Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: 27ZP1n8nqlpUqKKSQV9HJBMObRYBvk2URYo2YUTJsX0=
Subject key identifier: 36:A7:0C:58:F2:9A:A6:2C:32:E7:42:3B:0D:3A:C5:7C:E1:81:4F:21
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019CAB346B70FB9224EEBF816D687EE785F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: 1IndVB8RiPM7d+Gznee3Sb0QoTBvj2u8hjuvo44z7io=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6b:70:fb:92:24:ee:bf:81:6d:68:7e:e7:85:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=36a70c58f29aa62c32e7423b0d3ac57ce1814f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:ec:8a:92:0f:53:e8:57:70:ac:e6:88:40:
85:b2:d9:f4:4a:0e:21:23:da:9f:57:5f:bd:fb:2e:
ae:ec:98:eb:54:02:db:67:6f:a0:83:48:08:c9:0c:
57:29:2f:33:1d:c6:e1:ce:39:c6:d4:63:7f:8c:0d:
00:25:ac:40:2f:d5:90:03:7b:97:f5:c1:b2:1e:ee:
bd:f3:8c:83:0f:de:7f:bb:a5:59:af:1b:5d:3b:0d:
a4:3b:a6:0a:2d:20:30:90:38:8d:f7:e8:ba:01:80:
17:bc:a1:f6:64:75:af:a8:d6:cf:d3:82:e7:bb:d5:
dc:ef:67:0c:89:9d:3e:11:15:8f:72:ed:bd:14:89:
56:e5:dd:1c:22:6c:7c:14:cc:b3:8c:40:63:e8:65:
55:85:d1:da:74:7c:d2:b9:09:0c:f8:c7:e6:d6:02:
d4:d9:7b:75:e7:4a:de:27:af:b0:e6:64:0f:d1:b2:
2b:74:4e:70:cd:e9:ab:82:6f:87:2b:80:4f:6b:31:
14:0d:f9:c9:7d:b5:58:16:dc:95:7d:be:5d:d8:82:
5f:af:4e:46:22:44:4c:41:82:e2:52:6f:62:ab:9a:
57:2d:56:47:28:a7:58:63:4d:be:33:8f:5a:99:a7:
5e:61:52:a6:a9:16:59:ed:60:60:7b:e6:c4:b2:95:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A7:0C:58:F2:9A:A6:2C:32:E7:42:3B:0D:3A:C5:7C:E1:81:4F:21
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:eb:57:dd:df:a8:ee:a3:30:31:99:62:a7:92:e2:74:64:1c:
53:c3:1d:82:6b:5e:9c:28:9a:60:a4:e7:c0:84:d2:ac:a1:34:
db:01:c2:13:68:4d:f1:7b:2b:cb:c0:98:65:cb:ae:84:ae:fc:
01:40:d1:39:d8:3b:9e:24:88:6c:5a:76:c7:af:45:2d:73:69:
b6:eb:97:3d:c5:91:d8:cf:c1:ff:3a:86:b9:1a:10:fb:84:04:
53:05:73:cf:cc:1c:10:fc:75:ae:94:7b:f6:fe:37:95:54:00:
dd:73:b8:ab:cd:21:db:b4:3d:59:7b:37:ef:9d:59:62:47:9a:
e7:12:9c:4e:6e:c0:cf:f6:07:c8:fc:24:82:5d:2c:81:89:67:
25:42:53:29:98:66:f5:b4:5b:7b:9d:64:1a:88:92:06:7e:66:
e1:1c:ba:31:de:34:00:a9:b1:6c:e9:4d:08:11:2f:80:a3:3a:
6b:40:72:a7:ca:d3:62:bd:cf:47:2b:ac:67:cb:a6:cd:a0:9c:
b5:36:63:6b:22:72:af:75:e5:2c:a3:4f:c2:26:37:f5:ec:f1:
06:34:3e:ea:ae:07:4d:b0:37:65:b6:3c:80:90:6f:2b:4e:bf:
02:79:fd:3c:69:41:43:b3:b4:35:73:dc:c5:68:36:4b:92:a2:
73:67:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:44 2026 by rpki-client