Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: PFqPrmWBpGVLIFrsyMzUreXIeRStFuXy1uDPKuDJNNA=
Subject key identifier: ED:1D:FD:BB:AA:73:0E:53:21:09:FD:5B:3A:D6:C2:5B:9A:10:67:CB
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 019FAD1A75D51842ED74545D463128B92530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 02DD
Signing time: Wed 29 Jul 2026 09:00:20 +0000
Manifest this update: Wed 29 Jul 2026 09:00:20 +0000
Manifest next update: Thu 30 Jul 2026 09:00:20 +0000
Files and hashes: 1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: VaxzSrnR+A7UcSEFUZ+QQ6RkH3eADMNE8asFhrThfV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:75:d5:18:42:ed:74:54:5d:46:31:28:b9:25:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: Jul 29 09:00:20 2026 GMT
Not After : Jul 30 09:00:20 2026 GMT
Subject: CN=ed1dfdbbaa730e532109fd5b3ad6c25b9a1067cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:31:ae:b6:e8:54:b3:73:b2:b5:92:a4:83:
52:1b:b2:2d:02:7d:92:5e:99:03:7e:79:d3:4c:3b:
62:52:f0:86:8d:65:89:c0:ce:5d:df:f2:e4:e4:bb:
b9:de:16:5b:62:ef:dd:6d:1f:17:5b:84:b3:c4:57:
ff:19:eb:52:b9:be:35:25:9a:8b:55:ec:15:25:13:
f0:d5:6a:0b:48:b3:7e:c6:2d:26:bd:0e:b1:14:81:
f3:e0:5c:84:5c:f2:17:f0:c9:06:3c:66:7a:2a:98:
78:4a:11:6b:14:be:66:0e:25:e3:5a:a3:83:26:84:
e4:a9:51:18:bc:89:17:3c:e2:e4:99:ab:7b:14:a8:
48:1e:dc:18:2d:c0:59:a6:bd:b2:54:62:63:1b:76:
10:41:34:a0:e6:5f:38:b3:30:a2:a1:b6:9d:ea:71:
5c:61:a2:3b:b0:e6:06:e4:91:80:2a:c9:91:71:04:
f2:11:b4:5b:9b:82:af:5c:ae:9c:d2:de:ff:b8:bd:
97:04:04:39:58:19:df:da:29:5e:2a:8d:22:8a:4d:
35:01:c5:fd:25:57:8d:d0:da:af:b0:cc:89:04:13:
2b:36:5c:a2:ce:1b:05:0e:43:e2:4b:f6:70:7f:bd:
d4:d8:c8:60:ca:c0:7e:5d:0a:db:21:4e:76:0b:7f:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1D:FD:BB:AA:73:0E:53:21:09:FD:5B:3A:D6:C2:5B:9A:10:67:CB
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4a:03:3b:08:32:8f:3b:55:a7:74:66:40:91:78:d2:49:09:
c5:f7:07:e9:1a:6c:a9:64:76:56:ab:3c:64:15:80:48:4d:b3:
3f:12:df:44:1f:fe:6a:3a:86:83:51:0e:4f:3f:e5:fa:eb:50:
1b:94:8f:36:09:01:dd:bb:c4:0e:a4:b3:e0:db:e8:73:7c:dd:
04:e5:b3:7b:41:c6:f2:31:97:34:ac:00:3a:af:97:ae:73:35:
ec:47:eb:95:db:58:35:29:70:44:1a:a4:47:01:66:1f:1f:21:
fb:b8:b3:90:02:3e:0b:fd:54:ae:45:84:4f:a6:45:ab:38:8a:
36:cf:e9:d2:eb:97:62:ac:43:0b:95:fc:b3:b4:c6:32:1f:9b:
53:aa:20:c8:65:88:52:58:5a:a2:1c:df:0d:94:f6:26:fc:1a:
10:a9:bc:5c:58:e2:27:28:a5:af:de:2e:41:6b:38:ad:06:41:
88:92:fe:34:ce:f6:5a:25:0d:36:58:b9:48:43:e6:f4:f6:79:
ce:70:82:b2:d5:a4:8a:6f:b3:ab:a3:ff:09:3b:54:a1:43:70:
02:db:52:13:8d:f9:fe:c9:95:a2:d3:b6:1e:9b:a3:16:5e:f5:
c4:cc:19:c0:62:6a:94:a7:88:fe:4d:8c:3e:80:3c:0e:ee:cc:
99:e9:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:22:52 2026 by rpki-client