Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: Jza2bCNpzNFxXZnNQbORyphqA23HP1EguPleAw8Hyag=
Subject key identifier: BC:01:07:E2:87:00:1C:93:C2:5B:42:EF:3D:96:AD:AA:3B:14:0F:00
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 019FAA87F5342FA4742C48D799D7EC05C63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 1247
Signing time: Tue 28 Jul 2026 21:01:04 +0000
Manifest this update: Tue 28 Jul 2026 21:01:04 +0000
Manifest next update: Wed 29 Jul 2026 21:01:04 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: TOj6Aj9wguKwYomJLiwZmj7q37uTlzzjSGLvXE9ttfo=)
2: VfT1jovZQbB_GOxrewqAg31IJD4.roa (hash: rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:f5:34:2f:a4:74:2c:48:d7:99:d7:ec:05:c6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jul 28 21:01:04 2026 GMT
Not After : Jul 29 21:01:04 2026 GMT
Subject: CN=bc0107e287001c93c25b42ef3d96adaa3b140f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:d8:65:0c:f4:b4:e3:b8:12:09:dc:f2:3e:
1d:51:81:39:7f:4c:6b:fa:45:db:09:c3:b3:ef:2e:
57:14:b4:74:77:49:d5:2f:31:11:1a:62:03:7c:f4:
f1:69:e2:dd:97:f0:9a:f8:df:f0:c3:1f:01:11:f0:
b0:a3:c4:2a:60:af:f4:60:ab:0a:db:d1:b5:97:30:
65:d5:03:7a:e1:79:d3:a3:a2:f9:e7:7c:22:24:7c:
ad:6d:88:71:6f:60:86:d5:0c:ce:f2:55:57:d4:0f:
17:68:dd:ca:20:83:ec:f7:ec:b3:9f:cc:14:fc:48:
3a:b1:ca:83:02:76:56:fa:b1:c9:6c:14:a0:59:08:
3f:d0:19:bb:06:13:cf:23:e6:e1:7a:eb:09:c7:c9:
25:48:40:4d:56:86:79:39:0d:5d:5b:8d:3f:b4:19:
55:94:f9:79:2f:a3:ac:3f:7a:3b:8f:08:ff:79:f8:
c2:0c:3d:d6:50:fa:c8:07:a3:2f:6a:79:ac:98:75:
ce:9b:ce:8c:4f:fe:a6:c5:03:04:75:3f:25:07:f4:
14:96:dd:31:cb:14:55:9c:7c:b8:90:47:ab:96:ec:
66:c8:36:22:af:19:8d:16:4c:df:fd:d9:4d:c8:5f:
73:b0:c1:b3:d2:e8:5b:99:e4:e1:c6:9d:20:42:c1:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:01:07:E2:87:00:1C:93:C2:5B:42:EF:3D:96:AD:AA:3B:14:0F:00
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:78:20:fe:7d:f6:b3:c8:bb:74:95:bb:d0:de:5a:27:5a:
2d:fc:e0:2b:05:94:aa:28:d7:68:af:d5:ca:e2:f0:e7:2d:12:
36:8c:ae:1e:32:58:4f:92:d3:bc:3e:d8:80:07:a9:ec:cd:e7:
ca:47:c3:21:49:d8:0c:3b:f4:df:e6:ae:fe:e2:c6:e4:f1:b7:
0c:08:0e:07:6f:28:de:95:04:4c:c6:54:f3:4b:ed:8b:43:48:
14:fa:f1:57:ec:ba:bf:eb:6b:de:1c:10:90:ce:34:51:17:0e:
05:eb:d5:34:e8:a6:c8:a7:e9:cd:65:cf:02:93:eb:14:a7:c9:
9a:8e:b4:bb:0a:af:bb:ae:06:d6:91:f6:fb:cd:2e:21:c9:b8:
4b:0a:11:3f:2d:e9:9c:d9:f7:a3:11:32:20:ac:fd:88:3c:fd:
31:25:10:7e:81:4d:f5:fc:41:fb:10:6e:65:84:9f:00:e9:71:
7c:6d:fc:9a:a1:f9:75:e7:e7:df:f4:54:96:67:67:f4:16:af:
ef:d7:c4:de:57:af:72:f7:18:ca:51:0a:49:1d:f0:bb:97:f0:
8d:df:4f:c8:5c:cc:b2:6c:f4:93:34:1c:a2:6e:bf:a8:5c:da:
93:be:9b:85:9f:85:37:5a:29:de:f0:50:5f:42:2a:5f:a7:db:
11:8a:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:29 2026 by rpki-client