Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
File: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft (raw, json)
Hash identifier: PqYa91K8A5lH7/lEU5XZ0yi0EM+B0eCOt9hh862fC3U=
Subject key identifier: D6:85:CB:02:C8:62:C5:B6:00:BC:7D:9A:F3:F6:CB:5C:FD:22:F1:09
Authority key identifier: 09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
Certificate issuer: /CN=09860c73ba752bf357ff7c00da535558a919caf4
Certificate serial: 01A0EAE57C29C9B2BB2C889EB39A61557406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
Manifest number: 0258
Signing time: Tue 29 Sep 2026 02:01:43 +0000
Manifest this update: Tue 29 Sep 2026 02:01:43 +0000
Manifest next update: Wed 30 Sep 2026 02:01:43 +0000
Files and hashes: 1: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl (hash: 1Pjs/VNkHdWyb9EMetiLcERVh26h5xSYQJlkkgCywTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:7c:29:c9:b2:bb:2c:88:9e:b3:9a:61:55:74:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09860c73ba752bf357ff7c00da535558a919caf4
Validity
Not Before: Sep 29 02:01:43 2026 GMT
Not After : Sep 30 02:01:43 2026 GMT
Subject: CN=d685cb02c862c5b600bc7d9af3f6cb5cfd22f109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:f6:1e:ab:5f:3a:26:71:ad:ba:52:56:66:
e4:89:99:6b:9f:7e:4d:20:93:c3:74:4b:77:75:af:
90:57:a9:06:70:38:89:e1:ba:c5:ed:f5:3e:b0:8b:
ff:a0:5d:e4:27:ec:65:8c:40:40:6e:f5:e9:e9:10:
57:0f:a0:d9:9c:5f:c7:21:ec:1a:b7:4b:96:32:f5:
07:f3:7a:e7:37:13:d6:49:3b:50:81:ca:8b:db:82:
f0:a4:ef:14:51:25:fe:d8:ca:fd:85:8b:43:75:0f:
66:fa:d4:51:8a:25:5e:25:7f:e6:c6:41:39:31:a8:
11:8d:a6:66:76:de:7b:4b:e5:86:f0:3f:b8:27:a9:
b8:91:84:16:e6:f7:e1:f1:b1:47:41:63:b5:04:28:
aa:07:5e:90:a8:dd:eb:54:5b:b0:16:2c:1e:e6:4d:
b1:e5:d1:23:f0:3e:0e:b8:65:a8:bb:3e:55:46:1f:
10:fe:28:4c:b6:4f:ff:77:78:ae:ea:b3:45:70:b3:
88:d0:25:22:15:19:52:5d:22:bc:0e:af:a7:39:61:
b3:29:c5:83:db:f6:0d:e4:1f:e5:c7:2b:90:17:da:
b5:57:43:b4:3d:2d:4e:c0:62:70:18:5c:47:52:8c:
78:d8:ae:03:5a:f7:0a:8b:ce:56:47:7b:09:9a:e7:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:85:CB:02:C8:62:C5:B6:00:BC:7D:9A:F3:F6:CB:5C:FD:22:F1:09
X509v3 Authority Key Identifier:
keyid:09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c4:00:0b:62:32:cf:40:5b:67:a7:57:ce:1b:0f:35:e4:61:
b3:be:c4:3b:50:02:ee:5d:6a:6b:ff:1c:21:8c:1d:3c:ca:6b:
e4:68:1c:05:4a:0c:07:e2:c2:81:0c:4f:0a:60:ec:69:8d:7b:
60:40:99:6e:87:4b:61:0e:c7:11:e3:92:a7:3d:98:0e:e1:70:
48:97:f8:5c:ea:87:b4:65:7b:f8:b4:9d:be:33:e0:79:ad:4a:
b9:4d:ac:08:17:2f:f5:c0:e3:74:6b:ff:ff:22:c4:58:84:2f:
45:63:55:a2:13:03:71:9f:26:0b:e3:9e:ca:fc:7a:3d:ec:68:
65:4e:3e:b2:4d:9b:76:c4:3e:69:75:d3:06:ad:b2:dc:8c:8b:
a7:8d:91:42:f6:68:71:5b:d1:af:70:1d:62:18:91:19:e8:aa:
8f:1e:b0:64:8b:52:95:83:90:05:92:50:e8:55:c1:de:f3:18:
9b:95:aa:af:29:06:9b:94:52:5a:e8:57:ae:72:6e:69:8e:46:
72:10:27:12:b8:e0:04:b8:12:dd:cb:66:c1:91:59:6f:eb:b5:
19:e7:64:19:e7:59:32:6e:cb:f8:08:ca:8f:6a:dc:bf:71:ad:
7b:a2:de:0b:db:8e:e1:8c:8a:6b:23:65:9d:15:df:f7:d0:a2:
46:b9:5d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:41:37 2026 by rpki-client