Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: rHIFNYoCU8V8Og3cAiN2hC4PqEFFVENt1wHCJ4LnaiM=
Subject key identifier: 51:16:31:B3:C4:F6:12:0A:4E:51:D5:D0:39:BF:AD:29:87:3F:7A:CE
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 019D98BDB0B467DE0101FCF1742CB6220852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 0BC6
Signing time: Fri 17 Apr 2026 00:01:01 +0000
Manifest this update: Fri 17 Apr 2026 00:01:01 +0000
Manifest next update: Sat 18 Apr 2026 00:01:01 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: WWn7fHFqr2R5wBU3hbLZfvjGdhurfTCXvA2fFdnYJE4=)
2: x2MM1e6RzNZDA4hLyDx2reSAtec.roa (hash: LoKZDS1lTFaAe/itPWyVaeaD97C4a8VpDh8K0DR+aq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b0:b4:67:de:01:01:fc:f1:74:2c:b6:22:08:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Apr 17 00:01:01 2026 GMT
Not After : Apr 18 00:01:01 2026 GMT
Subject: CN=511631b3c4f6120a4e51d5d039bfad29873f7ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:f0:32:34:9a:ab:85:ef:f9:0d:4b:fe:be:
2e:15:d2:1d:25:47:56:18:68:ef:a2:78:05:d5:81:
15:0f:d4:d9:75:14:b3:cd:24:97:b9:8f:0c:8d:ec:
43:5f:38:f3:c6:fe:9d:e3:e6:b2:02:76:62:cb:81:
27:55:05:ca:79:ea:7e:ab:5d:fd:af:9b:e5:af:62:
3f:09:6f:1e:3e:54:4a:4d:9b:66:3b:5e:51:50:90:
85:29:b0:e5:cd:87:42:9a:6b:94:22:a8:1c:4b:6e:
b0:47:9f:76:08:6e:51:bd:24:9c:6b:bf:15:be:0f:
59:09:a2:f8:b9:2e:38:dc:7e:5a:d2:09:ce:9f:9e:
08:d7:e8:09:d9:46:ff:f0:02:9b:0c:61:e8:8a:e7:
da:18:0d:4e:6f:68:b7:5d:54:ae:31:fd:86:3f:e1:
39:eb:b2:ea:64:d2:43:56:96:9f:0b:77:b7:fd:e8:
91:ab:79:06:79:63:e8:fe:20:ae:a2:72:27:b5:30:
ad:a4:c9:cb:3b:1f:fa:26:27:4b:4c:fe:1a:a4:e7:
04:b3:58:9b:79:f4:44:41:d5:56:ec:79:71:3b:d3:
c9:a4:7b:7e:3d:ef:a9:5c:87:40:ee:c7:dd:c5:55:
9f:ef:c0:5e:7f:19:c2:37:de:ac:f2:33:b2:b8:64:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:31:B3:C4:F6:12:0A:4E:51:D5:D0:39:BF:AD:29:87:3F:7A:CE
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:89:00:59:55:17:8d:f6:04:9f:b1:3b:7f:26:41:3e:c2:fb:
d0:44:27:4c:fc:55:38:43:0e:0c:96:00:ad:a6:27:75:7d:77:
83:b9:44:66:c1:ce:e8:58:c8:89:7b:41:3a:fd:5f:13:5f:ac:
56:22:0b:a9:93:0d:6b:04:cb:4c:c7:b8:d5:ab:41:c4:1f:c0:
20:00:e0:60:9c:c9:e6:81:d2:94:20:ac:10:28:d9:14:e2:c8:
2a:d5:97:77:73:cd:d7:d4:54:fa:c6:7f:f4:e9:4a:7f:b0:b8:
eb:73:b8:ff:09:81:c7:28:1b:90:c7:92:58:80:7c:21:d0:ba:
07:ae:d8:70:72:d0:0e:82:19:ae:81:32:ef:8a:e4:3a:f1:30:
f0:ce:b1:1b:80:68:a0:78:f9:63:37:4f:e3:7e:c3:2b:05:4b:
e5:68:27:75:1f:12:ce:45:c2:2e:07:22:f3:ed:9a:18:c8:04:
fd:92:a2:0d:ec:e3:09:19:f4:cc:73:9c:6e:fa:c5:71:0f:73:
1d:c3:46:a1:82:93:4e:3b:ac:02:e8:61:93:cd:11:8b:f1:24:
76:a2:24:04:86:6b:d4:18:f6:f7:5b:8d:a7:10:14:19:cb:70:
82:c2:b1:a0:38:5a:22:e4:77:0f:5b:8b:ab:31:71:4e:c9:35:
61:06:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:48 2026 by rpki-client