Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: POvdBF/1QtUFT++FZpKfLYMDMeD2dY4/UYX9Yjz2odI=
Subject key identifier: 38:0A:EE:91:43:7B:A3:0E:E5:11:B4:AF:D9:A9:97:44:43:3B:10:FE
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019DA45377BF642ADCF106052ACEAE4D2C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 06:00:26 +0000
Manifest this update: Sun 19 Apr 2026 06:00:26 +0000
Manifest next update: Mon 20 Apr 2026 06:00:26 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: mcuK89d55SrB8s9UaI2TR8ujywvUd5qdueKDLZQMw9U=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:77:bf:64:2a:dc:f1:06:05:2a:ce:ae:4d:2c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Apr 19 06:00:26 2026 GMT
Not After : Apr 20 06:00:26 2026 GMT
Subject: CN=380aee91437ba30ee511b4afd9a99744433b10fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5b:31:df:de:08:07:fe:5d:da:3f:f0:87:10:
a2:0b:24:ee:b5:44:bb:b3:d8:21:b1:d4:f2:16:e9:
8d:0e:57:e1:0b:37:de:4c:5a:51:2f:33:b5:ce:eb:
34:27:e8:9f:41:a1:cf:7f:ab:7e:12:ec:cd:a1:b1:
c2:f5:91:ad:ca:73:ef:69:87:ba:7e:d8:bf:bd:96:
64:50:b9:c4:37:7b:68:d7:3f:9e:b5:1f:6d:ad:b9:
35:61:8f:0d:7d:b6:e7:38:8f:5e:1e:90:84:85:6c:
fa:d8:92:25:a3:a9:c2:6e:b1:08:1f:39:9b:2a:95:
0f:20:54:02:d5:79:a2:cd:9b:d2:fa:7a:86:7e:d3:
17:eb:10:e5:16:5c:ef:21:b3:18:11:83:9a:5e:e8:
1d:69:55:72:97:f0:02:28:30:c7:ab:ac:f9:17:1f:
1b:e7:b9:2e:74:ba:03:12:86:f5:4a:f0:f7:f9:9d:
9c:61:26:a5:4c:cc:c5:c0:68:3f:bf:b6:65:11:df:
c8:2f:2a:e3:3d:14:42:f1:5a:b1:04:e2:cc:0b:98:
4f:dc:58:f1:25:82:89:c5:ce:7a:a2:7e:8f:80:c1:
1a:f8:6b:e5:b2:49:53:ac:5e:08:01:e0:f1:6e:35:
86:8d:e3:61:29:e7:21:fc:02:00:de:a6:ad:fd:a2:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:EE:91:43:7B:A3:0E:E5:11:B4:AF:D9:A9:97:44:43:3B:10:FE
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:79:ef:0e:7a:a8:d7:24:9f:bd:1f:f2:34:c5:91:c2:d7:6d:
ba:18:8d:24:03:68:9e:2b:d5:11:8d:ec:f0:01:44:ab:70:59:
bd:2f:9e:8f:c9:23:c0:53:98:7f:2a:e8:c0:a0:8b:cb:38:0d:
69:44:4c:9c:25:36:55:f7:c1:01:74:f4:e2:f3:d9:95:87:b6:
34:f5:e6:87:46:25:78:cf:67:22:13:44:ce:42:71:4e:2f:f4:
ff:1a:35:71:ea:b6:16:16:0f:a6:85:9e:a4:87:e9:2e:57:a9:
73:1b:b3:8c:a6:c4:92:19:4d:c6:a6:08:e9:6c:32:47:28:07:
04:6e:7b:d0:7f:22:87:6a:57:93:ec:08:ef:5b:04:51:50:75:
b3:75:a8:62:15:21:b9:69:f2:33:9c:ce:be:00:63:45:80:e9:
88:fd:08:a4:33:34:7f:2a:71:b3:c3:ad:6d:c2:83:52:56:e0:
79:7c:d1:e8:ca:b2:dd:ff:c5:8b:81:ff:c2:fc:7d:03:2d:9f:
08:dd:0f:ee:26:3a:4d:d9:eb:57:29:13:98:d9:19:42:07:dc:
0e:c0:ca:ac:74:c8:88:19:de:9f:8c:81:83:57:4f:d9:8f:83:
45:e2:0c:46:a3:f3:24:62:f5:9a:54:52:26:c6:a5:f1:0e:58:
eb:25:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:21 2026 by rpki-client