
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
File: RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json)
Hash identifier: LPm1xtj+EuIlfr/X12c+s54DJvXpztR5dYCLAS5gLIw=
Subject key identifier: 37:B6:B4:72:9A:A3:1B:91:D3:FC:9C:C3:56:2D:7E:8E:B3:59:18:20
Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
Certificate issuer: /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Certificate serial: 019CAD59BE70640DDE48A0ABE1AD0A2BD856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:05 +0000
Manifest this update: Mon 02 Mar 2026 07:01:05 +0000
Manifest next update: Tue 03 Mar 2026 07:01:05 +0000
Files and hashes: 1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: cAar4Up/xoA3In7d5zy5HD00VX3tEPYbxAO75T13vBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:be:70:64:0d:de:48:a0:ab:e1:ad:0a:2b:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Validity
Not Before: Mar 2 07:01:05 2026 GMT
Not After : Mar 3 07:01:05 2026 GMT
Subject: CN=37b6b4729aa31b91d3fc9cc3562d7e8eb3591820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:d8:dc:b9:f4:ad:7b:68:a0:7d:c8:1c:1d:
9d:3f:60:ae:07:23:3b:4f:eb:c3:c4:0e:cf:67:7e:
d3:33:44:08:0a:af:50:a3:77:00:2c:f1:78:f3:ee:
8a:f0:54:c5:2a:8a:1e:32:24:02:0a:58:32:b1:45:
f6:4e:a2:c5:d2:3b:de:71:c6:fe:b1:f8:3b:35:57:
d7:9d:ea:a7:b9:ab:36:4d:ea:c9:31:d6:48:ef:39:
8c:44:ed:44:1d:03:8d:22:01:07:59:da:25:87:d1:
ec:dd:0e:b7:74:ef:97:1c:e9:26:21:b4:4b:7a:ae:
fa:c2:91:95:c2:c7:9e:a4:63:9c:2e:72:94:3d:a3:
75:26:eb:2b:e9:eb:ab:40:11:40:e8:10:5f:4c:df:
6d:f7:f7:11:46:99:a5:03:c8:5a:ea:fd:95:22:c0:
8a:6f:22:52:b3:68:eb:cd:00:02:db:53:53:51:a8:
52:61:f1:3f:b2:b7:fe:f7:2c:48:d8:66:93:df:ed:
7e:bc:c3:ab:fb:64:38:09:50:13:b4:1d:8e:d5:4b:
8e:87:76:9b:4c:5e:10:73:c6:a5:e6:fa:e0:39:c8:
c2:ab:7e:bc:2b:19:ff:09:19:04:aa:55:2f:26:60:
a1:55:f8:84:e7:73:8e:fa:cb:e7:cd:ba:33:84:fc:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B6:B4:72:9A:A3:1B:91:D3:FC:9C:C3:56:2D:7E:8E:B3:59:18:20
X509v3 Authority Key Identifier:
keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e6:a3:15:6c:ba:ce:55:e7:1c:af:a3:ba:d7:b8:0b:fe:db:
ea:e9:43:5f:92:02:82:79:0a:f7:96:0e:a2:92:7d:4f:70:03:
ad:9a:3c:4f:b9:9b:12:f8:65:2d:5b:a7:70:a5:2f:8d:15:59:
fd:b4:41:f5:1d:bf:d7:d6:e8:1c:ac:bb:cc:ca:db:0f:bd:9b:
d8:b5:1a:ad:3a:80:98:24:a6:a0:4a:99:42:3c:4d:e2:d2:a8:
60:c6:aa:58:8f:fc:de:3d:d9:69:a3:ee:12:c9:a4:0e:24:b0:
62:e7:f6:92:a9:ed:ca:ab:35:ca:70:6b:67:70:5d:89:5a:ee:
96:1f:2c:b7:28:04:e7:9b:37:68:ca:5a:db:8a:b4:5f:fc:a2:
64:76:92:75:80:39:06:c3:ed:71:8a:4a:2d:cb:b5:91:f4:fc:
57:46:69:5f:6e:03:f8:40:5a:6e:a5:73:e8:3d:51:db:83:75:
61:49:16:cf:ae:63:37:ee:8d:68:86:b5:a2:da:7a:c6:cb:b3:
5d:86:bf:51:ec:8a:5e:34:0e:ec:a3:0e:5b:f2:66:ba:f6:c0:
fc:16:69:93:dd:09:f3:7e:5f:13:b6:d3:1b:11:0e:f4:da:a6:
42:63:fc:95:36:5b:8c:10:a4:c1:a0:4c:35:fd:01:bf:b7:2e:
23:b0:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:01 2026 by rpki-client