Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: 5WCKtwmWvAWcup6jtIGkOQD+R1DJN7kz9XIfc6skKmo=
Subject key identifier: 55:C6:54:B3:B9:27:24:B9:99:D6:F4:33:0B:25:B7:4D:CE:2A:B7:A8
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01A1DD94E5ED5B823C37094AA3E6124D1176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 1207
Signing time: Sun 15 Nov 2026 05:01:25 +0000
Manifest this update: Sun 15 Nov 2026 05:01:25 +0000
Manifest next update: Mon 16 Nov 2026 05:01:25 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: dH7i+sCan7nIIQf4wKvwewe9cB7wAFZoe7fJ8eu6SZk=)
2: Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (hash: IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:e5:ed:5b:82:3c:37:09:4a:a3:e6:12:4d:11:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Nov 15 05:01:25 2026 GMT
Not After : Nov 16 05:01:25 2026 GMT
Subject: CN=55c654b3b92724b999d6f4330b25b74dce2ab7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:54:4c:bb:ac:50:13:e8:00:1b:3e:81:bf:
7e:c6:7d:55:a0:c1:4e:0d:a1:be:81:15:d6:37:8d:
6b:4e:83:a1:8d:87:42:5c:fd:d3:e7:83:37:97:b0:
f3:dc:1d:61:81:ec:00:03:fe:d3:62:80:62:79:6f:
d4:a4:da:27:61:07:92:be:c4:be:a8:7f:8f:eb:98:
00:4a:81:39:74:d0:b7:e4:64:46:61:fe:1c:f3:51:
0c:4a:2c:78:b0:98:38:c3:f0:a5:b5:57:be:cc:0f:
fd:2c:69:81:c0:3a:09:21:48:89:20:64:f6:14:10:
f6:c3:ef:01:70:e3:66:a5:99:49:12:85:be:f6:57:
b3:f8:68:0a:d0:31:4c:c4:f7:ac:81:42:49:7c:c8:
a8:d0:90:5f:bc:88:80:a4:9b:89:6f:08:ed:f2:46:
21:7e:9a:22:94:e1:e8:46:9f:c7:a8:77:fb:69:07:
af:b0:4d:27:c0:9a:bf:35:a8:78:30:51:f2:52:89:
d0:2c:d4:07:7d:7d:90:21:67:91:85:0c:82:e9:5b:
b4:4b:10:89:9f:88:7d:b0:7a:af:59:9a:72:9f:c4:
d0:fd:00:a8:2b:79:37:5a:3f:d0:28:8e:42:bb:b4:
5b:b5:d3:96:7c:79:80:7d:93:69:41:86:b7:98:5e:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C6:54:B3:B9:27:24:B9:99:D6:F4:33:0B:25:B7:4D:CE:2A:B7:A8
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4a:e0:95:47:fd:5e:f0:c8:68:54:c6:d1:c9:fe:b8:1a:3e:
93:cd:e0:a5:78:44:39:b9:c8:a7:49:28:6e:c0:0d:f1:77:f6:
b8:15:2a:4e:34:6a:92:c0:f4:42:b3:d1:45:70:c4:3f:77:d8:
c8:52:e2:39:cb:40:00:3f:35:5e:20:81:f2:30:18:de:5f:53:
d7:b6:25:61:2c:0c:49:57:eb:58:86:ae:ef:c8:b7:16:1e:8d:
a2:89:52:1a:f1:b8:c4:4f:70:7e:dc:02:a3:e7:6f:2d:08:8c:
a3:5f:4a:f5:7a:2c:c2:5f:3b:09:9f:5f:85:7f:fd:12:31:22:
26:68:2e:ae:f7:98:52:e9:d9:d2:6a:21:2d:fa:0e:a9:41:9d:
bf:e4:62:f2:fc:0f:12:c0:ff:a6:8b:c3:f1:97:93:a2:8c:5c:
5c:db:4d:1e:bf:94:98:d7:ed:f0:b3:e5:6c:1b:14:13:be:6b:
e0:fb:d8:e2:1e:23:09:55:b9:cc:2c:f5:c6:10:a7:1f:a0:cf:
2b:c4:5a:00:35:8d:c5:4c:cf:51:4f:6d:b4:2f:f9:6a:58:40:
cc:b1:8d:40:de:d8:e2:25:1f:ad:7b:0b:30:08:6e:79:8c:08:
77:ff:f8:3f:8b:7c:ad:2d:d7:7f:99:d4:63:af:71:41:d8:4d:
b9:32:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:16 2026 by rpki-client