Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: 0usBxjrl2KXAW/dzE/XGPxK2hZ/k+QMhdbhf8Dfy1bU=
Subject key identifier: DB:15:19:79:57:97:45:5A:10:69:D2:8A:8D:6C:78:A4:09:51:47:36
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019D9A0761E1EE2A7DCC871ECA16004C2F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:01:08 +0000
Manifest this update: Fri 17 Apr 2026 06:01:08 +0000
Manifest next update: Sat 18 Apr 2026 06:01:08 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: ho2jOGrxYVgKcIWJOTJVjwjc7Z+0cIzPFqkFJjyAw3Q=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:61:e1:ee:2a:7d:cc:87:1e:ca:16:00:4c:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Apr 17 06:01:08 2026 GMT
Not After : Apr 18 06:01:08 2026 GMT
Subject: CN=db1519795797455a1069d28a8d6c78a409514736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:4f:d3:b4:eb:b6:a9:85:6a:d9:a1:ed:89:
54:9b:4f:05:6b:53:c1:39:1f:b5:a4:4c:8a:28:d0:
dd:be:f6:43:65:9c:88:75:50:a4:75:ae:b5:a1:3b:
65:0a:35:d9:4c:5a:81:b1:19:7a:36:89:0a:02:93:
a2:ba:64:8f:a5:f4:f7:eb:48:ff:da:7e:59:15:0b:
c0:a3:7a:cd:e9:9a:99:58:5b:fd:62:09:92:19:60:
dc:48:84:68:9a:63:bb:90:35:f9:d9:15:39:8a:8d:
e1:22:c2:17:5d:b3:2a:42:79:9b:59:d6:06:1b:fe:
0c:56:95:d1:a7:9b:76:f4:23:24:9b:bd:df:88:b6:
6a:5a:ad:24:a8:34:a1:80:26:7d:24:3c:bb:f0:cb:
ed:ef:77:f5:78:b3:ff:2d:7f:78:f3:68:41:d3:5a:
6d:09:47:b2:39:19:fc:56:13:56:6d:69:75:7a:14:
4a:69:e7:08:c1:b1:92:7e:c3:a7:5c:6b:18:65:cf:
2f:65:55:23:4b:3a:d2:cd:ee:5c:c0:91:b8:d7:11:
b7:4d:b4:92:1f:e2:d7:91:47:6f:46:8f:f7:98:14:
bf:30:b3:eb:ae:9b:ab:31:88:d9:d2:cf:a7:dd:01:
5f:95:3a:ab:73:8f:60:2f:70:54:79:d2:52:b0:96:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:15:19:79:57:97:45:5A:10:69:D2:8A:8D:6C:78:A4:09:51:47:36
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:ec:48:8f:2e:3a:e1:da:9c:f3:70:c4:7e:88:76:c7:db:7a:
8e:88:ae:70:6b:6f:78:0d:5c:a8:34:da:1b:0c:b1:f4:64:dd:
40:86:b3:f3:41:58:12:24:07:f5:08:c5:e5:66:87:e5:ce:50:
b6:06:ce:1d:8f:6e:94:48:3e:8d:fa:8c:99:a2:9f:8d:4c:8a:
55:14:50:c4:ca:eb:5f:29:59:36:54:50:38:68:8f:11:1a:46:
cd:f4:e9:04:4b:3d:c7:c4:6b:53:3b:64:1e:26:f4:d4:3f:7d:
cc:4c:1c:11:d1:84:fa:7d:4f:3c:e8:8e:04:1a:26:d1:84:24:
84:9b:18:1c:47:94:f6:e8:8e:f4:28:e1:82:ee:a8:5f:9e:f1:
58:b6:08:16:b7:bd:92:c7:df:19:ac:24:0b:81:f1:8c:8c:fe:
c0:25:f7:72:78:e9:d1:30:a9:8a:87:fe:21:6d:bf:14:6f:3d:
00:b5:3b:8f:01:35:40:10:d7:5b:b0:fe:2c:89:a4:fa:36:40:
63:b8:72:38:d8:2d:d6:f0:65:c7:94:8e:4c:da:40:9e:2e:a8:
16:75:de:16:c2:d3:0a:81:25:5c:9d:a4:d7:2c:9a:8a:34:db:
2f:aa:68:de:1b:fa:b1:f4:a2:1d:3b:23:db:6d:97:5b:8f:24:
2e:d8:0e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:44 2026 by rpki-client