Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: 3jhfop4KQfNtGjCnwXBjz1R4ldSiMNj9IbqX6nehlFE=
Subject key identifier: 28:C2:05:FC:BB:E9:39:AA:2A:9B:10:D9:90:5B:99:8C:29:9A:FC:F9
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 019FA8993E6DC2E12BF9BBA4DE1B08CBB67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 12:00:43 +0000
Manifest this update: Tue 28 Jul 2026 12:00:43 +0000
Manifest next update: Wed 29 Jul 2026 12:00:43 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: 3/ZyGhICV+ZMxAPWFErsXPCRTRu6GgxBCFFVEsMt05o=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:3e:6d:c2:e1:2b:f9:bb:a4:de:1b:08:cb:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jul 28 12:00:43 2026 GMT
Not After : Jul 29 12:00:43 2026 GMT
Subject: CN=28c205fcbbe939aa2a9b10d9905b998c299afcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:c0:c2:6f:21:6e:78:c8:60:c5:06:7b:fd:
31:76:6f:86:d0:3c:45:4f:44:9c:dd:fc:d8:e4:7e:
0b:1e:b1:95:98:62:30:e5:0f:cf:5b:ac:f6:bc:a3:
db:13:99:7d:db:a7:4d:02:4c:8c:a0:63:b1:64:0f:
4d:ad:f7:e8:ba:8f:5c:9e:67:0b:2b:12:9e:87:65:
0d:e8:3b:d4:71:32:b6:44:b5:df:b9:84:52:7c:6b:
ee:9b:ad:16:33:0e:fc:91:db:bb:1d:97:83:f2:fb:
cd:a6:d0:7c:19:17:7f:b0:b5:b6:2d:c2:95:33:ea:
3e:47:6f:47:9d:35:f8:62:a5:8b:2a:84:9a:54:b6:
e6:ba:92:3f:bd:25:bb:60:b1:60:81:d2:a2:0c:6f:
7f:e5:61:ec:07:5c:42:5e:87:39:ed:09:76:da:e1:
b3:c8:c5:dd:98:08:e4:9e:4f:c5:c6:53:da:9f:3b:
87:5b:a2:92:2b:70:cc:7e:6f:5a:fb:f2:7b:c4:62:
d9:24:4b:82:28:7e:24:07:59:1a:eb:dc:0f:4b:02:
6c:00:be:7e:1e:13:b5:c1:84:d2:94:d0:3d:34:3e:
c3:ec:19:36:32:39:c8:bf:f1:09:48:da:d5:8a:2c:
a9:db:a9:98:3a:58:5d:06:10:57:0a:c2:35:6e:2b:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:05:FC:BB:E9:39:AA:2A:9B:10:D9:90:5B:99:8C:29:9A:FC:F9
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:05:84:38:e2:85:aa:12:f3:a5:de:72:ad:50:9b:7b:39:e3:
34:f7:5e:37:14:52:e5:52:14:d6:33:bf:31:8e:04:bd:06:2f:
c1:40:94:96:7b:67:e6:d3:c1:03:54:72:48:7a:bf:5a:23:1e:
df:b0:b3:e6:5a:b3:c5:d1:d2:77:7e:18:ff:b8:25:55:11:67:
55:ff:e0:72:ea:64:17:25:20:95:6f:f9:78:0d:f7:32:0c:f2:
06:6c:e1:f2:f6:22:48:b8:ca:3a:9b:76:81:6e:48:e3:d3:5c:
00:9e:35:37:09:55:a1:cb:0a:a9:81:9a:8d:18:08:42:28:42:
b3:9f:49:05:8b:8b:da:6d:f4:f1:75:a4:2a:fe:84:03:13:7e:
09:1c:d4:5d:a2:3c:a9:ee:35:10:59:70:91:e0:b7:32:eb:67:
b7:92:9d:1a:b2:7f:34:c0:6f:7b:45:9f:2a:5e:9c:2b:22:45:
16:01:09:db:54:3d:9d:43:47:1a:f3:1f:bc:22:65:2d:c8:a2:
c3:72:66:69:53:01:16:a9:60:7d:4c:6e:49:e6:d4:0e:54:5d:
45:64:44:75:fa:8c:31:c9:4a:aa:55:2f:91:d1:5e:38:09:13:
61:72:a6:62:6e:9d:a8:17:db:22:01:f5:1d:29:d4:83:5e:da:
9e:21:4f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omT5twuEr+buk3hsIy7Z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGIxYzc5YmZhZTEyYTViODdmMzVjOTk4YmI2MGIzZmE0
ZTY2MjEwHhcNMjYwNzI4MTIwMDQzWhcNMjYwNzI5MTIwMDQzWjAzMTEwLwYDVQQD
EygyOGMyMDVmY2JiZTkzOWFhMmE5YjEwZDk5MDViOTk4YzI5OWFmY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKnAwm8hbnjIYMUGe/0xdm+G0DxF
T0Sc3fzY5H4LHrGVmGIw5Q/PW6z2vKPbE5l926dNAkyMoGOxZA9Nrffouo9cnmcL
KxKeh2UN6DvUcTK2RLXfuYRSfGvum60WMw78kdu7HZeD8vvNptB8GRd/sLW2LcKV
M+o+R29HnTX4YqWLKoSaVLbmupI/vSW7YLFggdKiDG9/5WHsB1xCXoc57Ql22uGz
yMXdmAjknk/FxlPanzuHW6KSK3DMfm9a+/J7xGLZJEuCKH4kB1ka69wPSwJsAL5+
HhO1wYTSlNA9ND7D7Bk2MjnIv/EJSNrViiyp26mYOlhdBhBXCsI1bit4SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjCBfy76TmqKpsQ2ZBbmYwpmvz5MB8GA1UdIwQY
MBaAFAmLHHm/rhKluH81yZi7YLP6TmYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWIt
OWI3YzQ0ZGMxOTNiLzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWItOWI3YzQ0ZGMxOTNi
LzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwWEOOKF
qhLzpd5yrVCbeznjNPdeNxRS5VIU1jO/MY4EvQYvwUCUlntn5tPBA1RySHq/WiMe
37Cz5lqzxdHSd34Y/7glVRFnVf/gcupkFyUglW/5eA33MgzyBmzh8vYiSLjKOpt2
gW5I49NcAJ41NwlVocsKqYGajRgIQihCs59JBYuL2m308XWkKv6EAxN+CRzUXaI8
qe41EFlwkeC3Mutnt5KdGrJ/NMBve0WfKl6cKyJFFgEJ21Q9nUNHGvMfvCJlLcii
w3JmaVMBFqlgfUxuSebUDlRdRWREdfqMMclKqlUvkdFeOAkTYXKmYm6dqBfbIgH1
HSnUg17aniFPOg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:09 2026 by rpki-client