Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
File: CYZDIBoqokoLh3o638p6iSBH2_w.mft (raw, json)
Hash identifier: S+ZabVaqJDWbJB5PMXfyCso/paQ+GFBzIjvChz0XEvc=
Subject key identifier: 66:90:3D:AD:4D:D4:70:C5:62:E3:51:08:00:44:B8:4D:38:6B:DC:C0
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 019FA899C9BC5EB50F1211A2BA107D213DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
Manifest number: 15EC
Signing time: Tue 28 Jul 2026 12:01:18 +0000
Manifest this update: Tue 28 Jul 2026 12:01:18 +0000
Manifest next update: Wed 29 Jul 2026 12:01:18 +0000
Files and hashes: 1: CYZDIBoqokoLh3o638p6iSBH2_w.crl (hash: nOusmDwe/jvce9rPyyACsQtk5IHAe3Y8+WFvJpF3tBw=)
2: WIUAFonkV2sfv2obw7wp_H-MGvU.roa (hash: GtKF8czJWl3ExfCMW9FZWgpdCqhRe9QAiKNJnvpNNSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c9:bc:5e:b5:0f:12:11:a2:ba:10:7d:21:3d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Jul 28 12:01:18 2026 GMT
Not After : Jul 29 12:01:18 2026 GMT
Subject: CN=66903dad4dd470c562e351080044b84d386bdcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:e9:b3:ad:34:52:a2:c0:97:85:62:61:f5:
11:cb:76:26:49:f0:6e:54:5b:89:10:0a:e8:2f:79:
b0:20:9c:0a:a5:a4:e9:6b:56:c4:93:85:36:84:7a:
42:a4:b1:bb:e9:93:a2:fa:ba:ee:1d:7b:46:19:14:
84:39:22:2b:4f:13:38:eb:de:83:23:71:8a:a7:50:
c3:0b:8d:27:63:9e:52:78:53:be:56:66:23:b0:47:
a9:e9:64:be:ad:a2:2d:94:25:37:e0:36:1c:88:fa:
6f:e1:20:5e:0c:f0:e8:83:45:ff:5f:ce:ad:0d:f5:
12:40:b5:ed:cf:0e:6f:9a:dc:15:3c:97:38:ef:69:
42:e7:44:a0:08:c2:6d:ab:55:0a:a6:8f:9f:7a:28:
32:a6:e9:1a:f0:0c:a4:34:a7:b1:38:87:23:5e:17:
8e:f2:42:88:f7:d0:bf:6e:d6:1d:4a:f8:cb:d7:e2:
a0:b7:b5:4c:53:7f:ec:9c:90:5c:ee:a9:fc:98:5c:
e0:75:75:ba:6b:d2:f8:ca:0a:95:1f:bb:02:e3:a0:
d2:bc:b6:63:97:da:e1:78:3d:2b:fa:f1:d5:86:1b:
a4:b3:bf:52:5b:56:37:84:f1:6c:11:63:56:d6:80:
d5:5b:93:3d:1f:76:eb:b7:0f:6e:99:61:02:f6:97:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:3D:AD:4D:D4:70:C5:62:E3:51:08:00:44:B8:4D:38:6B:DC:C0
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d7:9d:5b:c7:92:21:28:a7:58:80:69:33:58:eb:9d:58:35:
16:33:e8:e2:87:6b:60:f0:c0:d6:49:3b:9c:97:09:40:e9:a6:
eb:db:ee:61:a9:3d:03:e4:14:43:dc:ea:45:7a:34:d6:17:77:
b4:38:1d:f6:ac:04:ca:72:e8:d2:70:14:3e:12:0c:86:a6:cd:
fd:76:09:5e:52:63:6f:0a:8d:bf:3e:f6:b1:67:fe:4e:54:05:
54:4d:e1:c1:ee:08:ef:0d:ef:0e:64:55:7a:43:7f:3e:7d:18:
e8:3e:07:fa:ad:91:6b:76:18:64:f3:c7:fc:27:f8:6d:ca:8d:
9f:03:d6:33:63:07:b2:b7:93:42:bd:6b:97:8d:1f:0a:24:f0:
aa:b0:29:6b:a7:03:d8:0b:7c:a8:b6:c8:45:be:6c:3f:8a:31:
7a:3f:6b:36:68:5c:b7:80:ad:0b:11:a9:58:27:c1:1c:62:75:
e7:17:99:18:38:05:42:98:e9:9c:d6:19:a0:dc:28:92:db:b8:
71:e5:a3:96:49:f3:69:26:51:a5:b7:f3:22:43:0f:4a:0a:d6:
68:78:53:1e:0a:66:1f:f5:8b:7c:0e:46:a8:1b:70:f9:aa:61:
27:33:e6:9c:85:52:1b:83:14:88:30:b9:56:78:ce:00:09:e6:
8d:28:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:11 2026 by rpki-client