Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: f4XK5OEdSFkKIQ7gNxiUU1o92yLeiHK+F0yNBEmzRzo=
Subject key identifier: E3:23:E4:F6:0E:46:ED:3B:FF:AA:96:F6:93:63:D6:09:81:20:B8:55
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 01A0C10CB46D48248DA87EAEAA3314B6A539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 23:00:30 +0000
Manifest this update: Sun 20 Sep 2026 23:00:30 +0000
Manifest next update: Mon 21 Sep 2026 23:00:30 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: 8b9+3KKVVZyJ7oon8zw5ghYsraMSbHXC+l3Jad7Uqpo=)
2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:b4:6d:48:24:8d:a8:7e:ae:aa:33:14:b6:a5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Sep 20 23:00:30 2026 GMT
Not After : Sep 21 23:00:30 2026 GMT
Subject: CN=e323e4f60e46ed3bffaa96f69363d6098120b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:38:59:c1:55:c6:21:d6:af:69:9f:4a:c2:
3e:56:fe:95:97:5d:d2:ef:0f:d7:c0:0a:d7:78:14:
84:81:de:9b:52:bb:94:11:70:ce:a5:7a:1c:d7:7a:
56:de:c0:c8:14:72:aa:dc:13:2e:f3:47:ae:d2:c8:
5b:72:1b:95:c1:85:2c:cc:12:ef:4f:11:e0:ab:23:
e1:1e:06:b1:b6:0b:a4:53:d5:6e:86:32:5f:37:38:
f0:45:0c:1d:b2:9b:cb:69:65:33:3c:3f:92:a2:eb:
47:5c:27:87:35:70:a1:9f:49:a9:6b:bb:64:46:74:
93:5e:02:b9:c5:a7:5d:15:52:20:94:2b:8f:9a:1c:
ed:9c:52:5d:1b:2d:23:41:76:4e:0a:5a:aa:e7:3c:
69:7d:b8:d2:2c:c7:d6:f9:4c:f8:ef:0a:83:dc:90:
23:53:3c:66:98:52:34:3b:85:da:96:d7:91:e7:e6:
38:15:11:d7:ae:08:f5:99:0e:2d:cd:b9:66:ec:90:
8b:e4:a2:9d:26:55:5f:e5:8b:0f:c8:f7:41:e0:4c:
5d:40:e6:e8:72:73:0e:8e:6e:c4:b4:49:5a:ea:a4:
cd:5c:c7:3e:68:82:7c:7b:fa:f2:85:58:85:6e:a3:
ec:cb:02:78:89:58:e0:9c:d8:d1:c3:d5:f1:d1:32:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:E4:F6:0E:46:ED:3B:FF:AA:96:F6:93:63:D6:09:81:20:B8:55
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:42:83:22:0f:75:48:ba:a1:c5:73:b3:fe:ef:18:90:1b:2c:
4a:98:0d:e9:0e:eb:99:bb:57:1a:bc:66:cb:0c:c6:cf:66:e4:
6b:10:9a:71:d0:1e:91:53:b5:6a:4c:a6:19:6d:1f:99:04:7a:
32:90:ed:cc:19:60:38:43:56:45:6d:bb:56:42:16:39:ae:12:
e0:e0:2c:db:31:79:19:d3:ef:e3:02:44:f2:ba:03:d3:21:64:
c5:c4:cb:fb:8e:2c:59:b0:a2:14:79:21:3a:9a:37:51:68:9c:
c8:2e:05:76:8a:c9:2f:d5:60:7f:fe:cb:70:5f:db:ad:ad:55:
84:15:19:51:fe:4b:2d:17:f8:52:cf:6c:81:7e:06:e9:17:47:
31:8e:49:76:75:ba:66:29:d7:36:73:1d:05:ce:68:e3:5d:be:
9a:77:76:cb:67:59:3a:83:ab:b1:d9:23:28:55:6d:61:fd:5b:
6f:e8:5c:81:9c:f7:91:30:91:d0:8f:8a:11:b5:91:7f:df:55:
3f:6a:53:97:fb:8a:1d:a1:4a:e3:45:45:9c:df:69:9e:a1:e0:
24:90:64:05:c1:75:b1:e2:75:44:2f:2a:d6:e2:95:cf:d7:19:
aa:55:8f:f9:21:4d:17:4a:6c:72:5d:ca:79:d7:49:09:97:06:
b4:5e:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:10:34 2026 by rpki-client