Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: RMNc68ew4rHMPg4WKw6+8NnKlydHchBM1nVTSjSVYng=
Subject key identifier: DC:C7:A2:32:5C:28:C2:E4:55:70:79:75:EF:6E:E6:D9:1A:01:22:8F
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019D97E16A3443C7B5D23442583CCE442C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0FD0
Signing time: Thu 16 Apr 2026 20:00:25 +0000
Manifest this update: Thu 16 Apr 2026 20:00:25 +0000
Manifest next update: Fri 17 Apr 2026 20:00:25 +0000
Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=)
2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: stmh8JEhDFFxO1G4cZxYjLe7rAF6D84XqJ5fQZbw7+g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:6a:34:43:c7:b5:d2:34:42:58:3c:ce:44:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Apr 16 20:00:25 2026 GMT
Not After : Apr 17 20:00:25 2026 GMT
Subject: CN=dcc7a2325c28c2e455707975ef6ee6d91a01228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:7f:ce:f2:7d:6b:f8:3e:fc:b0:40:f2:90:
fb:29:90:0a:f3:4c:9e:9b:60:d8:6c:64:27:c3:96:
4b:9b:83:3b:e9:04:9e:f0:3f:96:44:67:87:64:3f:
ae:94:0f:99:da:98:49:7e:95:63:34:9e:10:5c:6f:
94:58:f8:bd:e2:7f:fb:8e:ed:0a:54:01:80:39:72:
c2:91:ef:9b:b6:5d:03:76:34:0d:ba:b1:ff:15:74:
f9:91:74:ec:78:8c:69:64:05:f7:86:2a:17:08:5e:
8f:f9:aa:bd:07:bd:8e:4d:2b:1a:ab:46:9c:82:09:
a1:16:40:3e:b8:f6:40:aa:80:c1:c3:51:07:98:72:
8b:a8:90:e0:04:be:b1:63:09:0b:60:7b:52:48:19:
0d:32:5c:b0:db:e5:aa:d5:8f:5c:bc:cb:29:63:ad:
e5:9f:60:a1:22:8f:28:fe:f4:e5:e7:58:bb:c7:fa:
b9:62:59:8a:d6:01:54:24:9e:06:d9:15:a1:4a:d2:
bd:2d:aa:d1:fb:57:a4:79:d0:96:15:1b:c1:91:79:
86:13:0a:5b:76:88:88:61:56:f5:41:a9:bc:66:32:
79:05:e5:ff:92:5c:28:8c:5f:54:fd:62:56:b2:43:
d3:13:96:2d:aa:4e:da:8e:48:74:ae:44:fc:16:46:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C7:A2:32:5C:28:C2:E4:55:70:79:75:EF:6E:E6:D9:1A:01:22:8F
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7d:aa:f5:32:73:ef:be:1c:96:79:66:29:7f:64:c8:0b:2d:
9b:cf:9e:2e:99:7b:94:ca:e7:16:b8:8c:0e:bb:de:a6:be:2f:
a7:d1:92:eb:24:5b:73:f4:0f:09:94:b3:a3:1c:c9:77:0b:30:
44:a1:40:6f:66:b6:74:8d:fe:24:24:e6:80:1e:2d:20:3c:13:
3e:c0:b8:17:ad:a2:c9:59:2e:10:f9:f1:87:07:99:30:9f:d0:
ad:e3:a8:62:8f:8a:a3:4c:06:fa:ec:25:c9:aa:38:d3:ea:58:
71:aa:14:ed:0f:22:33:87:43:4b:97:27:a4:e3:64:a8:5a:84:
3b:6f:d6:e3:62:eb:2f:85:01:97:91:5a:46:b3:9e:f6:4e:e7:
8a:de:d5:90:97:85:8d:50:79:e6:a3:71:53:43:67:31:48:1a:
6f:13:56:b1:07:f1:70:58:3a:51:f9:d0:b9:c9:c6:2f:b3:86:
d1:75:74:b7:8e:f6:94:63:28:55:7c:6f:17:67:60:d1:3a:81:
46:aa:16:11:64:33:db:1d:50:97:fd:43:da:ea:62:49:cf:b1:
0d:ba:4e:94:68:df:6f:e3:ad:1e:08:bc:42:64:81:46:5b:a4:
a9:71:19:43:0f:76:09:e0:1f:fc:56:20:1b:0a:8f:2d:32:d4:
d0:14:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:23 2026 by rpki-client