Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: rUNlZDaqIIJkry2D6ylx2wUz9t8kbUJpSh77tlBXbkU=
Subject key identifier: 38:DE:7E:60:45:B3:B9:DE:CA:99:0A:44:94:A6:6E:84:00:8E:C3:89
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 01A0D5704E59C8AA1E96770388215237EF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 22:01:42 +0000
Manifest this update: Thu 24 Sep 2026 22:01:42 +0000
Manifest next update: Fri 25 Sep 2026 22:01:42 +0000
Files and hashes: 1: 9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa (hash: cZRk0f4ULOIcvr4Kq3jJj23UFievd5ZXiHt0/5E2LwY=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: 12ofLAW1kkfH2Op/cyQO3peGEEMxMkYayM+n5zJnXGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:4e:59:c8:aa:1e:96:77:03:88:21:52:37:ef:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Sep 24 22:01:42 2026 GMT
Not After : Sep 25 22:01:42 2026 GMT
Subject: CN=38de7e6045b3b9deca990a4494a66e84008ec389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:86:95:6e:3b:ef:28:ba:4a:d7:df:73:fc:
c7:83:6c:ab:88:80:78:8f:06:1a:2f:a5:2c:a4:45:
f3:88:a9:25:06:c0:38:35:7d:22:e4:42:2c:f3:9e:
89:b4:c0:26:15:d9:84:bc:b3:f8:4c:3c:c7:f9:ff:
8b:15:56:3b:cc:5b:6b:e1:c1:40:df:05:5c:06:e2:
ae:5f:af:92:ea:51:eb:b8:88:40:bd:34:20:c8:8b:
38:90:b0:36:5a:7f:96:bf:c2:52:4d:c7:5e:3c:08:
00:ed:c6:58:7a:92:4e:bf:4e:36:9f:70:1d:a6:08:
b6:c0:12:6a:f6:88:f6:56:58:cf:85:93:05:63:d1:
54:a8:18:8d:d7:74:07:57:d7:ec:de:76:a5:9e:40:
cc:ba:5e:85:ea:55:2b:69:81:f8:29:31:e0:19:0e:
b9:89:b1:51:f1:dc:c0:d4:b0:f4:84:7b:79:3c:d6:
b6:6e:d2:34:74:c0:f0:2e:25:be:ca:5e:93:da:c3:
48:19:a9:a1:29:2d:29:30:bb:66:07:23:37:9b:19:
79:0d:70:fa:00:cc:91:2f:68:8d:60:17:dc:39:b9:
b9:fb:6e:17:d5:dd:a9:97:ee:17:c5:df:6a:0a:c3:
96:88:b8:35:50:a8:c8:0a:c6:b0:c3:1d:e6:1b:84:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:7E:60:45:B3:B9:DE:CA:99:0A:44:94:A6:6E:84:00:8E:C3:89
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c4:45:b8:11:4c:06:a1:15:57:c3:aa:a7:d6:f6:a9:8a:0a:
99:0c:12:02:98:20:8a:fa:a2:7e:cd:23:81:5e:72:79:5e:84:
5b:1d:8c:ac:e6:04:ea:3f:33:9b:51:dc:fc:da:f6:fd:d3:e3:
5a:16:6c:50:92:f2:41:50:7f:ed:02:8e:10:9d:f9:f1:0c:e1:
c3:44:c7:5e:ce:d7:e7:44:b2:74:4d:b1:94:d6:e6:98:3f:54:
d8:64:35:cb:ff:d3:41:84:80:c8:e6:f6:c9:2a:b6:8a:bf:45:
6f:b3:4e:82:a9:a5:25:59:c3:c4:1e:a8:5b:c3:a1:f2:ac:4d:
ac:b5:88:53:2e:6a:5e:dd:d5:29:d9:65:97:67:12:52:bf:82:
52:db:4b:4c:48:f9:ba:e7:2f:8c:24:3d:c0:e0:00:0e:b3:26:
cb:ea:8f:6a:0d:7a:a6:5f:3a:0f:1d:e0:96:ce:d8:b4:1e:d9:
88:e0:00:73:e6:87:4e:85:dd:c6:a2:80:51:0d:c2:31:f4:d5:
b3:0d:e0:fe:2d:c3:4d:a8:7d:9b:4f:d3:38:2b:33:ba:69:cc:
b3:58:89:ed:1a:ad:40:95:8a:52:7f:44:9b:2e:36:81:68:63:
98:2d:69:73:37:37:e4:e6:99:ac:b4:f6:0e:6b:65:d5:ec:38:
4a:e0:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:34:50 2026 by rpki-client