Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
File: CYZDIBoqokoLh3o638p6iSBH2_w.mft (raw, json)
Hash identifier: BnGF4pfop0P2Kyotg+COX9jmHUFdjF6dEcZLpPs9rR4=
Subject key identifier: 83:6F:EB:C7:1E:27:A6:46:23:7C:38:28:54:34:59:8F:EB:E8:AC:28
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 019F916CC98656F08CA3C96EF84670B9925F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
Manifest number: 15E0
Signing time: Fri 24 Jul 2026 00:00:53 +0000
Manifest this update: Fri 24 Jul 2026 00:00:53 +0000
Manifest next update: Sat 25 Jul 2026 00:00:53 +0000
Files and hashes: 1: CYZDIBoqokoLh3o638p6iSBH2_w.crl (hash: PWDCSTI4hAbBWaDQSrwsde0maxShy0w5s+b+0OpNGRo=)
2: WIUAFonkV2sfv2obw7wp_H-MGvU.roa (hash: GtKF8czJWl3ExfCMW9FZWgpdCqhRe9QAiKNJnvpNNSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:c9:86:56:f0:8c:a3:c9:6e:f8:46:70:b9:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Jul 24 00:00:53 2026 GMT
Not After : Jul 25 00:00:53 2026 GMT
Subject: CN=836febc71e27a646237c38285434598febe8ac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:4f:a9:b9:90:66:9e:e9:17:5d:a3:c4:19:
ca:2a:a9:61:fd:20:38:32:55:f5:47:1b:00:8f:c5:
34:cc:e7:06:b1:84:db:d1:9f:ad:36:c2:ef:de:69:
82:a4:3f:89:07:08:60:c9:5e:25:1f:aa:95:7a:f6:
1e:12:e9:f6:7b:d0:97:90:c6:ac:0f:8c:2c:d3:1b:
fa:7f:29:6e:97:e2:31:57:db:37:af:52:3f:51:9c:
7b:35:3c:30:19:22:a3:1f:52:f4:91:60:86:5c:6e:
e0:7f:e8:28:e8:ca:4c:42:9d:eb:0c:66:7b:1a:e5:
45:90:ed:6e:26:68:cb:90:92:60:93:1b:d3:61:4c:
98:92:23:8d:95:86:46:3b:36:57:f9:96:8e:ba:c8:
f3:dc:29:dc:a3:db:1b:27:60:bb:a3:71:4c:c4:4e:
0a:0f:d0:0e:21:85:12:25:5b:15:d1:0a:45:b4:10:
b9:60:e1:8a:c0:08:b7:66:92:b1:96:6a:f2:1b:fa:
f4:46:49:ce:f7:e6:a9:87:d2:fe:49:ee:e2:06:81:
b8:34:a6:94:81:78:3a:fb:ea:16:95:34:24:f7:39:
cc:09:45:22:0c:a9:f2:c8:2e:36:d6:86:72:1e:45:
b8:5d:30:ea:fe:ab:37:2c:de:ff:0c:21:10:44:88:
ad:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6F:EB:C7:1E:27:A6:46:23:7C:38:28:54:34:59:8F:EB:E8:AC:28
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ae:f1:54:e3:fe:fb:1f:96:b3:a4:19:e5:58:79:fd:27:f3:
bc:e7:59:91:c0:00:04:ce:e2:00:38:6c:e5:47:64:12:65:f0:
28:78:8e:cc:32:5c:c0:a1:5d:bf:95:c6:ea:83:0a:b6:f3:c0:
74:c4:55:a6:71:81:21:43:f6:63:ea:27:02:5c:4a:ff:b3:a2:
a2:79:a6:ed:99:9c:ee:41:bd:f8:28:f3:9d:70:e8:3b:41:e5:
dc:b3:26:1e:c7:96:8b:1d:b8:23:ca:3f:79:55:8e:67:e9:d0:
9f:08:3e:a3:da:03:61:7d:49:c2:fc:0a:59:e5:b4:2f:58:51:
98:e3:fa:a5:46:38:f1:ae:5e:b7:0a:86:d3:40:de:9a:bb:10:
73:f7:11:79:41:f1:67:00:79:e7:be:9f:85:b9:65:fb:d7:76:
f9:fe:22:04:13:c8:fe:95:e8:2c:e3:3d:87:62:03:50:bf:85:
54:22:05:c1:08:31:01:c7:5a:1b:00:fc:43:d1:c6:38:92:5b:
f1:e5:f9:d5:22:46:55:98:4e:6f:9a:81:ce:82:9f:b4:23:48:
04:75:36:ee:f7:be:c0:27:91:2f:d0:d3:85:63:25:09:7d:01:
4f:01:1e:f9:e6:3a:04:9a:93:d7:ba:62:c2:1e:a0:d6:3d:fd:
1c:ea:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:36 2026 by rpki-client