Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: McqRIA9pa7Je+pEiWnxYHBshgJO0o0GiBXF281/mRCo=
Subject key identifier: 19:19:BA:38:D6:17:C0:34:3C:4A:5B:C6:86:D7:75:8D:FB:A5:86:3A
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 019E1E34FB234CD0AA4BA687CF847F5F0922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: 03F3
Signing time: Tue 12 May 2026 22:00:49 +0000
Manifest this update: Tue 12 May 2026 22:00:49 +0000
Manifest next update: Wed 13 May 2026 22:00:49 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: p4Nk9SAAArw+2wQlQ07Eh5F5FxutXKjdJ0r+Rnf9p/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:fb:23:4c:d0:aa:4b:a6:87:cf:84:7f:5f:09:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: May 12 22:00:49 2026 GMT
Not After : May 13 22:00:49 2026 GMT
Subject: CN=1919ba38d617c0343c4a5bc686d7758dfba5863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:12:45:5a:3f:44:8b:3d:b9:57:74:c7:0b:
09:1f:7a:b2:f2:c5:68:78:03:74:70:6f:fb:ee:6d:
09:53:2d:68:e2:40:b9:5f:ae:ed:ed:57:6f:68:eb:
fc:a3:27:b9:65:c8:ef:e6:95:ae:24:ad:e2:99:63:
84:8b:ed:13:49:1f:d5:5e:a5:dc:ae:dd:8c:6b:23:
df:0f:0d:70:8f:86:a4:8e:34:cf:06:21:e9:98:f5:
44:9a:75:7c:11:4d:d6:2c:b5:33:d1:82:a5:b9:66:
de:a7:36:b9:b6:05:d2:7b:74:7e:76:38:be:43:3c:
29:9f:c4:6e:ff:96:4e:ae:f1:1e:bb:b3:77:f5:d7:
28:dd:4b:d3:02:43:0e:75:2d:4a:1f:a5:97:44:26:
2c:2c:f5:d0:1e:6d:66:1c:a6:ec:ad:fa:88:c5:7d:
dd:fa:10:f8:af:0b:9b:58:92:77:b4:a8:2b:da:fc:
a5:d8:e6:08:24:e9:2b:86:6d:e2:7b:d1:60:19:ac:
b1:47:0f:dd:30:32:c8:2c:69:eb:b9:3a:38:af:0e:
36:1a:6a:2d:d6:21:9c:45:e8:6c:d6:7a:22:72:c0:
79:8e:58:a9:f5:7d:db:33:27:4b:b4:de:f0:e4:49:
92:fa:20:3d:78:8f:b7:f1:8d:23:e3:5f:97:c3:24:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:BA:38:D6:17:C0:34:3C:4A:5B:C6:86:D7:75:8D:FB:A5:86:3A
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:34:fe:c1:49:ac:b0:20:5a:79:f3:8b:82:5b:9b:93:62:99:
8b:e5:b1:3c:0f:0a:b7:94:37:d5:a5:67:2e:8c:cb:db:6d:fd:
06:09:bb:eb:05:19:35:66:14:01:d1:0d:5e:71:c8:06:48:8c:
47:12:51:90:1a:a2:73:fe:06:62:72:1d:5f:b1:c4:df:ee:57:
2a:6c:88:69:38:4e:ab:b4:53:82:28:32:72:70:11:70:26:74:
8a:62:ec:12:3a:72:f8:55:dd:6d:85:5e:73:bf:d2:d9:78:b4:
b2:7d:b2:70:e3:31:1a:58:0a:9e:b7:14:1c:ec:db:0f:30:03:
70:ca:90:86:02:27:c0:a9:c6:4a:b5:7e:c4:25:17:46:25:f2:
6b:05:6f:90:f4:c3:56:78:b7:bf:b1:49:f3:af:28:86:10:45:
a5:cd:5f:34:a5:c5:d9:01:7e:1e:3d:b3:7b:b8:81:bd:bf:a4:
08:65:11:76:d7:55:04:1e:74:dd:fd:ac:a3:4d:6c:8c:5a:87:
af:36:24:4e:db:b6:f8:32:82:cd:65:27:b7:35:86:c7:03:f2:
08:63:f1:d3:86:0b:55:0c:5b:bb:f7:2c:dc:e1:55:f7:72:f9:
72:b8:dd:1e:e5:ac:b9:09:24:fc:df:72:de:b1:5e:db:9b:cb:
00:70:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:50 2026 by rpki-client