Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: GQw9zspUupzgcJyOojR/T5YUBRwmJI6XfUXNfzNkiEI=
Subject key identifier: 98:D7:EC:9B:1E:E2:F1:90:E2:B7:FB:95:CF:50:18:DF:E7:1C:9E:1C
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 019CABD9D3AFCE6BAFA9644A05EB8673450C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 1362
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: cjClGuPX7dhgXo1eRBeUzFep/t8QxQrPo1Mq4D5e1K8=)
2: eXexMnsXhpiwYKh6Uvz65hPWHAs.roa (hash: Sv4osXCj3qnFKewpXCIs6tgLO2bpxFbqyIwOzHIdMNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d3:af:ce:6b:af:a9:64:4a:05:eb:86:73:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=98d7ec9b1ee2f190e2b7fb95cf5018dfe71c9e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:d8:2f:1e:39:5b:03:95:bd:98:c1:98:3a:
09:99:56:32:3b:b7:dc:86:cc:80:61:6d:0c:c9:5f:
04:3e:38:f5:6a:c1:ca:d3:32:8c:bd:06:94:0e:43:
64:ea:88:5b:3d:f5:c2:37:66:56:ec:7c:bd:90:51:
df:71:49:15:12:d3:c5:98:b1:c0:39:70:70:f5:75:
1a:fb:3b:4d:d7:87:32:98:2c:9b:18:32:b7:35:2f:
9d:2d:15:30:0d:ad:a4:3d:cb:6f:ba:b2:c7:25:7c:
af:08:3e:ef:20:0e:34:1f:f6:20:4e:c2:22:bc:02:
3c:d7:c9:49:b0:b2:d3:aa:2d:bb:8e:c0:2e:5b:66:
a1:2b:44:9a:80:42:33:16:97:ee:69:cb:ec:0e:af:
99:7b:08:5a:e8:1b:63:e7:7a:f3:d0:2c:7e:35:d1:
1d:c0:a9:40:90:2e:8d:9d:0d:c3:8f:19:f5:12:04:
f7:96:f4:1d:cb:1d:57:f7:07:d8:f6:93:df:76:a4:
cd:c3:6b:a1:33:b1:b6:6e:ec:b6:a9:cc:b8:24:72:
23:3d:8a:10:88:0b:e1:0c:4b:88:ec:c8:6f:e9:04:
c5:aa:9c:92:63:b3:03:ea:df:3f:e4:5d:4d:c0:fd:
1f:12:a2:8c:8a:0b:df:64:7c:92:86:da:32:2d:79:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:EC:9B:1E:E2:F1:90:E2:B7:FB:95:CF:50:18:DF:E7:1C:9E:1C
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:64:c2:e1:27:81:de:ac:c9:76:8b:69:3f:71:16:dc:35:b6:
78:a2:56:14:4e:31:ba:24:c3:cc:ec:71:ad:e4:fd:ad:bd:a8:
a2:87:a3:e7:2e:4c:11:b4:5a:d5:35:e2:7c:87:32:12:1f:52:
99:76:c3:93:a1:02:6b:89:c0:68:ef:60:fb:d4:8a:34:99:c3:
14:d9:66:af:e0:6d:5e:65:b2:fe:1b:c6:e0:48:96:25:49:25:
20:19:3c:65:6d:ee:e3:09:9b:3c:2b:62:40:02:d9:1e:7e:f3:
f0:59:44:49:56:9f:94:20:4e:72:fb:e8:30:f5:53:b0:4c:8d:
dd:29:36:6a:b3:98:77:db:44:5b:66:d8:da:37:8b:fc:35:1b:
3c:d7:a8:8f:c8:9e:0a:c5:1b:44:9c:d6:a4:52:2e:01:a6:0e:
ad:a5:4d:d8:6f:46:19:49:60:25:dd:9b:3c:a3:f1:9a:aa:15:
0d:58:43:7e:0f:b1:07:18:24:4b:2f:68:86:a6:ed:5e:8b:5e:
d0:54:a3:f0:05:c6:58:9e:04:e8:84:da:70:67:f8:81:ea:f7:
83:77:5d:a8:71:95:90:fd:b8:24:99:35:16:78:5a:5e:99:a9:
0d:79:0f:82:c5:76:2f:69:33:6f:77:0d:26:75:d7:2d:20:7d:
ca:7d:ca:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2dOvzmuvqWRKBeuGc0UMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjNhYzIwYmMxZTQ1ODVjNGZkNGNjOGU3YmM5NzYzMzFi
ODVjNmUwHhcNMjYwMzAyMDAwMTQ1WhcNMjYwMzAzMDAwMTQ1WjAzMTEwLwYDVQQD
Eyg5OGQ3ZWM5YjFlZTJmMTkwZTJiN2ZiOTVjZjUwMThkZmU3MWM5ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrDYLx45WwOVvZjBmDoJmVYyO7fc
hsyAYW0MyV8EPjj1asHK0zKMvQaUDkNk6ohbPfXCN2ZW7Hy9kFHfcUkVEtPFmLHA
OXBw9XUa+ztN14cymCybGDK3NS+dLRUwDa2kPctvurLHJXyvCD7vIA40H/YgTsIi
vAI818lJsLLTqi27jsAuW2ahK0SagEIzFpfuacvsDq+Zewha6Btj53rz0Cx+NdEd
wKlAkC6NnQ3Djxn1EgT3lvQdyx1X9wfY9pPfdqTNw2uhM7G2buy2qcy4JHIjPYoQ
iAvhDEuI7Mhv6QTFqpySY7MD6t8/5F1NwP0fEqKMigvfZHyShtoyLXkisQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjX7Jse4vGQ4rf7lc9QGN/nHJ4cMB8GA1UdIwQY
MBaAFAsjrCC8HkWFxP1MyOe8l2MxuFxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYt
MDYxODhjZjdhM2MyLzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYtMDYxODhjZjdhM2My
LzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGTC4SeB
3qzJdotpP3EW3DW2eKJWFE4xuiTDzOxxreT9rb2oooej5y5MEbRa1TXifIcyEh9S
mXbDk6ECa4nAaO9g+9SKNJnDFNlmr+BtXmWy/hvG4EiWJUklIBk8ZW3u4wmbPCti
QALZHn7z8FlESVaflCBOcvvoMPVTsEyN3Sk2arOYd9tEW2bY2jeL/DUbPNeoj8ie
CsUbRJzWpFIuAaYOraVN2G9GGUlgJd2bPKPxmqoVDVhDfg+xBxgkSy9ohqbtXote
0FSj8AXGWJ4E6ITacGf4ger3g3ddqHGVkP24JJk1FnhaXpmpDXkPgsV2L2kzb3cN
JnXXLSB9yn3KfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:42 2026 by rpki-client