Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: gXnJCFMPil/QccRJ9z1by4DaZBLBX0KRk7lklljaJ6A=
Subject key identifier: 94:23:B8:9A:E7:1C:D8:7C:CC:6D:70:A3:84:CE:34:50:C4:BD:34:D8
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 01A0D760A4D8825B61D65506CBB25C9EBF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: 055C
Signing time: Fri 25 Sep 2026 07:03:50 +0000
Manifest this update: Fri 25 Sep 2026 07:03:50 +0000
Manifest next update: Sat 26 Sep 2026 07:03:50 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: +YGqSUlzS/1n67RtSVpN3DwAfXLq6pWSXbulnhJpz1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:a4:d8:82:5b:61:d6:55:06:cb:b2:5c:9e:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: Sep 25 07:03:50 2026 GMT
Not After : Sep 26 07:03:50 2026 GMT
Subject: CN=9423b89ae71cd87ccc6d70a384ce3450c4bd34d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a4:11:dc:24:1d:df:06:24:1e:85:74:22:23:
c1:29:6c:e3:16:c8:18:2f:8a:a1:15:46:91:54:ae:
c2:72:c9:84:88:dd:52:6f:e9:88:7b:f6:d5:0a:85:
59:89:79:c0:46:54:f8:c1:33:40:f3:74:9c:b8:51:
bc:1d:75:f8:a9:f4:dd:40:92:71:ae:3e:64:a0:f2:
46:8e:75:8f:8d:5f:6d:0d:29:a3:56:b5:ad:b0:41:
84:18:37:62:4f:85:8e:12:21:7c:e1:5b:e8:1d:3e:
b3:e8:c9:a0:87:c9:48:45:69:2d:dc:f0:6b:d0:61:
1b:5f:af:88:8b:4a:5a:22:74:5a:8c:b8:e5:ad:11:
f9:8d:da:4a:6a:1f:21:da:f1:13:b2:51:6d:c8:1a:
b1:9a:43:da:97:08:32:c0:37:ce:67:88:06:36:a2:
5e:90:ec:e3:4c:9a:bc:84:9d:7e:a1:9d:ec:ee:98:
c6:3c:16:95:24:01:4a:75:21:ba:aa:8d:52:ce:f0:
33:b4:5f:d1:ef:2b:b1:dd:40:95:d2:a4:b5:25:ce:
b5:27:8d:ed:c4:ca:82:e2:8d:9c:5e:1a:84:ef:5a:
9a:77:7a:7f:c9:c9:89:cf:e6:92:fa:1f:86:f4:f7:
48:a1:c5:e4:f1:9b:30:db:61:7a:67:34:2b:e8:7c:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:B8:9A:E7:1C:D8:7C:CC:6D:70:A3:84:CE:34:50:C4:BD:34:D8
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fe:63:b2:2c:e2:38:6a:96:12:83:01:f3:6c:1b:8d:d1:b0:
11:d0:f7:9f:3e:2d:d4:df:67:d5:9f:0b:6e:6a:1b:7f:53:de:
ec:e5:62:7b:d6:be:af:ba:ac:4c:ed:c8:07:1a:1f:39:23:a8:
93:22:fc:90:11:01:f8:fa:25:4b:e2:eb:fa:00:09:5b:c0:3e:
fe:84:bb:aa:70:78:2d:cd:61:27:b0:c1:fa:93:5a:1e:e3:e7:
ba:35:f1:4d:dd:9c:57:c4:9a:55:cd:8e:a3:88:17:9f:cf:0b:
ad:54:1f:d5:d0:d4:35:4a:c5:53:65:d3:8e:02:e6:8f:2f:30:
e0:08:5f:82:79:96:b8:ca:90:6d:a2:b7:28:7c:fe:a5:e0:0c:
60:7c:39:43:be:69:a6:1c:0f:3d:72:3c:b7:31:64:f4:9f:4b:
a8:63:ff:e4:eb:b3:a2:c4:e5:df:ae:c3:2a:a9:cb:7f:07:71:
f4:13:18:82:bf:33:54:24:20:50:2b:e6:27:dd:6e:c6:07:e3:
0e:28:04:8f:da:95:ff:80:59:a9:b3:5c:81:44:cb:87:a7:4a:
bb:6d:30:46:00:87:db:fc:87:9f:39:e6:0b:6e:82:f5:cf:e2:
dd:a9:04:c3:c3:2c:82:b7:d5:ab:a9:e0:5f:a0:b9:bd:cd:16:
78:72:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:21:28 2026 by rpki-client