Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: TK+Dtc2xHJc8ZWQctbgIKEI/+zgllhtbN0po8Lhfprw=
Subject key identifier: DA:58:B2:B0:57:BD:89:60:4B:BB:0C:D7:EF:74:53:D7:D5:24:91:7D
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 019CAB34AB6368E82C3E693938ABB05C2081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 0B4B
Signing time: Sun 01 Mar 2026 21:01:21 +0000
Manifest this update: Sun 01 Mar 2026 21:01:21 +0000
Manifest next update: Mon 02 Mar 2026 21:01:21 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: yXPEUqz6W9BAoefnTVBs0o8VkgDaZIyWiob9WZU+JPA=)
2: x2MM1e6RzNZDA4hLyDx2reSAtec.roa (hash: LoKZDS1lTFaAe/itPWyVaeaD97C4a8VpDh8K0DR+aq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:ab:63:68:e8:2c:3e:69:39:38:ab:b0:5c:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Mar 1 21:01:21 2026 GMT
Not After : Mar 2 21:01:21 2026 GMT
Subject: CN=da58b2b057bd89604bbb0cd7ef7453d7d524917d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:20:ad:6e:b9:49:19:a2:03:59:d5:ac:e3:
9e:7d:04:7b:36:29:86:45:26:b8:31:36:a2:cc:85:
65:ae:60:89:d8:4c:c5:b8:17:fa:ae:8c:de:66:16:
d1:49:28:3e:1e:a7:18:ad:2c:90:72:3f:33:07:1c:
3f:d9:4e:6d:bc:67:4b:9f:39:5b:4b:a3:cb:d8:93:
b3:c1:80:b2:60:26:dd:72:2a:bb:81:87:11:a3:44:
3d:b9:45:ac:60:cf:1b:c6:ce:b3:45:6e:83:97:9e:
96:ea:46:a6:51:f2:22:87:04:78:60:85:2a:62:b8:
ab:cd:70:4a:fb:0e:35:63:f5:11:50:4c:1a:bd:b2:
08:a3:b1:2a:c7:32:c6:ff:78:db:bf:97:c2:fe:c8:
99:e4:af:1c:37:8f:87:43:d9:05:6c:31:91:23:ad:
37:83:cc:a7:1b:ba:6a:1e:da:01:71:14:a8:52:37:
ed:07:59:df:7d:a5:dc:c9:ae:f4:2c:6b:ba:22:4b:
9c:a9:2a:d0:d9:15:06:c8:34:52:22:d5:bc:fb:33:
d5:0c:60:ae:e4:56:0b:e9:11:79:16:fd:42:b9:89:
4d:60:f3:1e:fa:82:d0:13:04:c1:53:13:4e:15:b2:
d5:d4:3b:1f:c0:d7:92:bb:d8:35:fd:44:b9:42:fd:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:58:B2:B0:57:BD:89:60:4B:BB:0C:D7:EF:74:53:D7:D5:24:91:7D
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:94:70:5e:79:f6:a3:5d:45:1d:b1:88:b8:c2:8d:33:d0:
5c:5d:25:73:81:40:82:d9:6c:1f:cc:e6:23:eb:4d:79:c4:b1:
d9:38:d0:f1:25:bc:e1:4b:26:bc:29:7d:ad:9f:3d:fb:96:bd:
9f:8d:ac:b1:8b:91:81:98:cb:65:94:64:20:9e:51:21:31:65:
42:fa:bc:db:ed:18:bc:a4:dc:11:27:f0:d5:12:1a:08:bf:c5:
55:d5:27:5b:80:f8:86:c3:25:70:ef:1d:06:e5:50:b2:64:34:
bd:1c:ae:dd:12:08:d7:99:db:90:28:e8:ed:d0:ac:ee:c8:31:
8e:da:4b:d0:f9:05:0d:89:f0:74:35:67:32:1f:db:63:e3:50:
3e:54:19:18:25:6f:46:93:39:80:2c:d2:07:42:b2:ec:da:1f:
6d:2a:bc:6b:7d:4c:00:8c:2f:02:be:1c:7c:7b:f6:20:c0:e6:
e6:fb:58:45:26:01:f7:7f:15:79:4f:81:b7:3e:bd:dd:89:eb:
7f:5a:bb:b5:c9:3c:06:70:52:95:86:00:9d:d6:2b:c7:94:eb:
02:45:21:bc:51:71:92:0e:5d:07:80:57:42:30:fa:be:26:06:
32:db:ed:fe:8e:36:90:78:9f:e6:27:f4:c7:f1:81:78:5f:ea:
81:bf:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:32 2026 by rpki-client