Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: ulF6HKFBqD2xJXsrA3RWfGbIFUDF89M5huxtt7v69sU=
Subject key identifier: F9:AA:96:CD:BB:3F:E0:CE:A9:FF:39:68:4A:A2:3A:A0:CA:A3:46:85
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 019D28F2663D2BC10DAF6E9C68ED5CB400B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: 0374
Signing time: Thu 26 Mar 2026 07:01:07 +0000
Manifest this update: Thu 26 Mar 2026 07:01:07 +0000
Manifest next update: Fri 27 Mar 2026 07:01:07 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: Lyw1xp0iKDUV4tKjDoD2a6aPhywfzd0dgEpL0zO3n9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:66:3d:2b:c1:0d:af:6e:9c:68:ed:5c:b4:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: Mar 26 07:01:07 2026 GMT
Not After : Mar 27 07:01:07 2026 GMT
Subject: CN=f9aa96cdbb3fe0cea9ff39684aa23aa0caa34685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:b4:c1:73:b3:e2:58:bf:5c:96:85:7a:09:
8c:68:b9:28:12:d4:80:e1:c9:06:bf:81:31:dd:82:
c5:0b:c5:de:3a:cf:53:54:02:6c:dd:50:5f:65:8c:
b8:18:76:04:01:9e:d4:f9:f2:dc:3d:47:5c:58:92:
80:76:b0:93:19:9c:26:e5:69:a3:7c:f6:cb:59:71:
86:63:c9:43:3e:56:25:80:c1:25:23:2f:49:3f:c6:
37:86:a3:8d:21:16:ce:99:68:e5:f1:ec:90:1a:83:
9b:da:01:36:18:33:2a:8b:43:ea:da:67:82:5e:6f:
53:73:3e:49:65:2b:e0:ac:da:75:bb:96:f2:60:c0:
e0:2d:99:7a:29:75:0a:39:a7:a7:73:81:7d:5b:e2:
e7:1d:f0:d1:bd:3b:56:a9:37:93:27:72:e8:70:73:
d4:a4:d8:2d:4a:c0:da:f9:26:98:e4:17:cf:3d:9c:
56:f9:ac:33:4e:b1:8e:e0:d8:6f:df:7b:e0:25:77:
30:e4:85:f9:8b:25:a7:5a:0e:e7:0f:e9:7f:37:63:
52:5d:a8:1a:d1:f6:c8:aa:72:7d:d9:4a:6a:75:a8:
c2:d2:f1:76:37:05:a0:d6:44:ca:e4:44:38:21:7d:
85:7b:28:0e:96:3f:27:e0:f7:76:a0:57:6e:06:cd:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AA:96:CD:BB:3F:E0:CE:A9:FF:39:68:4A:A2:3A:A0:CA:A3:46:85
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:93:3c:2c:16:d9:4a:ab:2f:2e:c3:5b:80:d2:fa:3b:c2:c3:
82:85:59:7e:12:6d:b0:c2:a0:e3:68:3e:36:0c:53:ef:7a:3e:
15:a6:bf:1e:c8:19:2c:59:8d:fd:18:92:9e:fe:c0:67:19:cc:
03:ee:fb:20:91:96:60:3f:28:06:f4:c8:10:7a:2a:f3:e2:f7:
a4:60:5f:9c:b6:10:5e:63:1c:d7:79:df:b0:e1:a2:80:63:35:
1b:d9:43:dd:bc:96:67:91:c7:74:2b:c1:b5:e3:c1:87:75:32:
8e:69:b8:6e:79:27:95:fa:89:6a:4a:4e:ab:79:db:43:59:5c:
1d:db:99:e3:d4:2f:4e:bf:df:e7:10:83:11:bb:5c:73:16:2c:
3b:d9:a5:44:da:c5:95:3b:dc:4b:60:98:af:47:40:43:89:d0:
83:90:50:da:1d:63:e1:37:51:57:a5:f1:37:e0:f9:45:0b:48:
9a:a2:b0:d7:47:96:b7:f7:ec:ce:6c:bf:2a:20:1c:9b:6a:6c:
f5:f0:9e:ba:f1:4c:c8:d6:c3:bc:c9:58:7c:68:c6:c8:28:4c:
d3:90:9d:3f:35:49:76:6c:b7:94:ab:84:ce:cc:07:f3:91:19:
ac:e9:cc:be:83:12:98:f3:03:a4:66:45:db:2f:0a:0b:c3:69:
38:04:e8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:59 2026 by rpki-client