Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: wXkK5yQIqbyuDo/uMLcJ5BV1I3k5PcFQrz5uNrrOVE4=
Subject key identifier: 53:A0:E2:ED:E2:97:E0:00:1D:5E:29:E6:64:82:E9:53:2D:1A:08:B0
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 019F90FF39A62F249C49508CD034FA11F48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: 04B3
Signing time: Thu 23 Jul 2026 22:01:13 +0000
Manifest this update: Thu 23 Jul 2026 22:01:13 +0000
Manifest next update: Fri 24 Jul 2026 22:01:13 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: +f2U1yImSfFDugTWmv3WT6YHdPW3iZXjTtJvEWz0J8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:39:a6:2f:24:9c:49:50:8c:d0:34:fa:11:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: Jul 23 22:01:13 2026 GMT
Not After : Jul 24 22:01:13 2026 GMT
Subject: CN=53a0e2ede297e0001d5e29e66482e9532d1a08b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:2c:3d:5b:f8:ec:16:0f:92:a5:bf:8a:07:
f9:44:ac:24:5b:b3:6f:89:aa:45:54:71:54:25:2c:
d5:a9:0d:51:ae:db:a6:4f:eb:b1:8d:dc:ef:dc:f1:
92:1d:30:56:48:65:7c:ae:23:ba:1f:e1:e0:b6:c4:
a2:f3:50:0f:55:5f:69:30:17:b4:d8:d5:7e:9b:1b:
4a:59:30:09:1f:a3:28:da:8c:c9:ee:92:b9:24:4b:
04:98:c4:03:8c:ec:78:4b:f5:36:fa:b2:c7:c1:e1:
06:7f:b6:89:f5:8d:41:71:b6:9c:d8:2a:3a:32:dc:
11:db:d6:75:5e:61:28:9e:da:67:2d:be:e3:5e:48:
0b:cb:ae:3c:85:ac:42:2d:ff:57:4f:59:f5:db:77:
7c:d0:89:32:af:21:0d:8f:8f:7d:21:48:5f:75:0f:
2f:da:43:4b:ab:b5:b4:0e:27:a3:1e:c6:63:d0:89:
57:5f:4b:14:5a:87:03:5d:29:7d:63:02:e0:e5:d1:
8d:50:49:7b:55:33:31:4c:71:a1:ca:3d:58:0f:56:
ec:95:1a:98:0a:76:d2:94:d4:db:65:33:dc:b2:d2:
5e:c3:a7:13:08:b7:8b:81:08:03:24:a8:7b:2d:ea:
5e:90:e6:e4:0b:14:86:1a:b5:76:28:c8:3a:90:18:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:E2:ED:E2:97:E0:00:1D:5E:29:E6:64:82:E9:53:2D:1A:08:B0
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6a:1e:48:43:3b:87:6b:0b:8c:d0:df:33:9f:51:cd:d4:d2:
b7:fb:5c:2d:b7:fa:db:d7:49:78:05:c7:40:c6:1b:e4:de:6b:
e9:89:b2:dd:d7:34:3d:c7:46:bc:d3:bd:b2:b8:74:c3:e0:ca:
33:c9:a6:a9:3e:26:af:be:bd:42:4a:0f:2d:1d:5f:36:73:e5:
b7:81:86:78:38:d7:10:e9:34:0b:55:5b:29:ad:a7:ef:22:49:
75:91:23:39:3d:ae:f3:05:b6:77:0c:82:f1:76:ce:63:df:84:
4d:ab:96:8d:fa:14:94:64:ce:76:6a:00:1b:0b:73:2a:44:5d:
51:11:9a:27:36:02:15:b9:90:ad:37:b5:f0:4e:0a:2b:e2:2c:
0d:ee:4d:9c:6c:39:77:c1:f6:bb:0d:f5:24:51:69:54:1f:e3:
f7:49:50:1f:96:fe:b1:9f:15:44:12:fe:d0:d7:15:2e:62:86:
31:72:e2:66:56:74:79:8c:24:22:ba:a3:c7:26:de:60:9f:a1:
d6:23:66:02:9b:81:8f:fa:a3:32:18:17:b0:0c:7d:6a:87:41:
cc:6f:73:54:fe:90:08:9b:6f:04:3d:1f:7d:62:6f:25:40:bd:
04:70:f9:13:64:04:eb:6a:4e:06:26:13:65:b5:6a:cb:3f:b9:
87:5b:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:25 2026 by rpki-client