Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: MfkhA3ku/bs3T8Tjm5UrCp8Bf/qHe5wbz+F1qkRk+20=
Subject key identifier: F0:1A:C0:41:CD:7C:5D:E2:F7:2D:56:D0:FC:BA:53:6F:0D:E4:FC:F5
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01A0BDD4F801A364A11CE63325452AF48B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 1172
Signing time: Sun 20 Sep 2026 08:00:45 +0000
Manifest this update: Sun 20 Sep 2026 08:00:45 +0000
Manifest next update: Mon 21 Sep 2026 08:00:45 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: TCtTyVsbuPsb+r8x60eE86wf7KROLzsPdjb/PGMZCxU=)
2: Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (hash: IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:f8:01:a3:64:a1:1c:e6:33:25:45:2a:f4:8b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Sep 20 08:00:45 2026 GMT
Not After : Sep 21 08:00:45 2026 GMT
Subject: CN=f01ac041cd7c5de2f72d56d0fcba536f0de4fcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:42:33:4d:96:67:cf:90:d7:87:a7:2c:af:
68:79:47:4a:bc:a7:bd:ff:a1:12:5c:88:06:ae:83:
a5:51:2a:8b:b1:80:40:75:b3:de:77:a7:4e:e3:d4:
2e:7a:75:0a:cc:30:c3:38:71:3d:85:f0:5a:a1:ea:
43:5d:cf:48:95:77:1b:f1:9a:97:40:0c:58:0a:d1:
eb:e3:67:65:f8:34:a1:91:ab:05:60:6b:85:ad:c7:
4b:88:87:65:fa:de:2d:63:f9:9b:09:71:ce:82:f3:
d6:c3:1e:12:42:7f:89:a1:da:ae:e4:b8:18:ce:cf:
2b:db:a5:ed:4e:8d:3d:51:61:04:08:27:5c:e6:96:
46:fb:81:c7:35:fe:d9:fb:e8:98:36:b5:f8:a6:a2:
b0:9d:41:ca:40:a3:b8:8e:fb:d5:1b:5b:25:7a:24:
10:fe:bb:11:05:7f:f0:75:cb:88:73:10:71:49:70:
8a:20:92:f6:61:37:ef:a8:06:b4:51:3d:ee:9f:f6:
a6:c2:3c:15:d7:77:d6:76:6f:ed:e9:48:c2:1e:fa:
18:a4:a2:b6:ff:7f:a2:63:e1:79:f2:b7:8c:b6:5c:
d4:94:fe:a5:02:e7:f5:0c:52:05:ae:89:d9:fb:d4:
12:61:d0:5a:6a:18:bf:f0:a1:c5:26:bd:30:ab:6a:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:C0:41:CD:7C:5D:E2:F7:2D:56:D0:FC:BA:53:6F:0D:E4:FC:F5
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:70:36:87:e0:63:44:fb:61:0a:7d:a1:0c:0f:ff:e3:52:c3:
2a:87:69:91:5c:99:05:18:42:99:62:1f:b4:dc:24:4d:f4:ed:
62:6b:b4:96:1d:a9:cb:6a:23:1e:03:82:e5:f1:f2:95:ab:11:
11:96:48:c8:08:d5:a7:24:85:0e:39:a4:3e:9c:1e:68:a5:c8:
84:b8:16:8b:59:89:7b:27:d0:82:46:1f:97:ba:4b:1d:8f:7f:
5d:db:d1:63:9e:62:c8:fd:60:2d:45:52:41:df:68:51:52:2c:
86:8c:4f:82:ef:52:a1:79:23:a6:3c:d7:51:bb:ee:d0:a7:6e:
46:61:86:cf:f7:08:f6:45:a8:1e:d9:ca:62:10:18:cc:98:44:
50:f0:9b:e3:14:50:57:0e:07:4d:6e:b1:e0:3f:b5:59:9c:f2:
c4:82:7c:fb:a7:a7:32:1f:0d:d2:88:57:99:08:14:10:84:12:
58:6f:42:fa:f9:e6:88:f5:f1:80:9c:48:9d:b6:0e:f5:86:96:
cf:fe:42:4a:1a:85:fe:2b:8c:38:bb:cd:d8:20:48:7e:cd:10:
04:f8:13:7b:bf:19:85:5f:d9:61:b7:0b:e3:b4:59:57:6b:cb:
2c:84:40:bd:57:00:00:6d:47:c1:60:c6:4e:fd:14:81:f2:2d:
e9:8f:f8:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91PgBo2ShHOYzJUUq9Is4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjYwOTIwMDgwMDQ1WhcNMjYwOTIxMDgwMDQ1WjAzMTEwLwYDVQQD
EyhmMDFhYzA0MWNkN2M1ZGUyZjcyZDU2ZDBmY2JhNTM2ZjBkZTRmY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq5CM02WZ8+Q14enLK9oeUdKvKe9
/6ESXIgGroOlUSqLsYBAdbPed6dO49QuenUKzDDDOHE9hfBaoepDXc9IlXcb8ZqX
QAxYCtHr42dl+DShkasFYGuFrcdLiIdl+t4tY/mbCXHOgvPWwx4SQn+Jodqu5LgY
zs8r26XtTo09UWEECCdc5pZG+4HHNf7Z++iYNrX4pqKwnUHKQKO4jvvVG1sleiQQ
/rsRBX/wdcuIcxBxSXCKIJL2YTfvqAa0UT3un/amwjwV13fWdm/t6UjCHvoYpKK2
/3+iY+F58reMtlzUlP6lAuf1DFIFronZ+9QSYdBaahi/8KHFJr0wq2oqcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAawEHNfF3i9y1W0Py6U28N5Pz1MB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHA2h+Bj
RPthCn2hDA//41LDKodpkVyZBRhCmWIftNwkTfTtYmu0lh2py2ojHgOC5fHylasR
EZZIyAjVpySFDjmkPpweaKXIhLgWi1mJeyfQgkYfl7pLHY9/XdvRY55iyP1gLUVS
Qd9oUVIshoxPgu9SoXkjpjzXUbvu0KduRmGGz/cI9kWoHtnKYhAYzJhEUPCb4xRQ
Vw4HTW6x4D+1WZzyxIJ8+6enMh8N0ohXmQgUEIQSWG9C+vnmiPXxgJxInbYO9YaW
z/5CShqF/iuMOLvN2CBIfs0QBPgTe78ZhV/ZYbcL47RZV2vLLIRAvVcAAG1HwWDG
Tv0UgfIt6Y/43w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:51:21 2026 by rpki-client