Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: I8Nuvas1WVVY3nmqq1d0aMY0kO1KFAP79g7A0k8QZ1o=
Subject key identifier: 2F:33:8F:78:2B:51:58:AB:49:21:85:C4:58:C7:2A:EA:F1:D4:6C:0F
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 01A0C1B1B146E9738F71DBF8DE31A6338E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 02:00:42 +0000
Manifest this update: Mon 21 Sep 2026 02:00:42 +0000
Manifest next update: Tue 22 Sep 2026 02:00:42 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: M/hVRilHBekQsiFf007PC9MrlyfARE5AAe7lbJ7yLUg=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
3: qjFyOVNC7cy2BWp-9aeHp4PinTw.roa (hash: fOUXYgSgvqQL9hg9nKQBJUXVnY8YtOYVKAMT4wMofyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:b1:46:e9:73:8f:71:db:f8:de:31:a6:33:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Sep 21 02:00:42 2026 GMT
Not After : Sep 22 02:00:42 2026 GMT
Subject: CN=2f338f782b5158ab492185c458c72aeaf1d46c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d2:a4:8b:55:82:86:74:50:33:00:7f:cb:df:
2f:18:31:03:eb:07:cf:b5:65:88:08:27:13:f6:7e:
54:92:89:16:67:77:0e:f6:4e:1a:95:f3:a8:3a:a2:
84:09:ad:50:6d:53:3a:32:9e:6f:6b:ad:25:ef:8d:
58:24:14:b2:7f:7b:01:1b:f6:43:39:3b:20:aa:14:
36:e4:4a:8b:c4:11:07:9f:d9:92:f4:f6:e1:41:7a:
7e:75:ea:46:dd:19:e5:b5:1c:cb:bd:b9:ba:01:14:
cc:8f:6c:4b:18:0f:74:3d:8b:42:3b:40:78:12:00:
97:e4:1e:f0:52:be:70:8f:59:4e:e2:c2:7f:3b:6f:
9a:25:61:41:17:c3:16:34:31:df:eb:aa:b6:05:45:
60:d7:95:5a:06:c9:66:06:a2:c3:c9:83:6a:68:1d:
1c:e8:57:aa:b0:05:5f:ea:32:c2:62:0f:e3:89:bb:
d3:01:7c:5a:78:97:d9:5b:22:f1:86:b0:43:83:3a:
54:e3:0e:56:7f:c0:76:6b:f9:d3:15:13:84:c7:2b:
c7:5e:ff:73:08:5a:ea:b8:0b:2a:bd:d6:89:ff:dd:
b8:71:67:12:e1:d7:20:8b:e1:56:61:15:67:9a:1e:
8a:ed:59:e0:ec:eb:0b:ed:26:47:ce:5b:ae:28:70:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:8F:78:2B:51:58:AB:49:21:85:C4:58:C7:2A:EA:F1:D4:6C:0F
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b7:81:af:92:9a:9a:ee:a8:12:44:e2:af:39:f0:9d:8b:97:
0d:dc:d9:29:a4:89:b9:bf:29:e3:e8:dc:7d:36:b3:a0:e9:d5:
f4:e3:18:ab:df:91:de:ae:2a:a0:77:ef:57:5a:73:a5:55:d2:
f5:8d:71:2e:2d:5f:1a:91:53:94:b7:15:74:ff:bf:45:31:ec:
f3:52:aa:2d:5a:bb:f5:b6:8c:4f:82:b4:ef:25:de:1f:df:14:
ab:50:c0:bb:56:bd:b5:b5:8a:5b:dc:48:3e:94:4e:98:91:27:
98:fc:7d:2e:d6:6c:12:63:f7:fc:59:97:57:72:3c:95:f2:17:
c8:a5:2e:cb:c6:e3:6d:22:2b:74:0d:56:0c:f2:ff:8e:f7:b4:
ba:48:57:25:01:ca:b2:9b:14:f4:96:d2:1e:fd:53:11:76:51:
08:47:b4:fd:b9:f0:64:b6:f9:a3:0d:d1:ce:b5:62:33:8c:97:
50:af:d5:0d:2d:d7:ab:54:a3:8b:ca:30:0a:a8:00:35:53:4d:
34:70:f0:67:c6:13:c5:6b:20:bf:20:b3:53:ea:18:c9:77:64:
f6:eb:7f:97:9e:3e:50:67:ff:c4:dd:b7:a2:cb:8a:0e:84:98:
e0:dc:b4:5a:1f:ed:32:1a:1c:d4:ec:70:62:d0:51:67:af:2e:
2e:1d:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:47 2026 by rpki-client