Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: H9+aPmuDPE3wMdQh4C6Nr2a2zUlKIofRd9poDy904UY=
Subject key identifier: 11:25:F0:F4:C6:2B:35:FC:71:70:D7:07:B4:82:99:26:97:6C:94:E2
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 019F90FF1E4EDAD496C258AE17076C55217E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 22:01:06 +0000
Manifest this update: Thu 23 Jul 2026 22:01:06 +0000
Manifest next update: Fri 24 Jul 2026 22:01:06 +0000
Files and hashes: 1: 9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa (hash: cZRk0f4ULOIcvr4Kq3jJj23UFievd5ZXiHt0/5E2LwY=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: D3R/5HIjpa0Q1CV66T9gwuILYwpguhej+md6rPryaFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:1e:4e:da:d4:96:c2:58:ae:17:07:6c:55:21:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Jul 23 22:01:06 2026 GMT
Not After : Jul 24 22:01:06 2026 GMT
Subject: CN=1125f0f4c62b35fc7170d707b4829926976c94e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:71:8e:24:1c:7c:16:64:a2:3d:04:9d:7d:
2c:e1:b7:61:11:8c:48:76:3b:99:80:7c:59:5c:13:
a1:9a:60:be:17:7f:f3:3b:12:2c:59:b2:d7:2d:70:
f6:4b:51:08:ac:2b:e2:d9:f7:a1:9d:36:47:83:49:
ac:d2:73:48:6d:f4:6b:a3:d7:ae:1f:9f:1d:af:39:
f2:2a:cf:c1:8c:4f:95:be:b2:e4:a6:b7:64:08:dd:
84:b2:5e:35:58:06:48:a4:f6:3f:7e:34:6a:b3:79:
97:c4:4f:11:71:01:4f:d5:53:1c:dc:d7:1b:42:01:
a3:75:ca:ff:98:c0:f0:3a:bd:02:e0:c3:d4:e7:fe:
9e:5b:ae:74:1b:69:e0:f9:3a:77:ef:ff:97:8e:f9:
c0:99:f0:c0:cf:d6:3c:e7:8e:88:ed:f8:ab:6b:78:
20:63:0b:00:a4:f5:95:39:64:a7:43:4d:d4:f0:14:
49:6f:c9:b5:20:38:59:0d:97:8d:18:fc:4e:b3:83:
25:2b:ec:78:33:82:85:6b:9c:ff:bd:f9:33:c4:40:
c9:84:b0:31:d0:5d:dd:95:de:71:37:7e:fc:40:e1:
96:9a:0f:33:fc:b1:1d:9a:e1:ad:e5:a3:22:da:c8:
65:2a:20:64:59:be:94:23:36:0e:09:b6:3a:dd:1b:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:F0:F4:C6:2B:35:FC:71:70:D7:07:B4:82:99:26:97:6C:94:E2
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:df:85:24:2a:12:de:82:38:54:9e:37:64:16:5c:35:8b:e3:
92:31:ea:98:96:e0:5e:c3:2e:ee:7d:d0:43:70:91:08:81:ae:
08:10:ca:51:98:4c:b3:12:9c:be:81:e2:a0:c5:a6:5e:1a:f2:
40:0d:b7:f8:f2:05:b3:02:33:22:31:cb:91:7e:30:26:9f:cd:
56:76:bb:76:ed:31:11:51:37:f0:0f:9e:84:33:17:9e:a7:bb:
ef:26:15:15:69:b1:2a:90:4a:a5:ad:e6:d4:a8:18:29:20:a0:
db:99:be:28:27:9a:90:02:63:fc:71:89:4e:d0:1c:8f:ef:e9:
4a:29:3e:6a:da:d7:d5:da:bb:f4:ae:f3:dc:dd:3f:86:f0:a8:
2b:0c:5c:f9:0f:06:51:52:cc:89:f9:10:d3:98:3b:40:43:44:
d7:4e:2b:bb:52:6b:e0:53:9f:3b:20:3e:0c:ce:dd:53:3e:c1:
6d:e3:b2:8a:98:0c:e2:de:77:c3:61:3b:5b:7a:d2:cb:04:ff:
cb:2b:90:ae:a6:c9:0c:99:0c:c1:20:8f:eb:17:a0:64:cd:9c:
f0:55:f5:68:ff:da:ea:10:00:f9:8b:fe:4f:70:55:88:f3:1a:
1f:71:c9:58:fc:90:11:7f:81:15:15:04:06:c4:0b:7a:c8:51:
fb:db:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:52 2026 by rpki-client