Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
File: CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft (raw, json)
Hash identifier: am6j1lqX3Ood5iZZSuuA6EQ+H/zMK5/PglnrNaGZ1qs=
Subject key identifier: BD:DB:FA:8F:86:C2:09:13:0B:C1:2B:45:69:D6:B2:8A:E4:6B:BB:96
Authority key identifier: 09:88:BE:66:C4:34:3E:B8:69:B5:C3:7C:09:EF:D1:64:EE:61:86:C5
Certificate issuer: /CN=0988be66c4343eb869b5c37c09efd164ee6186c5
Certificate serial: 01A12EB36525CDF79D744036EEB4D0C7ED4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
Manifest number: 0116
Signing time: Mon 12 Oct 2026 06:01:11 +0000
Manifest this update: Mon 12 Oct 2026 06:01:11 +0000
Manifest next update: Tue 13 Oct 2026 06:01:11 +0000
Files and hashes: 1: CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl (hash: HcHaUTg8DLIxX971ZXrAToUdBAEswNnNNqme/ikZvqM=)
2: YU7FK8aSQi73yWezYzaHHpAG_WQ.roa (hash: YMu2fRx6OsADjZfJPJh6N1jUJPHhB6brXyLQQ6O0Xco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b3:65:25:cd:f7:9d:74:40:36:ee:b4:d0:c7:ed:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0988be66c4343eb869b5c37c09efd164ee6186c5
Validity
Not Before: Oct 12 06:01:11 2026 GMT
Not After : Oct 13 06:01:11 2026 GMT
Subject: CN=bddbfa8f86c209130bc12b4569d6b28ae46bbb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:31:af:8b:8a:91:be:5b:5c:f7:83:19:68:
f9:00:c3:4c:6f:4a:4a:70:59:94:3b:b3:be:be:ce:
0f:dc:46:01:04:cf:23:3a:b3:25:ae:95:58:ee:a6:
3a:f0:b9:c3:19:22:ac:b3:ba:ad:5d:a3:13:e9:88:
c3:e2:a6:60:88:33:a6:e5:3e:38:9f:d5:fb:1e:46:
51:d5:4b:f3:c6:ee:90:df:da:1a:aa:5f:06:79:b4:
08:31:e3:0f:76:2f:49:f4:d7:ae:e4:91:fd:5d:8c:
35:8c:d8:0b:65:e6:6d:af:a4:30:1c:18:7a:61:a2:
60:50:f4:bc:6f:5f:cd:db:28:78:96:a0:f3:eb:7a:
a6:9e:f9:93:14:a3:cc:83:36:3f:13:3f:4f:c2:7a:
0f:a0:ac:59:d3:5c:0f:9e:b0:26:15:e5:ed:a2:0b:
62:e7:bc:2f:79:60:80:3a:94:a8:17:aa:70:6d:41:
c3:7a:a5:3e:18:a0:01:7f:29:3c:17:b6:e9:ec:7e:
01:1e:39:6c:63:1e:8c:d8:d6:e9:c8:4e:27:24:65:
cc:df:25:4e:8d:f9:fc:75:57:f4:d9:87:c8:d7:f2:
0a:33:36:84:bf:59:32:58:c3:bb:ae:ee:9c:ad:ad:
36:17:5c:4a:29:3c:82:0c:ee:42:57:ff:38:c0:ea:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DB:FA:8F:86:C2:09:13:0B:C1:2B:45:69:D6:B2:8A:E4:6B:BB:96
X509v3 Authority Key Identifier:
keyid:09:88:BE:66:C4:34:3E:B8:69:B5:C3:7C:09:EF:D1:64:EE:61:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8f:5e:ca:ae:4c:f9:84:43:48:35:ff:f9:0e:00:f5:0a:59:
cb:d9:b7:e7:15:5c:d2:5b:a4:e8:75:ea:c3:bb:a9:3d:dc:32:
c0:88:ae:b8:0c:ac:bb:75:95:fd:82:65:7b:72:c1:2c:a1:e5:
68:7d:68:ce:26:5f:59:22:ae:2b:94:64:5e:96:57:e3:5f:bb:
2f:c1:9d:f9:cf:72:3a:8e:c9:97:ec:43:0d:92:af:4a:39:4f:
69:32:42:62:f8:da:c2:b5:ca:26:1d:7a:b6:ef:4f:16:53:c3:
c9:86:44:fc:c9:37:55:10:1e:98:75:bd:5b:3a:16:b9:92:dc:
e0:52:4c:30:0f:7d:19:fc:1c:4a:3c:40:cb:b2:97:45:f4:57:
a4:93:94:4e:45:4b:2b:44:3c:74:71:d6:f8:f9:6f:09:d9:b1:
5b:97:03:ae:c6:19:25:f3:d0:70:38:00:0c:5d:8b:23:e4:bc:
94:35:5b:25:52:90:28:8a:2f:9c:6a:6a:85:c1:3c:f5:02:66:
c5:d5:34:9e:37:ce:26:bc:da:b9:6a:f4:1e:07:ff:17:e3:06:
d5:fa:1c:d8:80:7b:61:11:e4:2a:7c:2f:00:79:50:31:12:88:
7b:8d:8c:54:88:9f:33:6f:32:ca:1d:8a:35:13:40:b2:9a:07:
5f:45:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:50:30 2026 by rpki-client