Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
File: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft (raw, json)
Hash identifier: lQsM1seSmKEYU3pLaymuR6mKyUR8qgo4g1zsg0MMRHQ=
Subject key identifier: 98:43:D7:57:BC:77:18:81:7C:A5:77:28:9F:25:B0:B6:CC:56:56:99
Authority key identifier: 09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
Certificate issuer: /CN=09860c73ba752bf357ff7c00da535558a919caf4
Certificate serial: 019F8F475878EE107294BBB1E7D2EAA65D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
Manifest number: 01A4
Signing time: Thu 23 Jul 2026 14:00:45 +0000
Manifest this update: Thu 23 Jul 2026 14:00:45 +0000
Manifest next update: Fri 24 Jul 2026 14:00:45 +0000
Files and hashes: 1: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl (hash: FsOZqpyfJkhIJ71Qu6GxwR4b+eXUtJYjTF28CbuNg7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:58:78:ee:10:72:94:bb:b1:e7:d2:ea:a6:5d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09860c73ba752bf357ff7c00da535558a919caf4
Validity
Not Before: Jul 23 14:00:45 2026 GMT
Not After : Jul 24 14:00:45 2026 GMT
Subject: CN=9843d757bc7718817ca577289f25b0b6cc565699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:c3:54:69:f1:fe:10:cd:dc:a4:aa:90:ef:
6b:ef:81:fc:78:e6:6d:9a:df:30:1c:79:02:6c:a1:
c1:8b:c5:0e:72:8e:1d:c6:c2:a1:35:ba:df:25:d0:
ea:5a:fe:f0:54:b4:b0:d9:e2:ac:82:a2:1a:4b:19:
06:3c:c6:50:f9:cc:cb:51:a8:28:fb:5c:2f:ae:7a:
a1:ab:10:fc:77:6a:23:b3:ca:f2:33:84:2a:70:5a:
3e:47:6f:35:88:d6:c8:f8:7b:49:ab:d2:c8:f5:9c:
47:b4:bd:64:29:a2:d8:62:e1:b1:ac:e5:1b:04:29:
50:71:22:e6:aa:9e:db:5b:d1:7a:47:6f:ad:e6:5a:
66:7c:e5:25:b6:1a:2a:ad:1d:df:35:cc:8f:23:f4:
29:4e:7a:e1:4b:7b:ed:34:dd:1a:8b:a5:6a:3e:25:
62:70:fe:06:90:8e:84:5c:b4:85:e9:83:bd:86:b8:
ab:18:ae:d2:62:de:87:df:8c:09:e0:8b:10:bc:72:
0c:8f:18:82:e4:66:92:e9:8a:51:98:52:9c:96:30:
39:a5:a9:36:e4:44:50:62:19:81:dc:46:72:ec:96:
a0:8b:74:22:97:fd:c3:b6:27:05:44:4f:79:54:d2:
73:98:20:1b:1b:d2:5c:99:cb:81:99:ea:98:ae:64:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:43:D7:57:BC:77:18:81:7C:A5:77:28:9F:25:B0:B6:CC:56:56:99
X509v3 Authority Key Identifier:
keyid:09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:64:a6:7b:e1:d5:f0:5e:7f:40:97:4f:f7:0a:40:99:47:
14:8b:1d:c9:8b:bf:fb:4e:f3:7e:a3:73:ee:d2:46:29:20:19:
ed:e1:4f:9b:66:a6:bb:75:5c:00:db:3f:54:10:f5:cd:ff:53:
f2:dc:62:85:3f:9f:fd:ed:16:4b:e5:9a:a6:fe:90:74:88:ab:
77:b2:09:fb:41:73:48:7e:fe:77:4e:01:7e:54:86:37:2d:02:
83:f2:d2:44:2b:c6:87:56:59:58:e4:cc:86:e9:46:ac:5a:c4:
8e:f6:c3:a6:ee:10:f7:a7:a2:c1:49:4b:ba:e7:6f:e8:aa:15:
ed:c1:76:da:fd:cd:fb:2d:23:de:a2:99:e7:e1:61:b2:f2:ca:
52:bf:87:52:dd:0f:e0:8b:e9:2b:81:c3:91:a4:2f:b9:0b:48:
b4:63:fc:31:2c:2e:b0:6d:02:db:e3:1a:81:89:55:fe:fe:47:
d7:89:50:4a:63:52:13:1d:5a:23:11:67:ff:7b:e9:6c:c0:fc:
37:4e:ce:4f:48:52:13:cc:81:d8:c5:db:8e:92:44:e0:4c:62:
e2:a6:74:fa:95:f2:c2:ab:d2:19:b6:bd:a1:54:83:cf:70:1e:
f7:7f:36:b5:36:07:aa:6b:d0:e8:88:22:3a:8a:cb:43:c7:c4:
05:5e:12:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR1h47hBylLux59Lqpl0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ODYwYzczYmE3NTJiZjM1N2ZmN2MwMGRhNTM1NTU4YTkx
OWNhZjQwHhcNMjYwNzIzMTQwMDQ1WhcNMjYwNzI0MTQwMDQ1WjAzMTEwLwYDVQQD
Eyg5ODQzZDc1N2JjNzcxODgxN2NhNTc3Mjg5ZjI1YjBiNmNjNTY1Njk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cPDVGnx/hDN3KSqkO9r74H8eOZt
mt8wHHkCbKHBi8UOco4dxsKhNbrfJdDqWv7wVLSw2eKsgqIaSxkGPMZQ+czLUago
+1wvrnqhqxD8d2ojs8ryM4QqcFo+R281iNbI+HtJq9LI9ZxHtL1kKaLYYuGxrOUb
BClQcSLmqp7bW9F6R2+t5lpmfOUlthoqrR3fNcyPI/QpTnrhS3vtNN0ai6VqPiVi
cP4GkI6EXLSF6YO9hrirGK7SYt6H34wJ4IsQvHIMjxiC5GaS6YpRmFKcljA5pak2
5ERQYhmB3EZy7Jagi3Qil/3DticFRE95VNJzmCAbG9JcmcuBmeqYrmQHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhD11e8dxiBfKV3KJ8lsLbMVlaZMB8GA1UdIwQY
MBaAFAmGDHO6dSvzV/98ANpTVVipGcr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lZTWM3cDFLX05YXzN3QTJsTlZXS2taeXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mMjZiNTctNDM0Ni00ZDJmLWEyZWQt
YmIxOTNiYmVkMjFhLzEvQ1lZTWM3cDFLX05YXzN3QTJsTlZXS2taeXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mMjZiNTctNDM0Ni00ZDJmLWEyZWQtYmIxOTNiYmVkMjFh
LzEvQ1lZTWM3cDFLX05YXzN3QTJsTlZXS2taeXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQhkpnvh
1fBef0CXT/cKQJlHFIsdyYu/+07zfqNz7tJGKSAZ7eFPm2amu3VcANs/VBD1zf9T
8txihT+f/e0WS+Wapv6QdIird7IJ+0FzSH7+d04BflSGNy0Cg/LSRCvGh1ZZWOTM
hulGrFrEjvbDpu4Q96eiwUlLuudv6KoV7cF22v3N+y0j3qKZ5+FhsvLKUr+HUt0P
4IvpK4HDkaQvuQtItGP8MSwusG0C2+MagYlV/v5H14lQSmNSEx1aIxFn/3vpbMD8
N07OT0hSE8yB2MXbjpJE4Exi4qZ0+pXywqvSGba9oVSDz3Ae9382tTYHqmvQ6Igi
OorLQ8fEBV4SEg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:52 2026 by rpki-client