Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: lQvgU/k9ZwZMl2BTvANkEqOGUpDtxNdD/F9yUD19n1w=
Subject key identifier: D2:F1:87:B5:06:E7:65:8A:DE:A0:C2:4C:C2:59:B3:C3:14:6E:8D:6F
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019EBF5A7FF28ED0D9DC7BDC5AFA1AA1DB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 1069
Signing time: Sat 13 Jun 2026 05:00:39 +0000
Manifest this update: Sat 13 Jun 2026 05:00:39 +0000
Manifest next update: Sun 14 Jun 2026 05:00:39 +0000
Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=)
2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: VqOMd89vsL1EnEDibTLm+4CYqaSeXAf4pbJjpfWIN9k=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:7f:f2:8e:d0:d9:dc:7b:dc:5a:fa:1a:a1:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Jun 13 05:00:39 2026 GMT
Not After : Jun 14 05:00:39 2026 GMT
Subject: CN=d2f187b506e7658adea0c24cc259b3c3146e8d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:d7:b0:2c:b3:26:80:53:3c:05:42:3b:32:
0b:a4:c3:13:db:e4:b4:cf:ac:5a:1e:d4:bd:ab:93:
b6:49:35:fd:a0:4f:28:79:18:1e:2b:b9:91:92:07:
79:81:0d:87:9c:ed:94:6e:3c:ec:1b:ad:66:54:af:
a8:bd:3c:33:90:c0:c4:d5:10:1f:41:b6:69:8d:50:
c0:dd:cb:3c:b7:f4:55:a6:4f:b1:18:64:ce:0b:59:
15:8d:38:b4:dc:79:c0:48:8c:7f:c4:57:32:64:d1:
60:02:cc:3a:18:d0:c4:42:af:84:fb:33:57:a0:86:
ef:7d:88:83:34:0e:da:07:cf:f1:bb:84:e0:ee:08:
6e:5b:31:67:3a:42:e6:e1:fc:54:18:c6:ee:73:b1:
5b:68:a7:40:78:17:86:91:54:67:ef:cd:c0:36:c9:
4f:66:51:47:a0:68:bf:26:7b:74:b8:58:b3:f2:e1:
d1:51:44:e8:99:1f:4a:ec:08:4a:3a:e9:48:1d:87:
72:ed:3a:c3:0a:c5:28:9f:b3:42:03:f5:29:dd:ca:
4d:54:94:e1:94:42:00:6e:de:77:72:c0:68:6c:5a:
eb:05:b1:8b:ae:aa:fa:7b:c0:8b:4f:3e:32:9b:49:
c6:e6:b0:f6:0b:db:83:fd:76:0f:40:23:9f:33:cd:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:87:B5:06:E7:65:8A:DE:A0:C2:4C:C2:59:B3:C3:14:6E:8D:6F
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:d6:72:7d:f6:57:7e:87:9f:a2:86:db:75:9a:05:c8:5b:
8f:f1:22:3d:6a:ff:e8:e2:d9:f7:0f:fb:f2:be:75:5d:7c:af:
b4:37:1e:23:81:be:81:21:67:c2:f0:ae:30:8e:92:df:58:12:
22:ec:4a:3d:cf:18:8d:1d:8d:09:94:48:41:13:bf:89:2b:c0:
96:7e:b6:dc:16:a9:b6:11:11:39:74:28:6b:6b:38:cf:a0:e6:
35:ff:af:df:1e:dd:43:0e:a8:b2:95:49:3f:0a:f3:32:2e:b6:
f2:cf:6e:19:eb:99:02:42:48:9c:c1:59:ff:1d:1e:44:10:de:
59:6d:3a:49:7c:b4:a8:0e:f6:75:06:bd:48:0e:2b:de:11:51:
84:72:df:83:1a:6a:17:fe:16:18:7e:25:b7:72:c1:a8:a7:27:
1a:ce:8a:28:22:73:f5:9d:9e:5d:62:f0:8c:22:00:dd:a4:9b:
6f:a6:c2:1f:81:42:18:29:fc:6b:da:12:2c:79:ce:d3:57:a4:
c4:86:46:0f:82:9d:5b:7c:da:e6:f6:51:06:3f:7c:cc:5f:81:
3d:7a:6a:0e:5b:bd:e9:b2:ce:0c:cf:72:fa:c8:25:94:0d:55:
48:3e:a6:6a:03:3d:26:8a:fc:ca:69:16:5d:e9:d4:19:1b:6f:
42:17:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:25 2026 by rpki-client