Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: a7u/igLsBKt6v3QIeKE9+Lr/nllifSCPUFlG5xihaz4=
Subject key identifier: 52:45:B9:01:44:BA:C9:BD:3B:58:54:7C:EF:EE:BC:FF:D9:6A:AC:C0
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01A0C3A01C0AB3DE5D54EE4FCD87C271F960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 1175
Signing time: Mon 21 Sep 2026 11:00:45 +0000
Manifest this update: Mon 21 Sep 2026 11:00:45 +0000
Manifest next update: Tue 22 Sep 2026 11:00:45 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: MQT1mhGnHMqmiqh4WfQhb0XAH2t9xLb9nh5CZnfugh0=)
2: Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (hash: IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:1c:0a:b3:de:5d:54:ee:4f:cd:87:c2:71:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Sep 21 11:00:45 2026 GMT
Not After : Sep 22 11:00:45 2026 GMT
Subject: CN=5245b90144bac9bd3b58547cefeebcffd96aacc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:52:f0:80:8a:60:88:6e:77:b3:aa:d4:56:
be:43:c5:05:82:f2:91:0f:98:b1:f0:80:32:73:91:
0c:90:be:3d:38:72:b4:14:cb:0a:21:ea:0d:00:ae:
9f:e1:94:05:dd:ec:13:30:76:d0:b6:00:ca:3e:3e:
f4:9f:5c:e8:f2:51:8b:89:fc:96:d2:84:e5:8a:c1:
e1:a7:cb:e5:38:4f:1a:a0:60:18:0d:63:2f:e5:28:
67:6e:e3:4b:22:d6:64:0b:cb:d7:04:fa:19:c5:84:
96:6d:de:2d:bb:d8:1f:19:cb:03:c9:1e:63:69:d4:
16:8e:36:5a:05:b3:dc:16:7b:28:09:43:10:00:a5:
c9:08:01:37:42:4a:45:c0:fb:47:e4:e9:55:a2:57:
ae:2c:e0:40:ec:31:eb:87:ab:03:28:79:31:85:4b:
f5:c5:76:89:b1:8c:f3:ce:4f:f4:f6:0c:e7:45:ba:
e2:0f:fe:b2:b2:48:ed:d6:31:6e:c7:3a:f4:51:d9:
d3:2c:40:35:cc:35:5f:e6:36:b7:61:84:4a:f1:33:
a4:68:0f:21:ff:51:16:0e:86:c3:81:e2:b6:e2:e6:
18:2e:17:c1:af:ac:ff:bd:81:ec:a0:35:ff:50:84:
36:36:65:92:be:4b:5e:e7:ed:36:57:53:7a:79:34:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:B9:01:44:BA:C9:BD:3B:58:54:7C:EF:EE:BC:FF:D9:6A:AC:C0
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c9:a5:e6:5d:86:87:5a:4e:d6:a8:09:3d:b6:c6:ce:20:63:
c1:be:cd:ed:bd:6f:13:2f:74:8a:d9:d2:73:ca:8b:1d:3e:9f:
f7:c6:65:ea:78:54:21:6b:ae:04:81:fe:fb:fa:97:47:f3:68:
83:cd:10:3b:b2:92:a7:3a:49:c1:f1:9b:d3:23:27:db:84:83:
9d:64:03:2c:3f:13:4f:9d:36:55:a6:87:bb:27:21:1a:79:4b:
1d:22:ff:d2:21:24:c5:7e:56:c9:d7:05:7a:36:52:f4:a2:c3:
61:50:76:58:1a:a4:6e:de:93:58:14:2e:c7:44:07:7f:8a:75:
14:0a:1b:5b:42:ee:b4:65:4e:ac:16:a7:25:20:c8:16:25:b0:
47:ca:89:2c:08:c8:ac:19:b5:df:05:16:9e:6d:70:52:04:9f:
3d:eb:7e:15:48:18:0a:1e:6a:3f:d4:aa:f0:b1:e7:f2:93:ca:
02:93:57:cc:bb:18:66:15:cf:66:3a:e8:ec:45:36:2f:7c:5b:
ba:5e:a0:2a:7e:05:cb:6b:fe:cf:9a:77:94:44:76:b1:5c:33:
ea:55:e9:64:ac:d7:d2:66:61:36:73:52:30:8e:6d:ff:e8:a7:
13:d0:4c:66:04:10:27:44:c7:90:e8:f4:70:22:bc:1d:58:83:
5d:53:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:43:26 2026 by rpki-client