Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: clEDqcpQkKBaGZgL2bQusyhPgLekOijkEaIlSF66vak=
Subject key identifier: 2F:61:AF:4F:23:46:16:FD:73:3F:C1:57:1D:6A:EF:86:33:46:D0:DD
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019FAB2CDCD9F15A8256127BC48A7E57BD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 00:01:11 +0000
Manifest this update: Wed 29 Jul 2026 00:01:11 +0000
Manifest next update: Thu 30 Jul 2026 00:01:11 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: pRX9QD4x5CA156B7WAYeaaAEJzdPxh1fCxgQbymej+c=)
2: ZoSX-_OjQK4MHqWGcOLwTupFZ4U.roa (hash: /cJ9PVsB0dL/pdTHZfJdsQPkVuDZ8eh7FYyH6XjI+ks=)
3: yhn9dpQ9JMdhORhKTGHRWo28skc.roa (hash: bSzQxY0bRO3l7byWiRWjJbF72ZbccA9YQZh/5o/wPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:dc:d9:f1:5a:82:56:12:7b:c4:8a:7e:57:bd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jul 29 00:01:11 2026 GMT
Not After : Jul 30 00:01:11 2026 GMT
Subject: CN=2f61af4f234616fd733fc1571d6aef863346d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:8d:0e:3e:bb:85:35:ad:35:a5:cf:77:23:
eb:47:45:0a:74:43:47:be:1f:e2:d3:db:53:b3:99:
f8:78:16:ce:ad:44:5b:4e:e3:77:1b:ad:0a:4a:aa:
76:36:19:e6:17:86:20:e8:08:4a:7d:ac:04:31:14:
50:3f:dd:d5:ca:7e:43:0b:dc:4d:50:cf:da:6f:93:
ca:62:a7:68:d4:27:1e:69:12:4e:50:7e:11:f5:cd:
18:43:08:c2:3f:97:d8:d1:f5:40:42:88:84:ee:cf:
00:61:be:13:cf:b5:e1:dc:6a:1e:aa:8f:dc:9a:63:
3b:83:c6:6d:77:0b:9a:ae:a6:a6:8c:c2:79:ae:cd:
50:58:2a:9e:2b:09:b3:54:35:72:0e:e4:40:8c:02:
c2:02:e5:12:57:4e:c4:c6:81:0d:c9:f2:bd:07:2b:
f5:d0:1a:d5:2f:e5:36:fe:74:44:8e:71:84:17:67:
0e:75:76:7b:bb:3a:c5:05:c8:8e:d6:96:d5:5e:68:
ce:77:8c:16:dc:43:3c:ef:98:4a:ba:ce:5a:dc:8f:
18:db:df:47:84:e5:68:46:7c:e1:c9:a1:d1:74:df:
3d:94:aa:49:a5:1c:1c:3e:23:94:d6:6f:fe:13:ff:
ae:c2:ff:b2:c6:69:67:f8:63:3f:ee:78:d0:21:56:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:AF:4F:23:46:16:FD:73:3F:C1:57:1D:6A:EF:86:33:46:D0:DD
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:79:00:6f:dd:6d:95:f0:ea:7c:ca:8d:d6:68:e3:ec:86:d2:
c3:8f:d2:c4:87:58:bf:fb:cd:be:49:6b:eb:1b:0e:e2:57:ad:
2f:cd:44:c7:d2:48:4a:a6:be:46:a6:f4:ea:c4:34:b9:4d:62:
8f:2b:80:d5:3b:c6:74:05:d5:24:67:6c:23:3c:b1:c6:35:57:
ec:2b:7c:9e:6f:3e:46:d9:9f:02:6d:db:d4:c1:5a:19:f0:5d:
a5:bd:a6:d2:4e:b2:09:de:2d:ec:e3:27:07:11:fc:cd:17:40:
da:d6:6e:79:28:13:52:73:8f:d0:5f:e4:d1:69:d9:0c:b7:fd:
74:91:ef:a7:3c:9b:f0:c8:fb:04:8a:71:a2:50:1c:a4:a5:29:
53:66:80:10:b5:7f:38:90:33:5d:fe:91:4d:e3:8c:88:41:05:
d8:86:7f:ff:9f:d6:d0:94:88:4b:ff:95:4c:24:da:b6:05:3f:
77:6e:66:92:5e:b1:4c:b2:9a:73:89:9a:91:30:f9:f9:27:22:
b0:54:ca:3a:96:3c:d8:e9:cc:af:bd:3d:fd:6f:2f:c5:17:00:
7a:6d:1a:1b:37:8e:91:6b:ba:ca:ef:44:73:c1:7c:fd:d9:a7:
e7:58:eb:bb:1c:38:99:8e:f4:91:33:e7:55:09:91:35:5b:11:
a7:d0:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:01:04 2026 by rpki-client