Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: hg0by2wsM2ByMuFgWuGN1AFzM6xf7C6T2f1yuO4MPVU=
Subject key identifier: 58:16:68:F0:D8:30:BB:5B:8C:B2:9B:72:AE:F8:A7:EE:CD:B5:2B:40
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 01A000936C3DBFA49AEC4B08080A4EACD91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 14:00:56 +0000
Manifest this update: Fri 14 Aug 2026 14:00:56 +0000
Manifest next update: Sat 15 Aug 2026 14:00:56 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: 3qD0YQs5lc/IbxIRCOVwAP3ULJGkNGqAFkmpU1bvaS8=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
3: qjFyOVNC7cy2BWp-9aeHp4PinTw.roa (hash: fOUXYgSgvqQL9hg9nKQBJUXVnY8YtOYVKAMT4wMofyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:6c:3d:bf:a4:9a:ec:4b:08:08:0a:4e:ac:d9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Aug 14 14:00:56 2026 GMT
Not After : Aug 15 14:00:56 2026 GMT
Subject: CN=581668f0d830bb5b8cb29b72aef8a7eecdb52b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:fe:eb:ee:6a:63:2e:fc:c8:3b:f6:57:6c:
db:c9:f1:81:6f:24:70:b6:df:24:60:77:67:2d:98:
5e:22:a9:3a:44:e7:8e:4b:6d:93:f0:c5:df:e1:aa:
01:f4:2e:4b:80:65:c5:31:9e:74:ba:35:fb:28:91:
69:05:4e:8a:b3:bb:83:b8:b2:2b:79:da:8a:00:0f:
11:51:00:bf:2b:c3:54:50:13:e5:59:8b:f6:c8:29:
b7:03:7a:9e:d8:1a:f4:08:34:fd:bb:97:6b:b1:37:
c8:f4:86:e1:f3:3a:d0:d8:16:a4:4b:9d:0a:2c:7e:
e4:6a:18:e9:28:ff:63:6f:ab:76:e0:c8:27:a1:17:
10:c5:b0:ed:4b:a6:26:33:36:87:dc:a0:d7:c5:da:
a7:51:2b:1e:a5:73:0b:9e:26:95:1e:03:b7:98:0c:
eb:de:95:a5:37:5e:49:3b:03:3d:07:96:54:e6:63:
da:91:e4:fd:23:23:5e:29:83:ef:95:5c:6e:3a:84:
c9:ba:90:d5:99:2d:db:93:3f:7c:ff:50:89:fa:7f:
8f:d0:8d:dd:0e:6d:8f:7b:c3:6d:cb:79:93:f2:26:
b2:f3:6f:4b:bb:df:2b:f6:d8:90:43:30:91:25:a3:
b7:03:26:0f:16:5f:83:21:4d:a3:2e:75:6d:4c:d3:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:16:68:F0:D8:30:BB:5B:8C:B2:9B:72:AE:F8:A7:EE:CD:B5:2B:40
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:45:ae:e9:03:03:a5:1a:55:56:bf:02:a3:24:67:c6:ea:
61:fc:c8:d3:f8:5b:52:44:6c:7f:fa:30:ba:08:da:42:64:13:
eb:50:dc:f5:7a:2c:67:2b:75:f9:7e:cd:85:ef:fc:a2:e7:52:
92:d0:40:a5:a2:80:3b:07:19:f2:a4:97:7f:87:6c:3a:42:9c:
90:4b:6c:83:1e:00:ec:94:a0:01:43:0b:15:95:d8:5f:c2:bd:
9d:2b:ed:e5:18:28:65:11:8b:40:ce:ac:98:55:29:19:cf:fa:
5a:f4:51:44:29:01:f1:b5:69:10:78:6b:26:95:12:04:43:a7:
a3:bb:6a:77:e0:0c:1f:a6:09:d9:c2:a0:91:34:4a:f5:7e:af:
15:87:6d:10:06:a9:9c:d0:f1:2e:fa:8f:28:23:3c:af:a0:7d:
e1:1d:fa:3d:c4:e8:93:2e:54:97:f6:84:b6:d5:2a:fb:62:c3:
33:26:0d:56:49:a5:52:7c:fc:15:8d:44:8e:d8:48:c9:6d:c2:
d5:d8:a2:f5:f5:f8:63:c3:22:59:a4:a8:20:a6:74:44:66:2a:
f6:dc:8c:2a:ee:50:f2:e4:59:39:4d:4a:78:71:f6:92:20:9d:
f3:54:9e:05:2a:99:f9:ac:7e:25:bf:ac:06:16:5a:27:a6:41:
f5:5e:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:26 2026 by rpki-client