Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
File: CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft (raw, json)
Hash identifier: Rxo+0Q+SWSUV6AbF4bZPJ0tyaGGbGgHQqTASI6lFHko=
Subject key identifier: CE:24:BA:07:D3:11:BC:B8:40:FB:21:0B:9E:13:3F:F9:F1:37:68:70
Authority key identifier: 09:88:BE:66:C4:34:3E:B8:69:B5:C3:7C:09:EF:D1:64:EE:61:86:C5
Certificate issuer: /CN=0988be66c4343eb869b5c37c09efd164ee6186c5
Certificate serial: 01A0D3EFC082E66DEEBA956A13528BF9883E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:40 +0000
Manifest this update: Thu 24 Sep 2026 15:01:40 +0000
Manifest next update: Fri 25 Sep 2026 15:01:40 +0000
Files and hashes: 1: CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl (hash: vE5iVBOa675GYWGvcK3ecP8m7HUTSsp/1Jec4vb4AxM=)
2: YU7FK8aSQi73yWezYzaHHpAG_WQ.roa (hash: YMu2fRx6OsADjZfJPJh6N1jUJPHhB6brXyLQQ6O0Xco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:c0:82:e6:6d:ee:ba:95:6a:13:52:8b:f9:88:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0988be66c4343eb869b5c37c09efd164ee6186c5
Validity
Not Before: Sep 24 15:01:40 2026 GMT
Not After : Sep 25 15:01:40 2026 GMT
Subject: CN=ce24ba07d311bcb840fb210b9e133ff9f1376870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:78:0a:3b:62:ce:b8:d1:eb:a2:73:d8:5c:b8:
d2:cd:48:87:94:47:b3:e8:35:e6:24:02:64:42:35:
aa:c0:0c:2e:64:ac:24:91:ab:4d:02:d9:aa:57:db:
ce:c5:50:46:71:bf:ff:56:81:8d:fa:89:ef:01:0a:
65:14:a6:66:74:0f:b6:bb:da:52:00:3f:4c:fe:07:
ae:6b:13:07:39:ba:6b:23:d3:eb:57:b4:00:a2:0f:
93:71:ed:eb:a8:56:e0:fb:62:63:9f:10:ef:c5:2f:
57:f4:28:af:21:63:c4:6b:3d:89:e9:0a:85:80:2d:
4a:30:66:67:c1:ee:57:07:04:ac:b2:93:15:7c:5f:
99:86:f0:fa:4e:94:4e:f9:58:ff:46:3a:96:75:51:
43:1a:88:9e:a6:8c:e5:79:fc:b9:53:81:69:a2:f4:
5d:74:db:d3:3c:ce:f1:b9:8f:1f:7e:fd:3f:a8:48:
62:e6:5e:7d:52:de:a8:ae:b1:87:83:68:e2:a2:4c:
ad:0d:3a:2a:bd:b7:40:e5:b8:44:ef:6c:f0:7b:0c:
40:13:54:d4:f7:6a:59:fa:c6:30:96:47:09:bd:7b:
c8:12:18:63:2d:50:2e:77:fe:4e:e8:2f:fb:05:b8:
9f:62:14:06:63:37:ac:57:b0:f5:50:87:a0:31:71:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:24:BA:07:D3:11:BC:B8:40:FB:21:0B:9E:13:3F:F9:F1:37:68:70
X509v3 Authority Key Identifier:
keyid:09:88:BE:66:C4:34:3E:B8:69:B5:C3:7C:09:EF:D1:64:EE:61:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:be:05:59:84:ee:f2:88:41:18:84:10:38:24:55:10:c3:f2:
