Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: bTloiTyXqXcZaPXZa1gg//Q6XLvSWZg85eCpevANbpk=
Subject key identifier: C8:50:85:97:92:D6:C9:EF:2C:9B:7D:95:89:05:E2:3B:03:82:51:66
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 019EC0DB735BA2A1F466DF07A2C37D427D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 11CE
Signing time: Sat 13 Jun 2026 12:01:07 +0000
Manifest this update: Sat 13 Jun 2026 12:01:07 +0000
Manifest next update: Sun 14 Jun 2026 12:01:07 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: nXi8IQIhpLCx7CHTowvOnkcej+RNoI0H2NAw5oiXPDo=)
2: VfT1jovZQbB_GOxrewqAg31IJD4.roa (hash: rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:73:5b:a2:a1:f4:66:df:07:a2:c3:7d:42:7d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jun 13 12:01:07 2026 GMT
Not After : Jun 14 12:01:07 2026 GMT
Subject: CN=c850859792d6c9ef2c9b7d958905e23b03825166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:01:13:5f:02:cb:68:80:61:d3:3a:31:2a:
81:4a:79:c1:20:9f:f9:ea:70:51:e7:63:e4:d8:26:
56:86:06:e3:4d:78:91:d6:f9:75:0d:67:4a:31:22:
97:ec:84:42:e5:47:86:6b:32:60:98:1e:64:be:c3:
7a:14:4d:08:bf:65:05:a3:16:80:68:5c:7a:d1:07:
77:bc:5f:c8:68:d7:57:b4:fd:3e:ce:7e:ee:6a:c2:
b5:95:66:ab:5e:01:13:b7:ce:39:a3:da:d7:ca:33:
a8:7b:55:76:4d:8f:1e:a0:62:da:de:c2:bd:be:67:
4d:5a:63:c5:62:08:19:85:94:7b:00:3a:8c:d8:e1:
f7:3b:f9:b4:1b:51:f3:a2:c2:a6:4c:71:1e:e1:8f:
87:b3:63:98:a1:cf:26:ff:a6:14:7d:aa:47:2c:71:
2a:20:fe:42:dd:ae:47:3a:17:ab:b6:b2:9b:26:42:
b6:47:fc:f8:68:6f:f5:de:ed:00:49:19:45:63:a9:
16:ec:08:d4:dd:8c:04:a2:30:e6:66:80:49:b7:fc:
97:7d:af:e3:05:67:c3:ba:67:30:60:64:a8:e0:d9:
57:d4:5b:5f:60:15:49:a3:37:52:81:bf:1a:74:8a:
6f:9b:62:f2:36:ab:e2:13:b5:8e:94:1f:bf:7b:e9:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:50:85:97:92:D6:C9:EF:2C:9B:7D:95:89:05:E2:3B:03:82:51:66
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a9:c6:04:2b:cb:47:a2:72:fc:47:3b:9f:26:f2:15:77:80:
69:76:a4:34:17:32:a1:fd:87:be:14:6d:04:38:e5:bf:02:82:
38:27:a7:c3:b6:13:5a:bd:f6:bd:99:84:50:5d:d9:dd:de:af:
68:31:e6:f6:67:b6:2d:97:05:6f:7e:b9:a6:17:4a:b4:3c:a9:
b9:3f:cf:6a:1d:21:8f:d7:51:4d:ce:c4:d6:a1:f0:b8:6b:ce:
a8:6a:e5:0a:91:46:47:07:18:09:0b:02:54:cb:9b:56:f4:54:
77:80:48:e1:47:20:4a:ef:f2:be:fb:65:1d:a4:54:77:be:8b:
56:ab:37:5d:12:14:f6:da:21:85:92:37:b7:a5:26:84:78:e3:
8a:d8:67:11:f5:9b:2d:e4:34:fd:f3:0f:ad:3c:4f:71:58:89:
7f:2a:70:e8:0a:9e:68:47:c9:5e:3b:87:ee:fc:c9:00:71:9c:
b0:48:29:dc:5b:c3:e5:6e:79:7d:ef:8c:4f:c4:6d:0a:29:fa:
c8:3d:98:3d:cf:60:f0:28:90:ac:24:0f:55:c8:bf:f6:eb:2a:
c8:b5:7d:1a:af:a7:5f:2f:36:1e:84:48:26:d0:bb:44:dc:c4:
09:96:71:62:91:e5:63:3b:47:8d:87:07:86:65:14:aa:8c:f9:
64:c2:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:50 2026 by rpki-client