Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
File: CYZDIBoqokoLh3o638p6iSBH2_w.mft (raw, json)
Hash identifier: zlRwQApJkYG9mHyY57gJspuloeR9SRTV8kVEzOx7lCs=
Subject key identifier: 53:F3:B5:77:38:E0:51:B1:D6:76:F4:C0:CD:3E:A5:BF:BA:C4:12:63
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 01A0EB1CBBA37374A2D67A386766263D085B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
Manifest number: 1693
Signing time: Tue 29 Sep 2026 03:02:03 +0000
Manifest this update: Tue 29 Sep 2026 03:02:03 +0000
Manifest next update: Wed 30 Sep 2026 03:02:03 +0000
Files and hashes: 1: CYZDIBoqokoLh3o638p6iSBH2_w.crl (hash: +dfBcom3wyuKglW2GmoiR/qq+q4FRanAjzj5xFnCnHg=)
2: WIUAFonkV2sfv2obw7wp_H-MGvU.roa (hash: GtKF8czJWl3ExfCMW9FZWgpdCqhRe9QAiKNJnvpNNSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:bb:a3:73:74:a2:d6:7a:38:67:66:26:3d:08:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Sep 29 03:02:03 2026 GMT
Not After : Sep 30 03:02:03 2026 GMT
Subject: CN=53f3b57738e051b1d676f4c0cd3ea5bfbac41263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:d4:1e:27:76:89:53:03:a4:63:1d:4a:0b:
c1:69:3b:9c:51:64:c9:b1:7a:98:2c:23:08:38:a0:
24:11:29:ad:be:26:be:45:8f:e5:10:d3:29:64:e0:
53:25:b6:90:9b:94:ce:e1:3b:af:a8:91:f0:58:7a:
05:79:14:fc:c4:2b:50:41:c6:f7:06:09:1f:9d:f8:
ab:af:52:65:9d:23:36:46:fd:d9:b1:f1:e6:da:1c:
dc:44:d6:a3:24:65:b6:04:2e:09:0a:5e:1a:03:b5:
78:a1:9b:3a:1f:10:33:56:dc:1d:07:d1:1b:0a:44:
fe:8d:1f:56:73:35:75:74:12:dc:95:28:9e:4f:bf:
d8:3f:66:7a:14:1c:d3:d2:ee:48:cc:f7:e3:22:b1:
c6:16:96:82:6d:c6:ef:02:e4:d4:ed:91:57:56:20:
16:21:b8:a3:97:1f:00:a0:50:17:8c:79:f4:1e:38:
a7:a3:05:ab:f0:97:c7:70:f1:9f:98:54:61:66:6a:
6e:15:8e:92:12:ff:6b:74:0b:c4:46:d1:47:db:e0:
96:8b:51:48:e4:17:83:38:f9:90:1f:4e:b7:6a:7e:
ff:c7:53:fd:ca:d2:92:50:a7:ac:60:7d:4d:c2:97:
6c:4e:35:0f:a5:2e:4a:9f:60:7e:25:c0:98:de:45:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F3:B5:77:38:E0:51:B1:D6:76:F4:C0:CD:3E:A5:BF:BA:C4:12:63
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9b:d7:d2:9b:d8:d0:a8:2b:74:d1:3b:3a:d7:cd:3d:ce:5c:
63:3a:9b:0a:c0:35:6b:57:98:b9:7e:6c:f5:56:f7:e3:bc:24:
a6:9e:77:9b:2c:f1:18:97:47:e5:a0:92:d7:9f:34:9a:f6:a3:
14:7d:4c:c5:8e:ec:f1:59:df:d1:95:f3:a2:bb:25:b0:02:3c:
4d:ae:ea:1d:f9:c3:7b:be:0e:28:31:ce:4d:d8:92:09:08:16:
ae:5d:43:03:ef:f6:0a:2e:f7:ae:ff:47:22:87:4e:3a:da:9e:
f9:d6:2c:d3:ee:6e:a0:cd:d7:b1:11:15:48:02:50:a3:b8:8a:
7a:da:36:4c:d5:cb:f7:88:bd:55:fe:a9:70:30:25:26:54:9f:
9c:87:54:6f:83:d3:31:dc:ac:d8:34:da:d2:19:ee:5a:6c:81:
c9:56:d4:0e:52:7e:9c:d6:46:9b:43:90:00:93:6f:03:87:96:
4f:37:dd:0c:7b:d3:3d:c2:87:e6:b0:6c:ee:7d:13:1c:36:2a:
9e:7f:e8:8f:42:21:a9:c6:ce:d1:2e:42:1c:23:8b:6b:b5:84:
ce:dc:14:64:40:c5:c7:5b:c4:d1:93:1a:95:49:97:ad:de:23:
eb:85:b3:f8:04:36:25:ba:b3:62:aa:ca:87:94:42:21:92:15:
f9:7f:ac:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:17:01 2026 by rpki-client