Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: +LUibMrSvHP4kj3zJjXLW/P6MBQdT0s9hl6YaQFX3Ik=
Subject key identifier: 5F:CD:A1:5F:BF:65:DC:1D:CE:EB:D3:CB:2F:1C:A2:39:2D:28:6C:A1
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 01A0C47CB836757A907063D33AE760D23093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 12D9
Signing time: Mon 21 Sep 2026 15:01:42 +0000
Manifest this update: Mon 21 Sep 2026 15:01:42 +0000
Manifest next update: Tue 22 Sep 2026 15:01:42 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: Sbj2KXy5PJUP5nH6MQlfc5kTDH/V3XA488xNgAp1FbA=)
2: VfT1jovZQbB_GOxrewqAg31IJD4.roa (hash: rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:b8:36:75:7a:90:70:63:d3:3a:e7:60:d2:30:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Sep 21 15:01:42 2026 GMT
Not After : Sep 22 15:01:42 2026 GMT
Subject: CN=5fcda15fbf65dc1dceebd3cb2f1ca2392d286ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:1c:c6:95:a4:b0:f9:da:ae:11:d1:68:42:
22:fa:f7:e0:9d:c7:8e:92:7a:25:23:ec:23:b5:83:
6b:4e:79:9c:12:4e:ed:dc:ae:af:0c:b5:16:ad:8b:
c0:9c:08:5e:27:de:47:57:7e:f1:85:53:22:10:87:
11:4a:46:9b:c0:be:b3:25:86:e1:86:48:e8:48:e5:
39:4f:a6:ab:3e:07:c4:76:d9:b8:fa:15:2a:30:8a:
8f:bd:35:67:63:09:e1:fa:ef:56:23:91:88:8a:8f:
db:0b:a6:46:75:50:48:a0:ec:57:18:85:45:93:d6:
59:fd:d6:ff:39:10:2e:43:7b:ca:f6:43:56:eb:cc:
bd:86:2d:5c:35:63:6a:5a:ef:c6:2e:ca:fa:f4:82:
34:a1:28:97:29:ea:b0:77:1c:de:23:db:35:5b:09:
c1:bb:db:bf:c5:84:e9:79:10:a1:86:f7:77:ab:87:
7c:f2:7f:69:c8:d0:e4:02:68:99:b0:40:e1:8a:1c:
55:2a:41:08:2a:18:66:8e:f1:83:48:0c:19:bf:b9:
88:a4:97:c2:aa:d6:8d:bd:bc:80:3b:8e:91:4a:81:
99:a2:54:83:91:dc:0a:45:f8:a7:7e:d7:13:26:ce:
77:bb:ec:90:65:16:83:36:f3:ec:9c:ab:0f:85:58:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:A1:5F:BF:65:DC:1D:CE:EB:D3:CB:2F:1C:A2:39:2D:28:6C:A1
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:12:70:50:c9:a7:df:b1:72:f7:0c:1b:f9:ae:39:03:76:48:
73:e8:fc:13:55:30:6e:5a:da:3e:fc:c3:26:aa:d5:2f:39:2b:
c6:74:c9:52:2a:0b:e6:22:50:5c:9e:09:7d:95:46:4e:b2:64:
16:b8:c8:e6:ee:b8:0d:89:07:38:02:ea:b2:7f:67:b6:e4:f9:
19:b5:f1:4a:cd:dd:b0:30:08:db:9a:6d:ee:ec:99:a9:50:77:
02:5b:d4:21:f1:27:9a:31:36:df:a1:0f:2c:09:4c:fb:c4:c5:
86:f2:65:e6:e6:29:72:59:b2:df:d1:2a:ad:55:05:03:b6:ae:
f1:a0:30:3b:c9:9c:e2:32:1d:d5:b4:04:62:cc:0f:7c:74:c7:
b8:2e:9c:ab:83:53:18:81:cf:e4:a1:cf:d4:3e:11:73:25:14:
29:d8:77:f4:14:3b:1a:4a:46:0d:f0:eb:f5:30:55:65:20:38:
ec:e1:22:38:bc:3d:9c:61:b0:da:95:9b:7e:b5:0b:f9:dc:66:
53:41:23:77:f4:7d:44:97:43:1f:2e:ad:68:cf:9b:de:88:4a:
e2:0e:28:d8:70:24:87:af:1b:79:f0:09:26:df:c5:1b:79:e7:
7e:30:fe:67:c0:21:7e:ee:41:a7:f3:a5:4a:21:b4:d8:aa:81:
9e:d2:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:24:05 2026 by rpki-client