Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: zV8eYQGpF0MdXA28d9Mt1lkoyJLaaKFZTpyU2qoPz8g=
Subject key identifier: C4:46:24:CB:2F:41:86:4E:7D:D2:C5:30:DF:55:9D:5A:41:49:4A:40
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 019FAAF53284D98DDCE4C771BB92C9A1C97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:00:23 +0000
Manifest this update: Tue 28 Jul 2026 23:00:23 +0000
Manifest next update: Wed 29 Jul 2026 23:00:23 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: ETwgnYev11zOFiu1qA4H4H5GLoU+yTSCsiBwJ7mXbvQ=)
2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:32:84:d9:8d:dc:e4:c7:71:bb:92:c9:a1:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Jul 28 23:00:23 2026 GMT
Not After : Jul 29 23:00:23 2026 GMT
Subject: CN=c44624cb2f41864e7dd2c530df559d5a41494a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ef:19:74:ab:3a:11:54:23:68:98:66:5c:7c:
d6:7c:fa:e0:42:66:4e:b7:cf:be:52:49:80:c7:b8:
76:ac:e6:fe:af:44:4e:ef:6e:f4:9f:28:95:45:a4:
aa:1a:1b:ce:0a:62:20:99:1e:fb:85:7e:6f:f8:3c:
cb:04:b4:f7:25:e9:5b:97:21:d9:8c:fc:46:2a:84:
c7:da:c8:d0:06:6a:c6:98:8a:01:85:4a:d6:dd:86:
d8:b1:9a:1b:33:04:c9:2b:d6:f2:2b:08:71:5e:21:
5e:c1:aa:ab:5a:9b:58:c1:c9:4a:b1:64:1a:62:53:
e0:5a:91:7b:f8:f9:7d:6c:c4:39:27:33:04:67:a9:
bb:54:3a:1f:66:46:c7:52:7c:6e:b4:1c:4f:f2:3f:
da:bb:36:42:0b:dc:83:18:84:b0:18:dc:a3:0d:b4:
73:5e:7b:66:36:40:af:97:29:f0:5b:3f:4f:b0:a7:
19:3a:90:36:86:17:b6:a9:eb:8c:e4:b9:e1:96:f8:
25:f5:1f:18:b6:08:f1:48:c1:cc:9f:06:69:28:37:
c5:f6:4e:0c:13:08:8b:c9:0f:b6:9b:75:29:97:de:
99:54:02:db:2c:33:13:76:33:4f:2d:15:7d:ed:9a:
f9:52:5c:4d:90:25:a3:9e:0f:a6:67:6d:b2:e7:0b:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:24:CB:2F:41:86:4E:7D:D2:C5:30:DF:55:9D:5A:41:49:4A:40
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f0:4c:ae:75:c0:70:57:79:5b:8e:11:ff:f4:4f:a3:96:a4:
e0:b9:7a:61:f9:26:e0:95:ec:9c:43:07:4f:2f:06:45:05:e3:
e6:58:47:e9:0e:1d:9b:a4:54:45:5b:de:c9:e8:51:2d:f1:db:
79:77:91:7d:9c:41:de:ca:36:cf:23:fa:02:92:b7:7f:e4:b4:
74:fc:ff:41:97:cc:1d:e8:53:96:67:dc:fb:2a:fb:fd:56:bc:
f1:f8:d3:9f:4f:f9:b4:81:07:5b:bc:81:83:73:4f:99:b5:5e:
d7:39:48:84:28:aa:6a:1c:17:10:eb:6b:d4:01:9d:83:b9:73:
23:d0:aa:46:d5:e9:b3:29:d6:d4:3d:06:d8:7e:a6:5c:f0:ea:
b9:7c:db:bb:73:b1:cb:69:9b:bf:c7:29:97:bb:60:a9:6a:5d:
c3:6e:52:ee:87:b3:d5:e3:3e:fe:60:f5:78:ec:c7:ed:c1:7f:
42:2c:43:a9:74:e8:eb:c3:d3:a6:92:1c:c0:e4:3a:06:7d:c3:
57:b0:4e:53:3e:9d:b9:31:f7:1b:dd:96:15:81:bc:fd:82:86:
ae:72:ca:9f:7e:b2:c4:89:bd:c2:c9:f1:14:5c:10:ee:24:16:
8c:36:89:21:86:fe:60:8e:b2:8c:b2:09:f6:49:41:76:cc:c1:
da:30:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:02:42 2026 by rpki-client