Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: 1DVOCJnui6qpyzRV7ey96n6tkFypIyFXwu9gWFZEduA=
Subject key identifier: 11:14:3F:B7:EB:81:88:CC:2D:C6:5C:71:BA:C3:54:C0:16:02:BE:5F
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 019CAB6AF0D5B490604FAD4BD61458F424E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: 9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa (hash: cZRk0f4ULOIcvr4Kq3jJj23UFievd5ZXiHt0/5E2LwY=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: Dg56vRKFjron8FEZtJlU3vy+GxebMwFgOdV/JIaAWoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f0:d5:b4:90:60:4f:ad:4b:d6:14:58:f4:24:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=11143fb7eb8188cc2dc65c71bac354c01602be5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:b2:ad:27:4d:e3:31:da:21:72:2c:48:0e:
d3:03:76:25:4c:85:1e:85:e6:ab:f4:7c:70:c7:67:
e6:e5:5e:35:c9:c7:c7:f5:30:0c:82:07:56:75:b4:
d9:cb:1d:c9:f0:01:ca:e2:5d:a9:4e:23:4b:6d:aa:
46:6b:68:73:e5:99:c0:22:a0:d0:0d:9e:2f:3e:f6:
36:8a:54:75:31:75:8a:c8:6b:91:fa:7b:2f:cb:59:
a1:f1:e4:f9:c0:97:5c:9a:06:7d:67:b2:65:45:c4:
45:1b:6c:4e:17:99:65:46:e4:76:22:cd:66:b5:1f:
aa:a0:48:ee:b5:89:9b:1f:0f:44:0a:16:3b:08:10:
5b:d8:c9:ab:12:9f:e2:e3:de:2b:06:b3:00:a4:d4:
47:e2:34:09:c1:37:be:5f:0e:d7:b7:63:c1:98:57:
44:12:cf:1f:32:1b:3b:6f:d9:57:5a:45:33:21:3a:
7b:09:e8:11:bc:f7:2a:3e:35:57:b9:9f:af:3f:ca:
9e:f4:ab:56:d3:2d:6b:f8:60:d3:38:80:89:7a:96:
40:2c:4c:59:55:3c:75:ed:51:78:e3:5d:08:ff:22:
93:21:91:f9:4d:71:12:a1:83:36:e9:c7:ed:27:ca:
df:32:fd:ec:2e:53:bc:d7:77:0b:2c:59:ab:41:b5:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:3F:B7:EB:81:88:CC:2D:C6:5C:71:BA:C3:54:C0:16:02:BE:5F
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4a:75:2f:5f:5d:d0:6f:20:1a:73:4b:fb:05:52:1d:1c:28:
ee:41:d0:a9:7c:9e:16:5e:6c:fc:fd:3e:01:53:57:e7:a8:29:
26:6b:f8:60:5f:f8:2e:2a:76:4c:6f:12:46:3a:18:b7:4e:aa:
79:37:68:7e:d8:de:e1:9d:ef:60:83:41:f5:34:9d:44:a8:e7:
cc:fe:b5:23:16:07:67:f4:02:32:f1:2d:1c:3e:9b:28:18:c5:
9c:4a:12:22:18:ab:00:9f:10:9e:5a:20:dd:97:12:6c:16:c6:
f7:6a:5a:ca:d2:31:63:b0:52:6f:a3:0a:77:84:3a:fd:35:d2:
b0:82:85:ff:d9:2c:2b:b7:38:50:82:34:c5:73:a0:ae:5a:c3:
82:9a:90:15:45:86:c2:a0:ae:99:79:b1:27:de:02:07:94:bc:
0e:68:5b:48:3e:af:eb:56:f4:17:1c:a8:5d:dc:40:c4:c7:ef:
df:d5:68:73:ce:12:a3:41:c2:89:17:49:83:7a:fe:70:88:23:
a0:ab:af:20:e9:80:ca:4a:c1:f6:a0:bb:63:a9:25:00:43:a8:
52:fa:92:de:20:9c:2a:f3:2a:a3:02:be:81:31:79:4a:d4:29:
c6:7c:25:6c:70:30:b7:2b:aa:c2:0d:9b:17:2b:76:aa:22:14:
d5:da:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:20 2026 by rpki-client