Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: 0dByKcEHfcGVIOpcMj510m73nycklX0foF9XK112N9w=
Subject key identifier: D6:3D:13:D2:6C:A7:A0:C4:3B:B4:62:30:B4:F1:42:64:7E:B6:D4:56
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019FA9AC5E0219B5D3E555D3414F3D3FAC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 17:01:13 +0000
Manifest this update: Tue 28 Jul 2026 17:01:13 +0000
Manifest next update: Wed 29 Jul 2026 17:01:13 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: mFAGc8vU6h/POuUYBeAXiBuKtWeOCWBXfqNi4ut8ycM=)
2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
3: qjFyOVNC7cy2BWp-9aeHp4PinTw.roa (hash: fOUXYgSgvqQL9hg9nKQBJUXVnY8YtOYVKAMT4wMofyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:5e:02:19:b5:d3:e5:55:d3:41:4f:3d:3f:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jul 28 17:01:13 2026 GMT
Not After : Jul 29 17:01:13 2026 GMT
Subject: CN=d63d13d26ca7a0c43bb46230b4f142647eb6d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:69:70:39:f1:b5:a4:e2:3f:d8:7e:2f:ad:
16:e0:01:1d:6a:c8:3d:02:8a:9c:d3:43:ee:3c:c1:
b5:cc:b6:5b:eb:26:49:3e:d5:e9:62:8d:93:74:db:
12:e2:ac:e3:6e:50:f7:43:63:d4:7e:55:90:3e:cc:
a9:64:03:5c:d9:59:e7:54:37:ce:1c:a9:25:58:c2:
62:1b:3c:df:4b:e4:bf:30:9f:3d:08:69:25:21:c6:
d9:1e:3d:4e:35:fa:fa:21:5e:a6:5e:61:aa:be:be:
9b:28:c4:8f:7c:1d:7b:18:63:3f:6b:68:dc:57:96:
ab:e9:0b:19:2f:d0:d5:97:57:27:3f:41:d5:af:e7:
b9:ed:29:71:ee:2f:ef:51:f6:08:8a:78:8a:4c:b7:
5b:dc:96:57:ee:73:c7:75:30:1d:14:73:d6:26:05:
72:cd:62:4f:34:ea:92:82:d8:b4:f5:44:fb:07:95:
6b:bb:9e:c3:87:1f:b3:25:c7:4a:d1:fa:67:93:db:
0d:04:d5:37:0c:ad:90:3a:6a:84:02:8b:4d:f9:28:
b5:21:cb:43:24:f2:0a:bd:68:70:18:0b:97:0e:77:
db:ca:7d:c3:6c:4d:68:9d:22:d9:27:55:45:40:4b:
a5:fa:5d:c2:cd:f7:ce:c4:86:df:49:65:f4:28:68:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:13:D2:6C:A7:A0:C4:3B:B4:62:30:B4:F1:42:64:7E:B6:D4:56
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:12:10:71:54:cd:f0:f2:63:46:4c:7c:81:38:c7:b3:d8:b4:
c1:8e:6b:56:53:3f:d5:ad:f6:df:e9:7c:6f:40:81:d3:73:50:
94:7b:fe:76:1b:a7:cd:36:1d:a9:76:77:ae:76:e7:2a:3a:fa:
ee:c8:b3:4e:5c:97:66:63:0b:43:d0:3a:37:cb:8e:57:37:95:
67:cb:88:01:56:03:e5:d6:b5:4b:85:2b:f1:5d:33:f0:39:f2:
e5:06:7e:a9:42:e3:4b:b9:c1:5a:66:32:67:8a:7a:cb:ed:d1:
ce:44:ee:8a:32:32:c4:eb:57:61:87:f4:55:f4:f8:e4:dc:34:
2a:81:07:de:7e:b1:e1:4f:fe:71:67:d0:4c:58:5b:6a:92:46:
de:c0:06:76:da:c3:24:7c:be:4a:ee:b8:56:db:8c:8c:0f:4d:
99:cf:00:6f:1e:96:f2:c4:0a:fc:82:b4:3b:5b:26:a5:92:27:
66:de:df:b7:2e:c8:a6:7e:56:c4:0b:5e:1c:88:b1:42:cc:a0:
81:1a:00:9d:7c:30:5a:75:a1:6d:74:d0:4c:b6:af:a1:ec:af:
27:cf:4f:d4:eb:6d:6d:89:dd:2f:f6:ab:f2:26:83:b7:22:72:
9a:95:51:f5:17:ba:96:f1:de:c3:42:7d:f6:a9:c4:02:2f:07:
ab:83:01:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prF4CGbXT5VXTQU89P6xJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2
MTgxN2MwHhcNMjYwNzI4MTcwMTEzWhcNMjYwNzI5MTcwMTEzWjAzMTEwLwYDVQQD
EyhkNjNkMTNkMjZjYTdhMGM0M2JiNDYyMzBiNGYxNDI2NDdlYjZkNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXRpcDnxtaTiP9h+L60W4AEdasg9
Aoqc00PuPMG1zLZb6yZJPtXpYo2TdNsS4qzjblD3Q2PUflWQPsypZANc2VnnVDfO
HKklWMJiGzzfS+S/MJ89CGklIcbZHj1ONfr6IV6mXmGqvr6bKMSPfB17GGM/a2jc
V5ar6QsZL9DVl1cnP0HVr+e57Slx7i/vUfYIiniKTLdb3JZX7nPHdTAdFHPWJgVy
zWJPNOqSgti09UT7B5Vru57Dhx+zJcdK0fpnk9sNBNU3DK2QOmqEAotN+Si1IctD
JPIKvWhwGAuXDnfbyn3DbE1onSLZJ1VFQEul+l3CzffOxIbfSWX0KGjyJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY9E9Jsp6DEO7RiMLTxQmR+ttRWMB8GA1UdIwQY
MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt
MzI0NzFjNTkwOGEyLzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy
LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRIQcVTN
8PJjRkx8gTjHs9i0wY5rVlM/1a323+l8b0CB03NQlHv+dhunzTYdqXZ3rnbnKjr6
7sizTlyXZmMLQ9A6N8uOVzeVZ8uIAVYD5da1S4Ur8V0z8Dny5QZ+qULjS7nBWmYy
Z4p6y+3RzkTuijIyxOtXYYf0VfT45Nw0KoEH3n6x4U/+cWfQTFhbapJG3sAGdtrD
JHy+Su64VtuMjA9Nmc8Abx6W8sQK/IK0O1smpZInZt7fty7Ipn5WxAteHIixQsyg
gRoAnXwwWnWhbXTQTLavoeyvJ89P1OttbYndL/ar8iaDtyJympVR9Re6lvHew0J9
9qnEAi8Hq4MBZg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:18 2026 by rpki-client