Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: 7RpSFtPwje2LG0SSiAD+3IB4/fKXKdatwRvQ0jfCH0o=
Subject key identifier: 9C:59:19:05:BD:C7:26:69:15:D5:1F:C4:08:52:21:54:FB:10:A9:BB
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019D382E1AD0C193BEC6C091135E480B9627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: yXVBoY5jds0dwUpZZ221uAMymGjcYP+vCJt8Sg93/HM=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1a:d0:c1:93:be:c6:c0:91:13:5e:48:0b:96:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=9c591905bdc7266915d51fc408522154fb10a9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:88:85:e6:4d:aa:7f:c3:a7:24:80:74:6f:
05:60:66:46:09:f8:6d:54:31:5a:2c:5c:87:67:a7:
95:31:27:c1:56:e0:77:bc:ea:b4:bd:78:a5:46:01:
3b:5a:cb:64:8b:a1:2a:23:af:b3:06:51:ed:21:c2:
11:ae:d9:2a:82:60:09:8f:1c:da:db:d7:59:70:3a:
41:bb:23:71:dc:37:e7:b7:f8:9e:cd:3b:97:b8:d4:
3d:47:89:7e:c5:49:16:ab:e6:1f:94:9a:61:6a:72:
b1:6b:ae:55:08:c3:ec:75:d4:ff:24:94:59:9b:b7:
52:18:f9:aa:e1:57:84:c2:fc:22:1e:db:20:59:e9:
ad:4d:61:f1:99:d8:54:e1:bb:0e:54:f3:3a:23:7c:
47:68:40:4f:e3:fe:88:bb:4c:0b:3b:b8:1e:be:15:
e1:d7:64:b4:55:65:a3:67:a9:67:e0:31:3e:c7:6b:
c0:80:70:8a:ac:20:ef:59:27:09:7a:e9:8f:95:12:
15:62:77:cf:6f:f1:1c:80:f1:5b:97:6c:bd:f5:f3:
d1:51:d2:79:33:4e:5f:b9:0f:52:53:29:ff:dc:b4:
dd:2c:7d:41:6a:9d:8d:0a:54:95:40:75:1a:93:24:
7d:f0:05:bb:72:e2:3a:e3:94:71:fa:af:16:f0:15:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:19:05:BD:C7:26:69:15:D5:1F:C4:08:52:21:54:FB:10:A9:BB
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d0:4f:c5:46:95:0a:58:67:19:5b:f9:17:36:77:ff:c5:6c:
59:e4:b7:14:e3:fa:c0:ea:b3:a7:7e:b8:d9:32:d6:bf:65:de:
34:2e:c6:8c:c9:5d:79:79:c5:69:44:4b:1b:4c:fb:5f:4f:6f:
6e:c5:c3:fd:36:c0:26:e2:53:3c:36:91:23:17:2d:a9:f5:44:
b9:8f:35:ea:5c:96:62:93:fd:04:28:92:14:a9:ce:61:94:50:
99:99:8c:3e:49:9a:96:2a:81:52:65:2f:69:44:27:02:0b:9e:
43:51:48:56:a7:99:8c:7c:ae:e5:62:9f:c2:4d:22:25:b7:69:
c9:a0:12:d3:07:50:f6:03:39:73:f2:bc:14:42:c5:7c:bc:29:
42:3d:39:ee:7e:6b:ff:1d:2a:43:65:61:fd:c7:68:c0:7b:15:
55:3b:b0:fa:7b:69:db:e0:92:11:d1:b7:a9:8a:90:2e:61:25:
08:d5:5d:0f:ca:c8:96:bc:8d:0e:ce:a4:ab:db:fd:94:25:e0:
b5:df:b7:76:d6:fa:82:ba:76:81:7a:7f:13:61:0f:77:2c:75:
ee:ba:e8:ca:fb:81:7a:6c:dd:5e:4a:3e:c0:29:09:ad:ac:4a:
8a:f8:fa:f7:6d:a1:28:ee:c4:e2:b7:72:17:ce:f2:4c:f8:d9:
19:bd:40:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LhrQwZO+xsCRE15IC5YnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2
MTgxN2MwHhcNMjYwMzI5MDYwMDM4WhcNMjYwMzMwMDYwMDM4WjAzMTEwLwYDVQQD
Eyg5YzU5MTkwNWJkYzcyNjY5MTVkNTFmYzQwODUyMjE1NGZiMTBhOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUKIheZNqn/DpySAdG8FYGZGCfht
VDFaLFyHZ6eVMSfBVuB3vOq0vXilRgE7Wstki6EqI6+zBlHtIcIRrtkqgmAJjxza
29dZcDpBuyNx3Dfnt/iezTuXuNQ9R4l+xUkWq+YflJphanKxa65VCMPsddT/JJRZ
m7dSGPmq4VeEwvwiHtsgWemtTWHxmdhU4bsOVPM6I3xHaEBP4/6Iu0wLO7gevhXh
12S0VWWjZ6ln4DE+x2vAgHCKrCDvWScJeumPlRIVYnfPb/EcgPFbl2y99fPRUdJ5
M05fuQ9SUyn/3LTdLH1Bap2NClSVQHUakyR98AW7cuI645Rx+q8W8BWDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxZGQW9xyZpFdUfxAhSIVT7EKm7MB8GA1UdIwQY
MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt
MzI0NzFjNTkwOGEyLzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy
LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtBPxUaV
ClhnGVv5FzZ3/8VsWeS3FOP6wOqzp3642TLWv2XeNC7GjMldeXnFaURLG0z7X09v
bsXD/TbAJuJTPDaRIxctqfVEuY816lyWYpP9BCiSFKnOYZRQmZmMPkmaliqBUmUv
aUQnAgueQ1FIVqeZjHyu5WKfwk0iJbdpyaAS0wdQ9gM5c/K8FELFfLwpQj057n5r
/x0qQ2Vh/cdowHsVVTuw+ntp2+CSEdG3qYqQLmElCNVdD8rIlryNDs6kq9v9lCXg
td+3dtb6grp2gXp/E2EPdyx17rroyvuBemzdXko+wCkJraxKivj6922hKO7E4rdy
F87yTPjZGb1AxA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:08 2026 by rpki-client