Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: r89N6VBVDs+Gsjh2A479s/Pvj5sTz4eLraXWYatWfbc=
Subject key identifier: 57:8C:AA:AF:9C:A3:B1:C8:26:F6:1E:DC:7D:61:CA:8E:B2:CD:EF:27
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 019D99627AC1D579E3CA38B033F65496E4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:01:01 +0000
Manifest this update: Fri 17 Apr 2026 03:01:01 +0000
Manifest next update: Sat 18 Apr 2026 03:01:01 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: tNz0NvRPXeyXd9VRfl0BEj9uoG7+bfIaWglcCq4fwME=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7a:c1:d5:79:e3:ca:38:b0:33:f6:54:96:e4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Apr 17 03:01:01 2026 GMT
Not After : Apr 18 03:01:01 2026 GMT
Subject: CN=578caaaf9ca3b1c826f61edc7d61ca8eb2cdef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:91:83:de:41:f1:f7:9d:78:95:6f:0e:84:
e0:08:1c:ac:76:4c:93:a4:94:8a:d3:c8:97:32:d4:
bf:3a:f8:ba:d1:37:d6:8e:b8:6c:cd:a0:be:cd:97:
9d:bc:57:7d:85:1b:0c:5b:3c:12:ac:37:fd:c0:65:
38:0a:da:54:50:94:3d:bc:d3:ac:fa:7d:d1:bf:86:
b7:e0:5d:72:eb:d0:a7:18:12:cd:22:37:5c:27:5c:
f8:1a:03:19:2e:72:b4:82:8e:19:57:41:a5:c7:80:
ba:e0:08:d2:26:39:1e:5b:55:5c:cd:6f:98:17:1e:
a0:43:cd:a6:f3:95:f7:69:82:93:46:67:49:c4:d8:
d5:6a:ae:ab:8f:cc:f1:5c:89:3e:d8:21:58:c4:21:
1a:65:81:e3:77:5f:35:74:d9:8f:5b:58:24:4e:76:
7c:25:11:66:34:9a:11:5d:93:c1:ec:2a:9b:91:e8:
9f:dc:1a:e5:7b:f7:95:9f:e9:5c:84:21:cb:b5:df:
65:45:2b:92:53:e2:5c:39:59:f9:b4:90:7f:d7:84:
43:18:9f:bd:fe:c7:ea:64:82:cb:15:68:94:96:54:
ca:7c:de:05:b4:0f:d1:9a:86:91:f3:fa:ec:1e:5c:
71:cc:5e:04:70:5d:38:e9:e7:d3:09:77:ed:54:c6:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:AA:AF:9C:A3:B1:C8:26:F6:1E:DC:7D:61:CA:8E:B2:CD:EF:27
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:47:2b:fd:5f:a6:c3:da:8b:ed:b8:47:7e:5d:e1:8c:ae:bc:
e6:6c:b0:0b:a7:4d:b8:8e:0d:2e:f6:39:0d:b5:07:5a:f6:4f:
a5:b1:f1:66:dd:31:41:61:03:43:63:8a:8b:71:5f:09:db:9b:
57:41:fd:27:d8:89:af:e0:59:54:f4:90:0a:f7:e0:14:2d:14:
8e:22:12:08:67:90:9c:df:b9:d0:0f:63:98:af:35:31:99:1a:
db:ee:52:83:ac:b8:2f:33:2d:70:64:b9:80:30:ac:03:da:08:
f3:5d:d1:0c:d4:1c:35:3e:70:0a:23:b9:c5:08:ba:86:c2:1d:
94:e6:be:19:68:17:80:10:00:11:9c:74:d9:71:e2:2a:60:88:
97:a8:cc:0d:e3:e0:83:d5:23:dc:21:4f:fb:d5:ce:50:9f:3e:
34:0a:45:44:59:e9:55:ba:d3:f3:8c:ff:3f:63:3d:69:af:11:
70:97:ff:e7:0a:7a:46:ce:e8:72:d0:ca:60:1b:65:ae:a8:d4:
62:22:dc:e3:f7:9e:73:50:4a:69:e0:dc:ff:ac:fb:91:09:20:
05:40:1d:86:ac:5f:a7:1a:61:15:fe:f2:c5:b4:ec:de:46:c0:
11:6f:85:40:b9:8d:9d:e0:5b:56:a1:f2:da:c9:14:98:9b:1a:
9b:33:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:15 2026 by rpki-client