Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: iwL9MQ2BwTFylmXZkntBrKVh0NARFzCsaEH/wNwa4vc=
Subject key identifier: 21:DE:1F:44:18:EA:AC:1D:25:17:DA:B0:53:0B:A0:FB:09:AF:0F:99
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019FA7BD31D6F2B71E0DACC4E7B67AAF946C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 10E2
Signing time: Tue 28 Jul 2026 08:00:21 +0000
Manifest this update: Tue 28 Jul 2026 08:00:21 +0000
Manifest next update: Wed 29 Jul 2026 08:00:21 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: Sa+pCpCzdxtAa7+/XAxSje5pWFua8Iob8vjyCNDxKS4=)
2: Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (hash: IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=)
3: fk0rJpICkt4HosKM9biS-s54R4k.roa (hash: jEMhMu5Y75M093gIaOZAU+jMxmAtEVqkpOFyEZZLGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:31:d6:f2:b7:1e:0d:ac:c4:e7:b6:7a:af:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Jul 28 08:00:21 2026 GMT
Not After : Jul 29 08:00:21 2026 GMT
Subject: CN=21de1f4418eaac1d2517dab0530ba0fb09af0f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:8c:7a:aa:f0:1b:f9:96:2c:21:70:a9:12:
93:db:d9:82:b1:96:a5:67:de:e6:aa:16:ba:50:b1:
c3:b3:81:c5:fa:fc:aa:79:cb:82:b4:b0:80:e5:b0:
07:2d:5e:fa:51:5b:4c:d2:9c:25:8b:02:a1:11:b1:
f4:1e:41:16:b2:56:79:b0:53:4d:75:f8:75:19:5a:
da:64:87:75:a3:48:32:fe:c6:22:8c:a3:d9:b1:aa:
b2:55:1e:25:9c:d7:d7:75:2b:69:91:34:fa:53:11:
66:ed:4a:c9:53:e1:d6:f9:73:62:6f:b1:6e:6c:9c:
5c:54:3a:1b:bb:4b:47:91:e9:d1:73:a1:9e:8a:f7:
7c:76:00:a2:5b:c1:02:30:95:ba:6d:d2:60:c4:50:
41:a9:2d:ae:40:a4:78:15:a2:88:20:d3:3e:da:a0:
0f:8d:28:ee:2f:12:a6:a7:eb:80:12:79:08:55:06:
bb:ee:14:a7:70:a7:ea:93:2b:bc:ac:62:48:f0:7f:
dc:51:8a:67:ed:6a:30:a6:7a:54:6b:d3:40:c8:32:
7f:89:0e:36:cc:38:fe:0f:83:8f:3f:9c:18:fd:6e:
e1:a6:17:b8:4d:52:6d:a0:b9:ac:18:86:db:d5:8b:
8f:5c:89:13:70:6c:0e:7d:b5:2d:ee:dc:05:da:5d:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:1F:44:18:EA:AC:1D:25:17:DA:B0:53:0B:A0:FB:09:AF:0F:99
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1b:a0:54:97:a2:21:e0:92:9b:99:42:62:e5:ea:8d:b0:88:
8f:9b:26:a2:38:00:14:07:b2:13:0c:a6:e6:2d:f9:75:6f:bd:
80:47:b9:ed:d6:be:93:81:f4:63:51:4c:64:37:4b:90:3a:85:
3a:0a:04:54:70:89:38:ab:56:79:d2:61:bb:5c:91:3f:51:5a:
68:df:f1:a4:ed:45:d5:0f:22:f8:97:c3:e4:fd:35:c7:3c:3b:
66:c6:f2:be:94:ba:47:71:33:f2:82:ff:d9:d0:b1:39:b5:f2:
48:2e:2c:97:1f:aa:ae:85:39:35:e6:bf:ce:2d:47:56:78:0b:
f9:2e:15:0b:5a:5e:da:06:cf:03:cc:f4:c6:31:3b:68:f8:c1:
1e:a6:e4:b1:af:9e:43:33:de:d2:af:1f:81:5f:d5:f6:9b:32:
5f:30:61:4f:b5:a5:03:3f:2a:db:9e:cc:9c:8f:65:df:18:e2:
de:94:12:c6:a8:16:20:16:5e:30:f0:95:1b:0c:a5:1d:cf:0b:
64:15:3d:63:a8:ac:e8:be:3d:9d:04:1c:85:02:dc:b8:8f:bc:
1b:10:98:da:d9:d3:6f:24:92:a2:29:9a:ca:ae:df:27:bd:0c:
fb:25:c4:0c:91:bd:a2:36:c0:23:9b:a5:1f:ab:19:ea:d2:ab:
65:41:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:27 2026 by rpki-client