
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: KZtJiFRJJdNNt/txpV4w+8DiZSNXleP7va2lD4kYzQg=
Subject key identifier: 89:2C:A0:6D:C2:51:1F:BF:5C:6E:1F:89:3D:C6:9B:09:65:CA:A0:75
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 019EBF5A78BA17B99388361B9698EE3A77A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 05:00:37 +0000
Manifest this update: Sat 13 Jun 2026 05:00:37 +0000
Manifest next update: Sun 14 Jun 2026 05:00:37 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: TfmNmn6B83arIIFDMR+hfmdtesEmiiSWO5e7F7w6pvM=)
2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:78:ba:17:b9:93:88:36:1b:96:98:ee:3a:77:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Jun 13 05:00:37 2026 GMT
Not After : Jun 14 05:00:37 2026 GMT
Subject: CN=892ca06dc2511fbf5c6e1f893dc69b0965caa075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:d1:85:c9:ea:0f:44:13:37:bf:9b:43:aa:
e7:40:6d:29:73:ce:a3:93:c4:92:f8:80:47:e0:39:
89:ca:a3:85:c6:65:df:55:49:2b:27:03:f9:54:a3:
37:7e:00:0f:a7:14:d3:82:4a:bb:17:87:44:53:02:
94:fa:06:0c:58:bf:c5:5a:9f:e8:bb:5c:39:17:b2:
85:73:99:03:c4:67:b6:9e:02:b2:82:49:d8:cc:a2:
5e:04:8b:03:fc:c0:1a:e8:ea:0b:08:51:6c:49:b6:
7f:a4:e5:41:38:a6:af:d8:6c:73:0a:70:6b:4d:ce:
75:38:d9:84:82:f6:2b:70:ab:06:8c:4e:f8:96:ea:
33:ac:b1:d0:6d:9d:c6:5b:c0:70:eb:24:ce:0f:a6:
2d:c0:81:68:2b:47:12:7d:02:c1:cf:0e:c6:9a:ff:
8b:81:97:be:3b:d0:b4:b2:0f:98:02:a8:36:da:09:
f5:14:d6:78:72:ee:fd:de:3a:05:43:19:c2:13:31:
46:45:81:f4:15:87:2e:28:72:f1:cc:3b:bc:49:bc:
98:e8:9b:bd:4e:01:78:5c:b7:4d:a6:8d:0f:95:5a:
fa:db:a1:25:32:6f:25:a6:80:ae:21:fa:85:8e:b7:
0a:2c:41:aa:b2:a6:d4:98:16:7b:1f:f7:d9:07:07:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:A0:6D:C2:51:1F:BF:5C:6E:1F:89:3D:C6:9B:09:65:CA:A0:75
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5d:bc:ab:ed:4f:73:af:28:0e:c0:98:bf:29:f8:84:5f:57:
17:e4:9b:e1:38:e8:39:26:f2:62:6c:44:f1:36:11:92:cc:a8:
64:e0:12:62:c2:72:41:ec:f6:37:88:03:f2:38:14:01:29:fd:
4b:20:6e:7a:1a:de:b3:61:f9:7e:4f:08:24:09:ad:9b:b2:c1:
88:c2:c5:c7:03:bc:7a:63:42:e5:d7:42:32:70:c4:1f:6b:f1:
ac:1c:10:8b:d3:a3:8b:91:9c:7f:d5:b9:29:67:fc:89:06:b3:
b3:b7:c3:ee:44:f7:1c:4b:7d:3b:17:82:b3:01:f5:57:08:9a:
fc:8d:3e:c1:ea:a6:b2:5a:53:71:87:50:c7:fd:24:f4:b9:cc:
2f:d6:6c:c3:ba:27:72:9c:2c:cd:d1:8f:92:43:9a:d9:a4:17:
d9:ff:cb:25:ea:e7:9c:eb:89:f4:0c:2d:33:88:c0:9c:25:54:
1c:04:b5:ca:da:8b:45:78:cc:fc:da:32:ba:c8:07:e0:d4:dc:
8f:1f:54:4e:96:12:8a:d1:d1:d7:35:80:08:03:28:40:ef:c0:
3b:27:ad:17:53:52:eb:f6:af:2e:55:86:f7:de:0a:ac:97:49:
79:9f:d3:c3:6a:d2:8c:b6:7e:ff:92:00:c0:7d:a3:87:e7:41:
23:d4:2e:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wni6F7mTiDYblpjuOneoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNhNjBlMDQ4NDdiZDJmN2M0NWM4Njg3ZTVmNWFhZDFm
ZWU4ZmIwHhcNMjYwNjEzMDUwMDM3WhcNMjYwNjE0MDUwMDM3WjAzMTEwLwYDVQQD
Eyg4OTJjYTA2ZGMyNTExZmJmNWM2ZTFmODkzZGM2OWIwOTY1Y2FhMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GDRhcnqD0QTN7+bQ6rnQG0pc86j
k8SS+IBH4DmJyqOFxmXfVUkrJwP5VKM3fgAPpxTTgkq7F4dEUwKU+gYMWL/FWp/o
u1w5F7KFc5kDxGe2ngKygknYzKJeBIsD/MAa6OoLCFFsSbZ/pOVBOKav2GxzCnBr
Tc51ONmEgvYrcKsGjE74luozrLHQbZ3GW8Bw6yTOD6YtwIFoK0cSfQLBzw7Gmv+L
gZe+O9C0sg+YAqg22gn1FNZ4cu793joFQxnCEzFGRYH0FYcuKHLxzDu8SbyY6Ju9
TgF4XLdNpo0PlVr626ElMm8lpoCuIfqFjrcKLEGqsqbUmBZ7H/fZBwdvEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIksoG3CUR+/XG4fiT3GmwllyqB1MB8GA1UdIwQY
MBaAFAgcpg4EhHvS98Rchofl9arR/uj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMt
YjdhYjY4NmMwNzZlLzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMtYjdhYjY4NmMwNzZl
LzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG128q+1P
c68oDsCYvyn4hF9XF+Sb4TjoOSbyYmxE8TYRksyoZOASYsJyQez2N4gD8jgUASn9
SyBuehres2H5fk8IJAmtm7LBiMLFxwO8emNC5ddCMnDEH2vxrBwQi9Oji5Gcf9W5
KWf8iQazs7fD7kT3HEt9OxeCswH1Vwia/I0+weqmslpTcYdQx/0k9LnML9Zsw7on
cpwszdGPkkOa2aQX2f/LJernnOuJ9AwtM4jAnCVUHAS1ytqLRXjM/NoyusgH4NTc
jx9UTpYSitHR1zWACAMoQO/AOyetF1NS6/avLlWG994KrJdJeZ/Tw2rSjLZ+/5IA
wH2jh+dBI9Qulw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:41 2026 by rpki-client