Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: xINB1BNKxTIMo0yhtIF5xr/4kc49pXRPybzf3+aiRaA=
Subject key identifier: CF:D1:98:19:76:F7:BF:D0:88:07:CF:DA:A9:43:58:DC:5F:D1:FE:DD
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 019D9962EBB6DCB62B77605174BB1A62635D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 1135
Signing time: Fri 17 Apr 2026 03:01:30 +0000
Manifest this update: Fri 17 Apr 2026 03:01:30 +0000
Manifest next update: Sat 18 Apr 2026 03:01:30 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: EKLmL7lKBzbKJVNdYiVJkCBJnQWfvEBz8KGLxCDvC4Y=)
2: VfT1jovZQbB_GOxrewqAg31IJD4.roa (hash: rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:eb:b6:dc:b6:2b:77:60:51:74:bb:1a:62:63:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Apr 17 03:01:30 2026 GMT
Not After : Apr 18 03:01:30 2026 GMT
Subject: CN=cfd1981976f7bfd08807cfdaa94358dc5fd1fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:b9:47:18:f4:35:da:a3:37:15:c3:eb:35:
9b:68:10:39:fd:80:ba:68:84:c8:71:be:61:cb:c3:
87:24:91:ec:33:2a:e8:d6:ed:0d:76:74:72:57:40:
69:c3:31:10:6d:51:0a:18:b9:c4:3b:65:24:2a:0c:
a4:74:59:53:28:79:7c:44:38:91:28:84:fa:0e:3b:
63:3d:61:75:41:8a:71:8d:40:b9:74:86:ac:37:d9:
51:72:54:51:8a:46:1a:18:52:ad:d3:94:6a:7d:97:
27:9f:91:a6:1a:a6:d7:16:4f:03:d0:7a:34:2d:a2:
e6:f5:bc:01:80:c8:09:17:40:b0:b0:b4:72:a1:05:
36:dd:05:44:04:e2:f8:30:1b:f3:0d:5c:3b:62:34:
db:bc:c5:f7:b4:2b:b6:5e:14:c0:53:95:be:5f:17:
ae:06:0c:cc:81:ef:48:0a:80:3b:2e:c1:43:ea:86:
87:7a:5b:3f:50:7a:c1:ba:22:6d:05:3c:3b:04:f3:
33:81:d9:91:09:f9:76:2a:f6:c8:3a:53:99:ff:96:
12:7e:17:ef:20:a7:00:54:d4:6e:cb:f5:64:bd:0b:
5a:b1:75:e9:3e:a0:ca:02:c5:d2:25:89:1b:5f:81:
a7:72:78:e6:b8:00:8e:eb:d4:a4:76:5a:94:7a:e5:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D1:98:19:76:F7:BF:D0:88:07:CF:DA:A9:43:58:DC:5F:D1:FE:DD
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:25:c1:a9:e1:4b:58:32:d1:b3:c7:f7:c2:29:51:a4:c2:9d:
13:58:64:93:a9:c6:97:72:73:4e:15:0e:0e:8a:bd:fc:b3:5e:
50:e4:58:7a:4a:8c:5d:33:4f:6a:90:bf:ca:dc:87:ca:8c:de:
df:e6:b0:94:36:e2:bd:b2:fe:92:4a:d3:6b:4b:a0:66:45:ad:
2b:5d:ad:cc:d6:d1:e4:b1:16:7b:fe:03:77:d0:a8:a8:a8:0c:
44:bd:c7:ed:32:63:9e:91:58:15:61:7b:ee:75:40:31:7c:72:
dd:84:e1:ab:6d:bb:0a:1b:24:57:d3:82:33:e0:f5:a7:19:63:
17:7c:d4:4f:b4:ac:b2:e3:7b:ab:d9:e8:88:02:44:9e:08:b2:
18:a1:16:9c:9f:cb:11:6f:25:1b:01:91:07:ca:2a:f7:3e:72:
12:3d:83:e3:54:41:6b:44:5a:bb:8c:0c:5f:72:94:81:03:89:
b4:75:9e:47:f6:6d:57:71:2e:72:7b:59:29:14:5f:2a:a8:ad:
7d:94:50:90:81:38:c7:e7:eb:4f:f4:15:2d:db:fa:a6:7d:63:
c5:b1:55:f5:67:76:e5:4e:b7:38:fe:15:d7:60:7c:39:bf:c5:
71:f6:45:11:2a:9e:49:8a:d7:39:7c:f6:25:cf:35:15:0c:b4:
17:91:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:10 2026 by rpki-client