Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: fl8VNAG3Gk0j1C687be6x9foXy6oyLn6tOgmOVmZFuw=
Subject key identifier: E4:8C:24:65:E4:D0:71:0E:F9:AF:B4:8B:41:03:84:76:22:5F:6E:92
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019CA86A661C85B38B8E78DFDA2CEFAF983F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0F54
Signing time: Sun 01 Mar 2026 08:01:11 +0000
Manifest this update: Sun 01 Mar 2026 08:01:11 +0000
Manifest next update: Mon 02 Mar 2026 08:01:11 +0000
Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=)
2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: Kz8WTu5R0msJkW3CDz+xg723UfxOL2YpnU3cFQwTd0M=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:66:1c:85:b3:8b:8e:78:df:da:2c:ef:af:98:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Mar 1 08:01:11 2026 GMT
Not After : Mar 2 08:01:11 2026 GMT
Subject: CN=e48c2465e4d0710ef9afb48b41038476225f6e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:be:03:31:da:f7:6b:5a:89:33:72:de:b1:
94:df:a0:f8:a2:53:30:0d:b3:61:78:ce:e4:bd:d5:
42:23:b8:27:e1:8c:fd:bf:bf:7d:72:66:8b:95:c4:
9c:71:cc:69:87:14:1f:db:b3:9f:e4:0b:9e:33:79:
44:27:02:06:98:10:27:0f:63:b1:f3:6a:e1:46:2e:
75:d6:5e:f4:bd:93:4d:93:be:80:ad:9c:a0:67:aa:
d5:0e:76:f3:a2:94:24:15:81:cf:03:be:cb:b7:45:
0e:30:c0:2a:17:cb:1b:d1:ba:d3:ad:1d:bd:af:6e:
f1:bd:67:09:8f:08:e8:02:77:39:6d:7d:d7:4a:86:
f4:1e:d7:b6:29:ac:df:8d:b1:9f:0f:49:5d:4a:03:
2b:e0:a3:7a:c1:12:e1:17:1c:a9:a9:8b:10:b9:23:
57:31:13:8c:ed:85:61:f7:b9:a7:aa:c9:4b:a8:61:
6d:df:2b:c6:c2:0e:35:82:3d:98:a6:a3:5d:4b:b0:
45:45:33:84:a1:9b:71:43:aa:44:14:dc:64:e7:29:
52:db:04:6f:b0:17:7e:ea:18:34:38:8b:f9:19:69:
66:6d:aa:5f:2e:01:1b:f3:bc:8e:5b:d3:33:8b:bb:
f5:b1:51:3e:fb:ed:96:5a:e6:74:48:4f:74:fe:c4:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8C:24:65:E4:D0:71:0E:F9:AF:B4:8B:41:03:84:76:22:5F:6E:92
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:47:59:b2:8f:19:75:26:b0:b6:d7:b3:21:ea:96:db:4c:4c:
40:6b:8d:0d:04:af:a5:59:dd:f8:db:99:95:d1:27:9c:b5:40:
eb:41:d2:17:65:5a:1b:32:8a:0d:d8:db:12:fd:67:cb:7b:1b:
de:3e:91:06:59:df:47:a6:7b:4b:6a:8a:4a:df:57:d2:aa:ca:
1d:80:57:54:0c:fd:03:e5:a9:c6:8d:bf:ff:03:94:13:ec:62:
18:0f:f3:7d:0f:dd:a6:cb:4f:90:83:16:1c:ee:55:6e:e3:60:
ce:db:4b:1f:3d:70:d6:8e:d7:fe:41:48:ee:82:af:a1:c9:80:
3b:7a:74:6d:62:f6:3a:cb:b7:4c:8a:ab:da:09:3b:af:0c:bf:
91:1b:a8:0e:9b:ae:55:e8:f2:25:41:e8:25:6a:66:6a:06:5d:
4e:11:ab:c4:fe:65:f2:e7:fc:20:7c:f3:69:61:19:24:dd:fa:
20:08:02:e0:eb:d3:c5:fd:e3:1b:23:b3:a7:9f:ff:f2:be:cc:
42:cc:3d:d6:54:31:2a:a0:ee:6f:d4:24:23:cc:22:35:44:f5:
74:88:ae:81:5e:df:b5:7d:c2:90:74:cf:b4:46:41:72:76:55:
00:0a:50:bf:e1:3f:8c:b1:80:41:7b:6e:05:fc:ed:82:e6:f8:
fb:19:35:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoamYchbOLjnjf2izvr5g/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjYwMzAxMDgwMTExWhcNMjYwMzAyMDgwMTExWjAzMTEwLwYDVQQD
EyhlNDhjMjQ2NWU0ZDA3MTBlZjlhZmI0OGI0MTAzODQ3NjIyNWY2ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss++AzHa92taiTNy3rGU36D4olMw
DbNheM7kvdVCI7gn4Yz9v799cmaLlcScccxphxQf27Of5AueM3lEJwIGmBAnD2Ox
82rhRi511l70vZNNk76ArZygZ6rVDnbzopQkFYHPA77Lt0UOMMAqF8sb0brTrR29
r27xvWcJjwjoAnc5bX3XSob0Hte2KazfjbGfD0ldSgMr4KN6wRLhFxypqYsQuSNX
MROM7YVh97mnqslLqGFt3yvGwg41gj2YpqNdS7BFRTOEoZtxQ6pEFNxk5ylS2wRv
sBd+6hg0OIv5GWlmbapfLgEb87yOW9Mzi7v1sVE+++2WWuZ0SE90/sQ4TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSMJGXk0HEO+a+0i0EDhHYiX26SMB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0dZso8Z
dSawttezIeqW20xMQGuNDQSvpVnd+NuZldEnnLVA60HSF2VaGzKKDdjbEv1ny3sb
3j6RBlnfR6Z7S2qKSt9X0qrKHYBXVAz9A+Wpxo2//wOUE+xiGA/zfQ/dpstPkIMW
HO5VbuNgzttLHz1w1o7X/kFI7oKvocmAO3p0bWL2Osu3TIqr2gk7rwy/kRuoDpuu
VejyJUHoJWpmagZdThGrxP5l8uf8IHzzaWEZJN36IAgC4OvTxf3jGyOzp5//8r7M
Qsw91lQxKqDub9QkI8wiNUT1dIiugV7ftX3CkHTPtEZBcnZVAApQv+E/jLGAQXtu
Bfztgub4+xk1QA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:09 2026 by rpki-client