Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: i59+edChacKh1yxM52KgM9XDSufvlBD1hKjjAnKKmnQ=
Subject key identifier: B2:0D:CF:F3:86:32:9D:43:1B:A5:F3:78:6F:7C:7A:12:75:98:0A:BB
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 01A131468262AA247D2E627A89AF60D1B62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 03A6
Signing time: Mon 12 Oct 2026 18:01:06 +0000
Manifest this update: Mon 12 Oct 2026 18:01:06 +0000
Manifest next update: Tue 13 Oct 2026 18:01:06 +0000
Files and hashes: 1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: J+hv+O1SmK9LRc3fWJu2aGDCO9eGao8J9gRYd8La6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:82:62:aa:24:7d:2e:62:7a:89:af:60:d1:b6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: Oct 12 18:01:06 2026 GMT
Not After : Oct 13 18:01:06 2026 GMT
Subject: CN=b20dcff386329d431ba5f3786f7c7a1275980abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:57:b8:b8:27:83:44:05:5b:ff:69:fd:f0:
ab:65:3a:09:26:e0:2e:54:f1:eb:c3:91:db:90:e1:
73:30:2b:20:a3:31:7c:b4:40:4e:fa:8d:8c:e4:54:
34:90:2d:a7:d5:43:0b:44:ff:b2:c2:c1:ef:55:83:
b7:3e:28:0a:a8:f7:ea:6d:43:89:92:83:c2:42:78:
2e:c9:9c:7b:5b:ad:eb:88:10:86:a4:2d:c0:56:82:
5d:7f:6a:6e:b7:f5:7b:09:00:fa:c3:e1:c8:2c:de:
4a:47:16:af:89:dd:c7:18:eb:99:02:c4:31:9d:c9:
1e:09:a6:67:9b:63:e5:16:aa:4f:a4:fd:93:3e:8c:
40:8e:55:a6:60:91:80:98:46:62:75:d9:27:c9:9b:
00:3a:cd:ad:db:c0:0b:47:86:31:17:57:6d:52:9d:
0c:2c:32:ef:67:23:98:91:87:ce:b4:0e:e7:73:ac:
2d:6c:3b:e5:61:32:4f:ea:c0:13:38:f5:54:df:55:
42:ef:85:ba:25:71:98:8d:29:79:ea:c3:df:35:f7:
3c:a1:92:71:b9:b5:67:4d:6e:3c:68:c6:0c:d1:4f:
5a:02:e6:3b:e2:23:7b:8b:a5:2c:09:8b:db:2d:2a:
f7:2d:49:ef:4d:09:75:40:7b:26:1b:a6:2b:66:c1:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:CF:F3:86:32:9D:43:1B:A5:F3:78:6F:7C:7A:12:75:98:0A:BB
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d7:c3:fd:3f:b0:f5:97:93:66:09:33:05:0d:a7:c8:83:d9:
cd:a1:c6:b6:7b:80:9e:ba:cd:83:2b:8b:89:95:90:77:12:bd:
4c:12:26:f1:88:5e:43:f3:e1:49:44:63:0e:de:90:34:5f:a3:
21:bb:70:4f:cb:88:b2:e3:f6:24:a9:4d:e2:47:4a:36:ba:35:
0f:cd:7a:77:29:ae:3b:a4:cf:ff:eb:92:6f:28:55:36:42:51:
f0:fc:b5:b9:50:fc:a7:a4:f7:37:59:e3:d5:e4:88:05:b6:48:
ae:1d:af:90:65:ce:f4:c4:1f:43:e9:be:b2:a4:cb:29:f1:14:
64:a6:e9:e6:a7:c5:f9:1e:10:5e:12:9f:27:16:bc:ae:45:b3:
77:3e:37:e0:39:ae:ca:0c:e6:06:5a:2b:6b:a0:a3:26:57:36:
98:d9:12:d6:59:58:a9:3f:2c:7a:7f:bc:85:e0:58:12:fd:5b:
50:01:c4:15:8c:60:de:ca:fd:61:a1:07:81:e9:9f:6b:d3:a5:
0d:a5:fd:9f:d4:6a:5a:d1:b2:fa:56:94:41:44:72:f0:5f:59:
73:22:da:0a:5d:31:17:15:60:e2:4e:b5:d9:e6:82:f1:71:0f:
fb:5d:ce:7a:67:3a:25:0a:fa:bc:0f:bc:a8:c8:23:73:95:9b:
29:10:0d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:02:27 2026 by rpki-client