Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json)
Hash identifier: xkW3RSrGv9Yz2+HXIE5xUzTfsNxtBuLzHYLboiwA9Ds=
Subject key identifier: FC:3E:F8:88:B7:55:28:D4:36:C0:B1:64:49:6C:9F:DB:17:72:12:36
Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a
Certificate serial: 019FACAC9A96C43767263CB5ECF24993CA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
Manifest number: 02A6
Signing time: Wed 29 Jul 2026 07:00:20 +0000
Manifest this update: Wed 29 Jul 2026 07:00:20 +0000
Manifest next update: Thu 30 Jul 2026 07:00:20 +0000
Files and hashes: 1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: +D7zJjc7s6nDOmk8gEAe78SEH/lQrUcppdWpKClpueE=)
2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:9a:96:c4:37:67:26:3c:b5:ec:f2:49:93:ca:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a
Validity
Not Before: Jul 29 07:00:20 2026 GMT
Not After : Jul 30 07:00:20 2026 GMT
Subject: CN=fc3ef888b75528d436c0b164496c9fdb17721236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:e6:cf:6d:f9:7b:c7:1c:01:95:0f:2c:e2:
85:2c:18:88:cd:b7:45:18:16:9f:df:c0:ca:2b:87:
80:71:ed:3d:93:f3:51:bd:c3:f6:8a:91:67:47:0c:
0f:7a:b0:34:42:58:12:74:b3:90:51:4f:94:40:47:
bd:c0:ce:c3:e5:42:b6:8c:43:25:3b:cc:39:c1:33:
d5:10:e8:ad:48:86:0b:7c:cb:d2:cb:24:b6:f0:6c:
25:cf:5a:de:4d:c5:85:43:81:1b:51:ed:71:25:9d:
18:ec:3c:99:5a:28:ca:ca:8d:0f:a0:f9:a1:c2:0f:
41:36:f6:ea:54:2d:e2:9e:7f:77:b9:4b:d3:0f:95:
eb:95:98:15:a6:ff:d5:b6:48:f9:7b:b7:87:0c:e5:
c3:1d:4a:cf:39:1c:97:db:88:62:7b:96:97:1f:ef:
1f:e6:48:04:5f:71:83:27:b0:93:5e:ee:63:e6:53:
1b:b6:52:b5:22:3d:d9:c5:e7:18:11:7b:56:d4:61:
06:05:39:0b:48:31:05:8d:22:f9:f7:42:62:23:8f:
1d:91:21:d5:5b:4d:46:04:a9:a9:bb:77:e5:9f:41:
43:15:b1:4b:e8:69:81:47:fb:fe:ab:d1:f1:58:3b:
6b:f9:a1:64:15:c7:a2:b8:d9:51:9f:4c:c5:d3:6f:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3E:F8:88:B7:55:28:D4:36:C0:B1:64:49:6C:9F:DB:17:72:12:36
X509v3 Authority Key Identifier:
keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:88:c7:0f:17:c3:04:fd:b1:f9:a9:bf:b5:9b:66:0d:6c:e1:
16:06:3d:fc:33:8a:70:b7:ad:9d:7b:24:32:31:ee:10:21:d5:
42:a8:b6:1d:d5:a5:d5:17:1d:70:d9:91:a2:f6:e6:2c:8e:f6:
eb:17:4e:f4:5c:c4:c5:3d:d9:a6:c7:82:2c:85:7f:75:85:eb:
35:3a:6c:5d:61:8d:c9:42:d0:43:e8:cc:1f:59:6b:72:fc:bf:
84:f6:36:97:5b:08:b2:a6:d0:72:10:6b:24:8e:e4:57:14:d7:
69:8d:e0:d3:56:43:07:0e:9f:0b:93:db:16:48:b9:f1:58:b0:
2b:a5:3b:62:37:6b:03:db:91:6b:c1:41:11:bd:e2:bc:26:62:
23:93:43:6b:5d:f9:52:23:f7:86:df:a2:50:3a:2d:13:3d:d9:
f0:bc:93:3b:01:3c:27:07:5d:a0:09:de:71:a7:8d:8f:35:ba:
35:93:2e:75:f7:fb:97:3d:be:54:e1:4a:06:53:cf:a0:52:03:
3f:eb:7e:5f:e9:b0:a9:eb:f6:eb:cb:2c:b6:37:a8:5d:a8:8e:
51:c5:7e:a1:7f:5d:57:f3:b5:01:20:38:6b:e5:2f:8b:06:22:
46:67:cc:bf:77:18:02:17:c6:6c:6b:af:89:e6:c0:45:b5:93:
f0:bd:fe:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srJqWxDdnJjy17PJJk8okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjQ2YmZhMjA0NmZiYzk4ZTYyN2Y0MDM0ODMyNzExMjNi
ZWNhMGEwHhcNMjYwNzI5MDcwMDIwWhcNMjYwNzMwMDcwMDIwWjAzMTEwLwYDVQQD
EyhmYzNlZjg4OGI3NTUyOGQ0MzZjMGIxNjQ0OTZjOWZkYjE3NzIxMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyObmz235e8ccAZUPLOKFLBiIzbdF
GBaf38DKK4eAce09k/NRvcP2ipFnRwwPerA0QlgSdLOQUU+UQEe9wM7D5UK2jEMl
O8w5wTPVEOitSIYLfMvSyyS28Gwlz1reTcWFQ4EbUe1xJZ0Y7DyZWijKyo0PoPmh
wg9BNvbqVC3inn93uUvTD5XrlZgVpv/Vtkj5e7eHDOXDHUrPORyX24hie5aXH+8f
5kgEX3GDJ7CTXu5j5lMbtlK1Ij3ZxecYEXtW1GEGBTkLSDEFjSL590JiI48dkSHV
W01GBKmpu3fln0FDFbFL6GmBR/v+q9HxWDtr+aFkFceiuNlRn0zF0280nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPw++Ii3VSjUNsCxZElsn9sXchI2MB8GA1UdIwQY
MBaAFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDkt
Y2Q1MjU1NzMzMzA0LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDktY2Q1MjU1NzMzMzA0
LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmojHDxfD
BP2x+am/tZtmDWzhFgY9/DOKcLetnXskMjHuECHVQqi2HdWl1RcdcNmRovbmLI72
6xdO9FzExT3ZpseCLIV/dYXrNTpsXWGNyULQQ+jMH1lrcvy/hPY2l1sIsqbQchBr
JI7kVxTXaY3g01ZDBw6fC5PbFki58ViwK6U7YjdrA9uRa8FBEb3ivCZiI5NDa135
UiP3ht+iUDotEz3Z8LyTOwE8JwddoAnecaeNjzW6NZMudff7lz2+VOFKBlPPoFID
P+t+X+mwqev268sstjeoXaiOUcV+oX9dV/O1ASA4a+UviwYiRmfMv3cYAhfGbGuv
iebARbWT8L3+WA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:47 2026 by rpki-client