:A2:EE:F8:76:4D:45:9D:9B:82
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 01A13D4A256373930CD454F49B3343818A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 02:00:31 +0000
Manifest this update: Thu 15 Oct 2026 02:00:31 +0000
Manifest next update: Fri 16 Oct 2026 02:00:31 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: 3FW0v2582VjxCjwDj0oM//a1VuRgPqJ/XwdgJtrD7h8=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
3: qjFyOVNC7cy2BWp-9aeHp4PinTw.roa (hash: fOUXYgSgvqQL9hg9nKQBJUXVnY8YtOYVKAMT4wMofyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:25:63:73:93:0c:d4:54:f4:9b:33:43:81:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Oct 15 02:00:31 2026 GMT
Not After : Oct 16 02:00:31 2026 GMT
Subject: CN=51187c3f2a981f4e206029a2eef8764d459d9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:ba:7b:b8:46:ff:5e:7a:ec:3d:b4:84:e7:
6f:d5:27:13:fb:57:92:3d:dd:81:f6:3b:da:15:b7:
9a:24:af:ca:12:eb:7f:a2:9c:c9:c7:24:4c:30:d6:
54:8c:02:3a:f4:0d:9b:8d:b4:74:39:4c:b5:0c:9d:
41:51:78:5a:44:ea:cf:26:1c:f7:c2:8f:f1:73:de:
78:a3:b7:36:0b:81:29:90:b1:10:8a:ee:be:d7:ab:
55:c4:22:ac:2a:41:c2:23:dc:ee:7a:c6:1f:11:14:
bf:e4:dd:fc:e1:a4:ae:bf:db:9e:e5:79:ca:ec:29:
62:2f:5e:d0:b0:c2:62:d2:df:f9:6f:09:77:6b:8a:
b4:0e:b4:d2:50:0b:bd:20:20:11:dd:58:be:32:ee:
ae:a1:f4:bf:2b:60:7f:09:eb:4c:1a:30:78:8d:2b:
a0:1a:75:78:69:25:12:e9:04:fb:07:c6:86:28:a0:
0c:93:71:4e:b7:2d:e1:e9:db:93:f1:7c:da:43:38:
44:1a:4a:23:73:53:23:2f:d8:04:b1:58:83:01:ef:
9a:e7:ad:51:d9:8f:24:68:a3:a0:3b:ad:58:c5:a9:
69:53:16:9f:ec:66:d9:fe:72:b9:41:7a:de:87:5a:
5f:b3:c7:89:95:e9:b6:fa:6d:ef:d2:9d:9c:77:aa:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:7C:3F:2A:98:1F:4E:20:60:29:A2:EE:F8:76:4D:45:9D:9B:82
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b8:48:11:d4:d9:34:95:4b:56:78:d6:67:50:55:cd:42:17:
db:8b:b3:06:dc:cb:f9:88:9c:bb:83:b6:45:9e:9f:3d:12:43:
f9:8e:83:30:53:a8:ed:dc:00:66:87:5e:25:58:0d:3c:e2:8b:
81:bd:ee:2c:ab:41:8e:bc:ec:15:41:1e:57:0d:22:36:6f:73:
b3:1f:32:4d:25:5c:bf:0c:1f:ad:7e:ac:3d:f7:87:e1:be:9b:
12:a7:c3:ff:c6:c1:cf:1b:f2:aa:18:40:87:f3:fe:43:28:18:
d1:f7:4e:ff:96:98:1a:28:53:f4:63:cf:a9:0a:6a:02:f6:0c:
22:e6:87:be:c7:93:93:f0:9f:8b:e7:1f:fe:f0:09:c3:48:4f:
6f:23:7e:17:a6:32:87:ba:27:56:02:14:d9:ae:be:c2:b6:41:
87:91:4a:b0:e0:14:8c:8c:eb:ad:3a:51:11:a6:f4:3d:51:48:
60:cc:e5:e9:7c:ad:0e:a6:c5:a0:67:91:fd:c9:f4:4f:eb:9b:
73:7f:48:41:d1:2b:b8:3b:28:fa:f0:9e:67:86:dd:74:ae:27:
aa:e6:98:d5:49:ac:9b:6a:2b:52:44:54:9c:35:de:e1:57:03:
9c:cb:cd:53:e3:74:ef:52:ca:3f:e3:5a:4d:0a:2e:db:5b:43:
5b:e5:e2:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9SiVjc5MM1FT0mzNDgYoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2
MTgxN2MwHhcNMjYxMDE1MDIwMDMxWhcNMjYxMDE2MDIwMDMxWjAzMTEwLwYDVQQD
Eyg1MTE4N2MzZjJhOTgxZjRlMjA2MDI5YTJlZWY4NzY0ZDQ1OWQ5YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Na6e7hG/1567D20hOdv1ScT+1eS
Pd2B9jvaFbeaJK/KEut/opzJxyRMMNZUjAI69A2bjbR0OUy1DJ1BUXhaROrPJhz3
wo/xc954o7c2C4EpkLEQiu6+16tVxCKsKkHCI9zuesYfERS/5N384aSuv9ue5XnK
7CliL17QsMJi0t/5bwl3a4q0DrTSUAu9ICAR3Vi+Mu6uofS/K2B/CetMGjB4jSug
GnV4aSUS6QT7B8aGKKAMk3FOty3h6duT8XzaQzhEGkojc1MjL9gEsViDAe+a561R
2Y8kaKOgO61YxalpUxaf7GbZ/nK5QXreh1pfs8eJlem2+m3v0p2cd6pDnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEYfD8qmB9OIGApou74dk1FnZuCMB8GA1UdIwQY
MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt
MzI0NzFjNTkwOGEyLzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy
LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLhIEdTZ
NJVLVnjWZ1BVzUIX24uzBtzL+Yicu4O2RZ6fPRJD+Y6DMFOo7dwAZodeJVgNPOKL
gb3uLKtBjrzsFUEeVw0iNm9zsx8yTSVcvwwfrX6sPfeH4b6bEqfD/8bBzxvyqhhA
h/P+QygY0fdO/5aYGihT9GPPqQpqAvYMIuaHvseTk/Cfi+cf/vAJw0hPbyN+F6Yy
h7onVgIU2a6+wrZBh5FKsOAUjIzrrTpREab0PVFIYMzl6XytDqbFoGeR/cn0T+ub
c39IQdEruDso+vCeZ4bddK4nquaY1Umsm2orUkRUnDXe4VcDnMvNU+N071LKP+Na
TQou21tDW+Xizw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:04 2026 by rpki-client