Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: 9CSnymSesCxDImXMErMUTwRFtfnJuWAGXcQ3IjgbtQQ=
Subject key identifier: BC:67:1D:2C:37:F2:FF:9B:D1:E7:EF:43:C3:BD:5B:30:D3:48:31:ED
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019EBF9160D5377D70B65E59C6C582882EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 06:00:36 +0000
Manifest this update: Sat 13 Jun 2026 06:00:36 +0000
Manifest next update: Sun 14 Jun 2026 06:00:36 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: F/BrLV7Kq32ZlgEoF++Zvmg86Oui1UZbd4C/Dsx2Ybg=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:60:d5:37:7d:70:b6:5e:59:c6:c5:82:88:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jun 13 06:00:36 2026 GMT
Not After : Jun 14 06:00:36 2026 GMT
Subject: CN=bc671d2c37f2ff9bd1e7ef43c3bd5b30d34831ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:34:11:f3:22:97:ce:66:dd:41:26:5e:90:
63:48:af:84:0f:ea:da:2f:9a:07:78:8b:c3:fd:53:
bd:9c:a7:16:a6:60:27:67:de:68:97:78:b5:e2:9f:
a6:a6:83:62:60:48:3d:3f:65:4d:04:3a:f5:d4:38:
8f:0d:21:2a:1e:8b:94:c5:9c:d1:06:26:04:fa:7c:
fe:e5:b2:f9:87:6f:15:3c:b6:11:db:15:06:71:19:
11:98:bb:76:df:3b:68:bc:9c:f6:54:c0:49:83:8e:
6e:7c:f9:15:bb:79:d1:e7:72:18:d5:5d:aa:5c:a6:
67:d8:b1:3e:28:f6:dd:24:68:46:d1:fc:9d:c3:09:
77:d6:23:2e:98:08:c6:71:76:1d:b3:3c:55:f6:df:
b1:0a:34:df:10:8f:6f:f3:a0:94:da:2b:5d:e5:a1:
1d:bb:1e:7e:21:a8:6d:94:e8:b9:45:c6:95:c6:aa:
93:60:99:c4:da:77:d3:ae:d0:55:e9:37:b9:08:c3:
36:06:34:24:b5:90:11:e4:e4:2a:f0:bc:05:43:95:
ec:50:48:98:c4:13:47:6c:c6:8d:e3:e5:b5:fe:db:
fa:e7:65:d2:a0:33:29:02:a8:26:89:28:3b:49:b5:
0d:fc:f4:6e:35:28:5c:e3:a7:1e:ed:30:bf:66:67:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:1D:2C:37:F2:FF:9B:D1:E7:EF:43:C3:BD:5B:30:D3:48:31:ED
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f5:7a:b8:e6:2d:1b:a8:16:be:72:84:fb:bd:30:23:60:b2:64:
70:7e:fd:ce:6c:6c:b1:0f:f0:c4:22:01:f8:7e:d3:bf:54:0c:
32:e1:3b:7f:1d:62:97:e0:77:c8:e3:a2:c4:bb:cf:68:91:84:
3e:b0:8b:01:2d:a4:fd:ba:1a:c8:c8:c3:70:bb:91:07:1e:87:
98:62:a6:e9:75:f5:a3:86:74:55:ae:5d:0e:a5:5b:0e:1c:84:
58:ea:73:eb:61:bd:70:df:90:91:9b:df:95:3d:2d:f2:7d:3f:
ac:f9:c5:95:87:b3:f3:b0:6f:ee:f4:e7:e5:27:a1:f3:7a:7b:
c9:2e:31:3c:dd:17:74:e5:56:bb:59:a6:b2:12:54:90:28:dc:
21:4f:78:2a:31:21:20:4a:04:f6:79:54:7f:34:80:cf:63:63:
a9:01:43:24:0d:d5:41:de:2b:ea:db:d7:0b:f8:bd:d5:95:dd:
cd:27:55:e4:1c:5f:2a:80:4c:71:4c:f2:46:24:e7:37:dd:2b:
dc:20:7f:cb:00:42:a7:d8:a0:ba:bf:d0:c7:b5:a5:2c:12:53:
bc:3a:cb:a7:e6:25:f9:c2:bd:fe:55:ea:ab:9c:d0:d0:5f:8b:
f7:7b:82:12:bd:8c:79:2b:d7:56:a9:b8:3f:1a:cd:73:77:dc:
e3:ed:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:16 2026 by rpki-client