Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: OGW8ISJazaZYBa+93K+RDGCKtp2huOhWjZoxKxcVklc=
Subject key identifier: B0:F0:E5:1D:69:88:7D:AC:C2:1D:08:A6:65:C7:5C:67:E7:98:25:88
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 019F916CB440FA7CE3459CE18E4BE162616A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 123A
Signing time: Fri 24 Jul 2026 00:00:48 +0000
Manifest this update: Fri 24 Jul 2026 00:00:48 +0000
Manifest next update: Sat 25 Jul 2026 00:00:48 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: so7A6eAHNS/znbtaq119c1BTejnoPmFkLn5aLONou+I=)
2: VfT1jovZQbB_GOxrewqAg31IJD4.roa (hash: rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b4:40:fa:7c:e3:45:9c:e1:8e:4b:e1:62:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jul 24 00:00:48 2026 GMT
Not After : Jul 25 00:00:48 2026 GMT
Subject: CN=b0f0e51d69887dacc21d08a665c75c67e7982588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:29:33:56:b1:af:2d:91:49:dd:e6:9f:16:
cd:be:d9:07:9b:99:79:2f:cc:2c:63:c8:89:14:ee:
18:e1:79:99:bd:3d:8e:8a:d5:fb:4e:70:83:d2:a5:
4b:2e:cf:00:eb:e4:a5:7e:90:ff:f9:e4:c8:74:80:
5f:0d:c4:8b:cb:59:4d:01:5f:f6:ee:10:cb:94:1b:
ba:af:20:28:85:91:de:37:1d:44:19:6a:96:17:d4:
04:67:54:e0:4d:dc:b5:7d:88:a5:3e:93:22:67:93:
fc:fa:a6:d7:78:5b:50:d7:3d:2b:b1:15:54:89:29:
25:c0:fa:0c:15:e9:f8:d7:04:99:a7:be:29:9e:6e:
b9:10:f4:58:a0:d7:04:74:9c:ae:24:96:80:02:89:
9a:50:0f:b1:8b:86:06:20:62:c4:ae:4a:96:43:3d:
34:f6:3a:40:54:db:c9:d9:61:09:31:70:75:3c:b2:
e3:a3:a0:14:11:77:1c:1a:b3:ef:ff:fa:08:e7:9b:
f2:4c:3b:65:d7:4e:b7:4e:e5:b6:e9:d7:55:db:69:
26:a0:c8:a0:29:55:a7:b5:07:b6:ce:31:45:2c:bb:
2b:26:a3:a5:22:3f:d4:3d:44:75:fc:80:95:bf:7d:
84:22:a5:37:2c:0d:d4:67:c2:cc:55:9a:cd:75:34:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F0:E5:1D:69:88:7D:AC:C2:1D:08:A6:65:C7:5C:67:E7:98:25:88
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:ae:02:6f:bb:3a:90:50:2f:b0:b0:b8:87:58:4b:1f:e8:
73:ae:56:1d:7d:47:73:da:a0:3f:49:8c:8e:7b:97:05:8d:3a:
c0:b4:a6:05:8b:29:78:07:d8:94:f9:94:8f:f4:f8:c7:d6:e8:
e0:b3:22:28:db:69:f4:01:13:ad:f7:53:01:fe:ad:34:b4:ca:
68:3e:ee:34:91:54:b3:5f:24:e1:ae:e2:01:04:eb:48:cf:e7:
85:a0:1f:b7:5e:dd:fa:50:74:9c:13:22:f4:ed:cf:84:11:7c:
4d:a6:6f:50:ed:3d:0a:32:b3:1a:31:c0:d2:42:9f:2b:48:a2:
9f:87:f2:96:ed:a1:ed:51:d2:b6:db:09:a9:bc:05:7f:0b:6e:
e4:74:33:da:6c:91:92:4e:12:3f:46:dd:c6:78:4b:99:4b:5a:
c6:4d:40:5d:29:aa:a1:ff:27:91:f9:30:79:8f:10:2f:eb:64:
0c:d6:c7:fa:b4:0e:44:23:d4:2c:89:b0:82:11:06:d4:c1:12:
be:dd:1e:69:2e:7a:e1:76:3c:89:57:b3:1d:58:28:18:f6:8e:
98:c3:24:82:cc:2d:61:ba:b6:cd:45:dc:5e:65:cc:39:73:a1:
24:39:f5:47:6e:39:c0:ca:59:c8:99:ae:54:5e:79:8a:77:78:
43:bb:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:42 2026 by rpki-client