Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: 9sM+Kn6q0ziDJR1QuqBVU6WGLGe1IwJ4VWg/tsSoUsc=
Subject key identifier: 54:27:4F:A5:71:30:54:33:EE:F4:48:74:D8:C3:DC:77:EB:0A:04:5B
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019EC03684A15349ECE820A7DC99F91E6131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 09:00:58 +0000
Manifest this update: Sat 13 Jun 2026 09:00:58 +0000
Manifest next update: Sun 14 Jun 2026 09:00:58 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: YxamQnJQJjKgSiAAxjcbobQnjbkxa0TJ1d0flwWS8+k=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:84:a1:53:49:ec:e8:20:a7:dc:99:f9:1e:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jun 13 09:00:58 2026 GMT
Not After : Jun 14 09:00:58 2026 GMT
Subject: CN=54274fa571305433eef44874d8c3dc77eb0a045b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:56:8f:15:b1:b4:c6:fb:d5:7a:2b:51:95:
78:db:ec:2f:e7:b8:99:ec:67:a2:31:8b:80:56:a1:
6d:09:96:31:66:91:a1:92:b7:d4:a7:d4:bd:3e:0b:
7b:6d:c2:4b:28:05:76:08:3e:3d:41:d6:4b:82:10:
8e:82:63:ee:66:7b:5a:14:1a:ff:15:7d:e8:56:f4:
c4:dc:50:2c:6f:b5:85:1c:20:58:fb:46:eb:c6:e3:
71:8e:c7:31:16:b2:b3:bf:e6:37:ed:e3:2a:59:99:
70:6d:7a:08:2c:c9:d4:c2:77:8d:01:9d:10:06:b2:
c3:1e:48:20:c5:e1:b7:54:10:c5:95:e6:e0:ff:c8:
75:22:94:2e:ff:f9:38:56:12:60:87:80:90:af:91:
78:16:9d:9b:fc:a7:19:07:14:b3:8c:8b:05:aa:c8:
86:01:e7:de:fc:ce:33:66:f9:e6:48:11:9e:aa:e5:
37:af:f5:54:2e:aa:7f:1d:77:78:c0:39:95:50:c7:
3e:55:97:e6:dd:83:3e:14:9e:b9:b5:60:07:48:24:
3d:6e:42:bf:5c:65:fa:42:6e:5e:77:4d:c7:65:14:
1d:f3:7c:be:4c:8e:cd:8a:53:8d:4f:65:c5:30:72:
4a:b2:55:26:41:ba:a3:b7:43:4d:b8:d4:c5:78:65:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:4F:A5:71:30:54:33:EE:F4:48:74:D8:C3:DC:77:EB:0A:04:5B
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a0:b2:c3:c6:4f:9a:f9:ed:90:d2:cf:cc:06:2e:a6:4d:01:
16:d8:76:8f:64:9f:63:37:b5:4e:ee:e0:a2:72:a8:77:63:8f:
12:78:e2:1a:5e:2c:a6:f4:9d:5b:e8:06:92:80:18:49:b8:dc:
53:bc:73:14:34:73:4f:62:e9:10:49:fb:fa:1d:56:6b:73:ed:
be:29:38:be:41:eb:2c:c5:8e:e8:73:e8:89:b0:95:ad:a2:cc:
43:15:aa:be:47:75:aa:75:97:a7:89:f3:8d:83:2d:2c:b7:02:
7f:67:df:13:a0:66:dd:bf:eb:b1:81:7f:d1:bc:11:0d:c6:81:
94:28:ac:30:7e:57:af:59:d5:20:32:77:53:ae:e6:f7:67:95:
87:7d:d3:41:ce:c8:60:65:a6:37:1a:08:ee:89:af:18:cc:c8:
26:d3:a2:ab:30:e1:00:63:81:d9:bc:ba:72:13:a3:8f:d7:4d:
05:85:d7:8e:9f:bd:3a:6c:e0:eb:df:a8:62:11:4c:91:8c:b5:
4e:29:bf:26:62:ea:a7:f4:15:67:5f:ab:cb:a2:97:ef:33:9d:
39:bd:9c:67:8e:df:78:4e:b1:11:7d:45:17:09:91:0a:11:08:
87:bf:69:ad:e1:f4:4f:23:88:a4:30:cc:b3:04:cd:98:1a:13:
2d:49:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:25:05 2026 by rpki-client