Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: wgBgVZMKxnYPEK6lxIpxdTVxSqp83nG6FLCQKpq9Axg=
Subject key identifier: C1:0F:7F:FA:F1:4F:45:3E:9F:93:5E:68:C5:24:B6:F0:06:45:D9:76
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 019CABD9F6163AA20E0197C0BF0B9FD2A7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 10BA
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: Dsc/rSiI5cpjFffu2dR+TiC37wmFi3GokqzyU34qZaI=)
2: VfT1jovZQbB_GOxrewqAg31IJD4.roa (hash: rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f6:16:3a:a2:0e:01:97:c0:bf:0b:9f:d2:a7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=c10f7ffaf14f453e9f935e68c524b6f00645d976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:fd:3c:f2:a1:e7:14:c6:a1:f1:98:9d:bc:
ac:25:ff:54:77:36:34:d6:eb:04:9f:20:3f:40:7c:
32:f1:b4:9c:9e:15:3a:6e:91:4c:fe:18:a0:ea:97:
6e:05:4e:72:51:51:90:32:7a:69:d4:8f:69:03:39:
9f:be:e6:14:ba:99:aa:70:07:93:b8:21:2f:e1:b1:
f6:92:4b:d2:02:ee:c3:46:80:31:42:ed:f5:37:4c:
ef:d9:bd:ad:92:d2:2f:80:a3:3a:62:53:fc:39:82:
e0:79:66:89:47:ec:15:c1:05:7b:7a:db:2d:5d:55:
79:f5:3c:9c:ef:89:e7:a0:6d:1d:83:c7:3b:da:29:
9f:cd:53:e3:33:70:f3:a6:f5:23:f4:07:a1:02:57:
de:0b:42:c8:df:f5:a5:06:21:f8:1c:14:9b:e4:f2:
b2:44:8c:d8:ef:bf:18:41:97:0b:10:e1:76:52:40:
fe:58:e5:d5:c7:77:1c:80:8c:a9:8a:4b:58:86:ff:
06:ac:68:5f:a7:1f:1b:8e:8d:94:6b:c3:aa:61:7e:
1f:71:f4:ff:ef:19:c7:fc:e1:0b:32:af:76:91:12:
e2:c0:20:47:03:33:e8:1a:0c:c4:a9:74:f7:55:d0:
24:a8:f6:76:39:c1:8c:16:7e:de:2b:cb:a4:95:17:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0F:7F:FA:F1:4F:45:3E:9F:93:5E:68:C5:24:B6:F0:06:45:D9:76
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:09:d2:8e:c9:cc:75:46:4a:3f:b3:9a:74:cf:49:a9:fe:d5:
24:1d:a1:1d:7a:19:41:15:56:d6:e7:ea:1b:98:7c:bf:39:b1:
fe:c8:24:36:29:d2:c7:d8:be:18:71:1b:67:4f:9f:e7:20:65:
e2:27:ae:55:3b:de:3e:dd:3a:9e:75:1a:70:34:cc:8b:4f:74:
45:34:07:92:aa:e0:80:23:47:71:63:3f:98:b5:22:04:2a:76:
bd:49:c1:39:5c:ff:a9:a4:dd:5d:2b:48:bf:3f:00:c7:f6:7d:
77:cf:67:bc:b1:06:d7:91:e2:10:9c:fb:1c:06:a9:d6:8d:32:
8a:9d:38:d9:93:f1:af:16:68:0b:72:7d:c7:48:56:80:2f:34:
0f:71:9a:86:e9:47:28:84:2a:08:70:c6:36:bf:fd:f8:cc:45:
89:da:bc:50:5f:ca:59:73:bb:07:4a:7e:ec:08:ab:21:dc:4a:
78:f4:ce:78:44:3b:93:d9:ed:3e:24:1a:37:ae:f7:cd:34:75:
11:bb:63:d7:ab:de:0f:83:f7:3e:b3:51:27:52:f8:4a:cd:26:
f4:a2:bb:4d:65:69:e2:e4:f7:83:08:05:a3:b8:b4:11:98:2d:
5a:fc:82:40:1a:99:77:36:03:24:a2:de:8e:4f:6c:ee:76:a1:
ec:51:f3:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fYWOqIOAZfAvwuf0qexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ODc2ZjdkY2YwY2NhZTc3NDIxNjA0NjNiMzhlMWMzNWYz
NTZkMTIwHhcNMjYwMzAyMDAwMTU0WhcNMjYwMzAzMDAwMTU0WjAzMTEwLwYDVQQD
EyhjMTBmN2ZmYWYxNGY0NTNlOWY5MzVlNjhjNTI0YjZmMDA2NDVkOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApon9PPKh5xTGofGYnbysJf9UdzY0
1usEnyA/QHwy8bScnhU6bpFM/hig6pduBU5yUVGQMnpp1I9pAzmfvuYUupmqcAeT
uCEv4bH2kkvSAu7DRoAxQu31N0zv2b2tktIvgKM6YlP8OYLgeWaJR+wVwQV7etst
XVV59Tyc74nnoG0dg8c72imfzVPjM3DzpvUj9AehAlfeC0LI3/WlBiH4HBSb5PKy
RIzY778YQZcLEOF2UkD+WOXVx3ccgIypiktYhv8GrGhfpx8bjo2Ua8OqYX4fcfT/
7xnH/OELMq92kRLiwCBHAzPoGgzEqXT3VdAkqPZ2OcGMFn7eK8uklReRuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEPf/rxT0U+n5NeaMUktvAGRdl2MB8GA1UdIwQY
MBaAFAmHb33PDMrndCFgRjs44cNfNW0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lkdmZjOE15dWQwSVdCR096amh3MTgxYlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9hNDM3NjYtOTFkZC00MjY2LWFmNjAt
OTIwYjMyMGQyZTIxLzEvQ1lkdmZjOE15dWQwSVdCR096amh3MTgxYlJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9hNDM3NjYtOTFkZC00MjY2LWFmNjAtOTIwYjMyMGQyZTIx
LzEvQ1lkdmZjOE15dWQwSVdCR096amh3MTgxYlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgnSjsnM
dUZKP7OadM9Jqf7VJB2hHXoZQRVW1ufqG5h8vzmx/sgkNinSx9i+GHEbZ0+f5yBl
4ieuVTvePt06nnUacDTMi090RTQHkqrggCNHcWM/mLUiBCp2vUnBOVz/qaTdXStI
vz8Ax/Z9d89nvLEG15HiEJz7HAap1o0yip042ZPxrxZoC3J9x0hWgC80D3GahulH
KIQqCHDGNr/9+MxFidq8UF/KWXO7B0p+7AirIdxKePTOeEQ7k9ntPiQaN673zTR1
Ebtj16veD4P3PrNRJ1L4Ss0m9KK7TWVp4uT3gwgFo7i0EZgtWvyCQBqZdzYDJKLe
jk9s7nah7FHzpQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:58 2026 by rpki-client