Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: Buai1XBf/C1x/Fu/ugfRK/Joz6SL7kJoDOYiCGx+Gcg=
Subject key identifier: 12:F1:32:D2:6C:9D:F9:40:78:D8:EC:63:06:F4:E1:B5:1C:81:B8:33
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019CAA8F990DF6325BC89D7DAA1AE930708B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: kAscei4J4l2ndODIfBH8Vh4TWEveQeJtlZFPgOoikU0=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:99:0d:f6:32:5b:c8:9d:7d:aa:1a:e9:30:70:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=12f132d26c9df94078d8ec6306f4e1b51c81b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:c5:57:30:0f:42:19:98:99:cd:2f:0a:22:
3e:4f:18:6f:df:7b:eb:3b:04:07:53:63:a1:6c:5c:
ee:e5:a8:c1:50:07:49:74:ff:8e:dc:89:40:df:32:
9f:94:57:f5:4a:60:4b:0e:78:91:a1:ae:f3:bb:00:
4f:56:9f:11:cd:fb:5a:99:a1:c2:74:b3:b3:33:36:
2e:9c:4c:00:64:09:a3:b4:56:bd:65:e5:48:9f:67:
64:04:f9:42:0e:65:d2:ff:27:d0:50:40:56:53:3d:
4a:e2:c2:b8:f0:67:3c:6e:91:4f:ce:ed:53:83:10:
38:e9:99:e1:a0:56:d6:e9:94:5f:c2:92:d7:93:cc:
89:e8:a6:b3:9b:e2:14:12:a4:ac:ad:fe:f2:3c:f2:
4d:25:07:ac:dd:4d:22:07:7a:89:dd:72:c8:7a:80:
9a:87:50:78:61:ea:9b:54:ae:a4:26:21:90:32:f6:
ed:75:9c:06:cb:71:1e:4a:44:76:6d:47:71:69:ff:
20:a8:50:93:ef:73:cf:78:a0:ae:1b:59:8d:2f:a4:
84:1f:eb:a4:a0:b5:c6:c5:2b:41:50:b6:26:3d:c6:
b9:ac:00:bb:a5:7e:ab:a1:37:0a:0a:5d:b2:45:28:
60:3e:72:70:af:56:50:f8:79:54:27:2f:28:10:69:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:32:D2:6C:9D:F9:40:78:D8:EC:63:06:F4:E1:B5:1C:81:B8:33
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:de:1e:e5:7a:cc:58:18:d8:79:d5:5d:7c:b6:2a:a9:e9:7d:
4d:fd:bd:4f:21:de:ec:02:ee:fb:7a:6f:c1:cd:4d:ae:15:1e:
c4:71:7d:3f:65:df:c0:d3:e3:d6:d9:f6:d2:b3:a2:02:3e:eb:
d0:b2:9a:d0:15:81:16:83:76:d8:2c:66:b6:62:36:c1:3d:f8:
60:5f:b1:1f:9b:61:a4:aa:31:84:ce:79:2c:45:9f:51:e8:a6:
11:14:ef:da:b9:92:0e:aa:ed:60:6d:d3:ab:02:26:13:b8:21:
b3:bb:04:ab:a3:b9:ad:58:e6:6f:be:9d:5a:73:5c:13:7d:bc:
5a:d7:23:78:c9:66:05:4d:e3:9b:8a:46:5e:ba:d2:16:eb:96:
af:76:eb:c1:c6:eb:b2:d8:51:0a:68:10:23:35:8a:83:ff:cf:
d9:68:20:d9:6c:76:48:cc:56:ca:73:07:6e:54:6b:3d:08:b0:
2a:d6:fb:e2:d6:66:89:cf:b3:f5:8a:6d:25:fe:ec:89:e1:7e:
89:24:7b:08:4c:a3:1f:eb:35:c4:31:73:73:15:a4:31:f7:f5:
a0:2a:bf:94:0c:60:cd:b1:6a:79:5e:32:5a:d3:a0:40:0f:af:
d0:ea:f0:38:53:4a:1f:a6:fb:6f:ba:8f:c5:fa:5d:0f:e0:52:
27:e0:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:07 2026 by rpki-client