Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
File: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft (raw, json)
Hash identifier: bW6PAOxq0Y82l7diaFkuoY4Hu/ggRZd5NCFNNHb7W84=
Subject key identifier: 5D:F7:B6:87:8C:CD:63:12:00:1C:FB:FA:A0:92:1B:1A:E1:8E:68:D0
Authority key identifier: 09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
Certificate issuer: /CN=09860c73ba752bf357ff7c00da535558a919caf4
Certificate serial: 019E1C7DC26761ECD1F05617BFEDDE195964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
Manifest number: E4
Signing time: Tue 12 May 2026 14:01:04 +0000
Manifest this update: Tue 12 May 2026 14:01:04 +0000
Manifest next update: Wed 13 May 2026 14:01:04 +0000
Files and hashes: 1: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl (hash: JRD2SQYVvxBX1FZsFBghGFPQzxdW3VbUb/V4Rroul9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:c2:67:61:ec:d1:f0:56:17:bf:ed:de:19:59:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09860c73ba752bf357ff7c00da535558a919caf4
Validity
Not Before: May 12 14:01:04 2026 GMT
Not After : May 13 14:01:04 2026 GMT
Subject: CN=5df7b6878ccd6312001cfbfaa0921b1ae18e68d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:4c:f6:61:35:9d:a5:30:54:aa:d9:a0:6d:
b3:bd:32:39:2e:94:ba:da:ab:88:f7:cb:ce:13:c7:
7e:b6:50:5e:17:f5:3d:be:47:a8:23:ac:08:6d:c7:
1e:b5:20:14:2f:d0:63:f5:a0:cc:59:54:22:2c:09:
d1:96:7f:fb:be:b3:bd:b9:c7:e8:b0:9f:42:3f:d9:
8f:77:27:35:68:dd:0a:4e:2d:83:b4:62:26:8f:5e:
e2:ff:c9:73:64:9b:15:0f:db:9f:7b:0a:9c:0a:5c:
6a:d9:86:91:72:9e:67:4d:66:15:d1:9d:15:4f:83:
d0:18:ff:a0:0f:8f:06:c6:81:22:e7:ac:f1:32:b2:
24:d8:58:a1:21:f7:a1:2a:25:ad:f6:07:40:27:c3:
55:ee:d0:28:3b:33:ec:00:5b:e8:83:df:f4:40:8d:
f5:8d:7e:14:7d:78:e2:59:40:ab:75:aa:f6:98:7e:
a8:07:3d:ab:4f:96:00:2e:14:17:54:b5:84:a9:42:
c1:15:90:e8:7c:7d:f7:73:6c:91:a5:fc:b8:ed:77:
3f:2d:bc:29:ae:02:e3:b4:44:27:6e:db:90:e3:8f:
cd:83:4a:74:29:7a:4d:2f:21:3d:10:55:73:84:9d:
93:96:0f:f9:d9:3c:b4:a9:f2:e1:4a:8a:db:f4:4f:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:B6:87:8C:CD:63:12:00:1C:FB:FA:A0:92:1B:1A:E1:8E:68:D0
X509v3 Authority Key Identifier:
keyid:09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:68:50:72:4c:ba:32:b1:76:a5:85:a6:a8:e6:c4:4e:23:0e:
17:60:a0:6d:64:68:26:d6:8f:e5:30:e7:d8:5e:73:c3:90:34:
1b:ab:45:05:af:cd:8f:ce:cf:a9:9b:ba:91:63:45:c7:37:a2:
00:58:33:99:dd:ca:8a:c7:b6:f4:dc:7d:19:46:4e:89:27:1b:
1f:b8:20:17:17:09:37:9d:6b:d7:0c:16:ed:d0:fb:ba:d7:e9:
cb:c2:7f:3d:81:7f:df:39:f7:95:c7:a8:cd:b3:4a:9e:03:12:
49:21:46:0b:4d:cc:1b:1a:10:0d:04:e3:bd:28:8e:5a:2e:03:
88:c6:26:91:95:a4:b0:4f:8e:cc:82:64:4b:b4:0e:76:39:26:
f9:cf:09:4f:d9:a8:f0:cf:8c:13:a5:ad:89:53:23:92:e4:1f:
6f:c8:6c:ec:6a:36:08:35:f9:39:01:e1:b3:de:e3:1b:60:d8:
e0:96:a6:3e:c8:20:2f:8b:7e:11:a0:4d:22:b9:ab:e5:62:d0:
5c:ee:71:9e:94:a0:75:e3:b8:42:4f:15:ef:2b:0c:47:10:df:
2c:6b:da:da:34:30:f0:16:70:7f:73:fa:42:ae:2d:06:36:01:
e5:f1:c8:48:d4:a1:5c:61:6d:bc:cb:73:1b:a7:2e:b0:1c:b3:
9e:7a:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:59 2026 by rpki-client