ba:c9:b1:e6:cc:6b:f5:33:fc:f5:22:b8:20:70:9f:c5:a7:36:
67:85:d9:57:51:d5:d9:41:3f:a7:18:9f:72:05:11:d6:72:91:
36:39:4f:61:b4:6c:bb:84:fb:c9:a6:f8:43:f0:1d:87:f4:ab:
ad:43:66:25:be:c6:f6:d5:11:12:13:01:45:27:36:d6:e2:63:
9e:aa:49:a4:95:89:de:e4:eb:c6:49:ac:dd:79:98:c6:15:75:
15:1e:51:42:b0:59:93:c9:ca:29:58:4c:7d:1c:9b:fa:15:1b:
2e:26:cb:6a:b4:e5:70:5b:02:a2:66:27:8b:25:3a:90:dc:89:
7f:4e:35:63:a9:87:4b:a6:e8:94:99:b6:8c:c6:97:fd:95:d4:
03:3d:4d:5e:f5:c2:f8:9c:e3:bf:2c:3b:93:a8:3f:9f:a5:17:
a7:3e:2c:13:ea:17:54:91:04:30:e9:4d:34:7d:f6:03:2d:b9:
e5:b8:5f:9f:75:e4:0c:76:3f:5f:58:6c:b8:43:ec:db:e1:b6:
bf:4d:0b:b2:09:57:4f:97:49:30:f7:47:df:dc:ee:d3:23:24:
6d:46:37:05:a1:78:8b:df:7b:78:f5:fc:dc:3e:c0:ba:a1:ae:
34:7c:68:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT78CC5m3uupVqE1KL+Yg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ODhiZTY2YzQzNDNlYjg2OWI1YzM3YzA5ZWZkMTY0ZWU2
MTg2YzUwHhcNMjYwOTI0MTUwMTQwWhcNMjYwOTI1MTUwMTQwWjAzMTEwLwYDVQQD
EyhjZTI0YmEwN2QzMTFiY2I4NDBmYjIxMGI5ZTEzM2ZmOWYxMzc2ODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83gKO2LOuNHronPYXLjSzUiHlEez
6DXmJAJkQjWqwAwuZKwkkatNAtmqV9vOxVBGcb//VoGN+onvAQplFKZmdA+2u9pS
AD9M/geuaxMHObprI9PrV7QAog+Tce3rqFbg+2JjnxDvxS9X9CivIWPEaz2J6QqF
gC1KMGZnwe5XBwSsspMVfF+ZhvD6TpRO+Vj/RjqWdVFDGoiepozlefy5U4FpovRd
dNvTPM7xuY8ffv0/qEhi5l59Ut6orrGHg2jiokytDToqvbdA5bhE72zwewxAE1TU
92pZ+sYwlkcJvXvIEhhjLVAud/5O6C/7BbifYhQGYzesV7D1UIegMXGZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4kugfTEby4QPshC54TP/nxN2hwMB8GA1UdIwQY
MBaAFAmIvmbEND64abXDfAnv0WTuYYbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lpLVpzUTBQcmhwdGNOOENlX1JaTzVoaHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEt
NjAyOTM2NTM5NDA1LzEvQ1lpLVpzUTBQcmhwdGNOOENlX1JaTzVoaHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iYzUxZjQtNjFmMi00ZmFhLWEwMmEtNjAyOTM2NTM5NDA1
LzEvQ1lpLVpzUTBQcmhwdGNOOENlX1JaTzVoaHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFr4FWYTu
8ohBGIQQOCRVEMPyusmx5sxr9TP89SK4IHCfxac2Z4XZV1HV2UE/pxifcgUR1nKR
NjlPYbRsu4T7yab4Q/Adh/SrrUNmJb7G9tUREhMBRSc21uJjnqpJpJWJ3uTrxkms
3XmYxhV1FR5RQrBZk8nKKVhMfRyb+hUbLibLarTlcFsComYniyU6kNyJf041Y6mH
S6bolJm2jMaX/ZXUAz1NXvXC+Jzjvyw7k6g/n6UXpz4sE+oXVJEEMOlNNH32Ay25
5bhfn3XkDHY/X1hsuEPs2+G2v00LsglXT5dJMPdH39zu0yMkbUY3BaF4i997ePX8
3D7AuqGuNHxoaw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:08:18 2026 by rpki-client