Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: 3+e9cVZnOmWvu3TRyyddbIo8xgQnAL4rT1eCebBUGbM=
Subject key identifier: DB:5D:62:1E:16:E6:D1:39:07:8E:24:01:BC:40:39:A7:95:63:A8:5D
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 01A0DF8694C57F4AD26FB5653423E5E8714E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 158F
Signing time: Sat 26 Sep 2026 21:02:14 +0000
Manifest this update: Sat 26 Sep 2026 21:02:14 +0000
Manifest next update: Sun 27 Sep 2026 21:02:14 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: 8Ssvajsk1SdeCP7smUbDA52CSj6AHF2cfJ4haIJMIjg=)
2: eXexMnsXhpiwYKh6Uvz65hPWHAs.roa (hash: Sv4osXCj3qnFKewpXCIs6tgLO2bpxFbqyIwOzHIdMNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:94:c5:7f:4a:d2:6f:b5:65:34:23:e5:e8:71:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Sep 26 21:02:14 2026 GMT
Not After : Sep 27 21:02:14 2026 GMT
Subject: CN=db5d621e16e6d139078e2401bc4039a79563a85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:d7:6b:f5:30:c1:a8:85:3a:08:79:08:f7:
85:2b:22:d2:41:51:e8:1a:37:94:cc:3e:78:2e:5e:
5d:62:92:34:05:b4:a4:71:e5:88:72:75:d1:86:c9:
dc:e9:f5:ec:97:48:c2:ca:36:f7:02:18:42:6e:fa:
c0:25:82:45:be:52:3e:bf:a1:ce:2d:23:86:14:20:
27:bc:3b:6b:d0:3c:3a:82:d9:07:f1:b0:af:44:89:
1d:d6:b5:e0:65:88:40:6e:25:1c:c3:18:da:6e:02:
b5:60:a3:31:79:bd:16:f1:a6:a3:22:36:ce:19:76:
3d:96:e4:a4:08:47:dc:c2:29:af:d9:af:88:4e:bb:
84:2c:a0:cb:22:b9:01:be:89:ab:80:39:29:ee:88:
9a:92:82:89:f2:7d:dd:62:63:f2:53:36:da:0c:5f:
32:18:28:33:4c:d0:ae:cd:d6:42:76:6c:69:55:c3:
4c:0c:28:93:95:62:d2:d5:93:bc:d3:d9:23:41:81:
2d:ec:3e:71:04:51:13:ad:c6:bb:33:95:b9:c1:12:
48:88:58:1e:db:4e:72:a1:67:1b:ab:4f:74:bf:c2:
40:cb:87:ac:8d:02:72:38:b1:fe:98:8e:58:39:af:
95:fe:a0:3f:af:ea:dd:ed:d3:70:1d:ff:a5:a5:18:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5D:62:1E:16:E6:D1:39:07:8E:24:01:BC:40:39:A7:95:63:A8:5D
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ca:a6:6e:6f:a1:f0:42:59:a5:e2:e8:0c:44:b3:75:f0:f7:
bb:16:1a:6e:20:5e:93:7d:cc:cd:c0:ac:e4:0c:0d:7e:98:54:
26:b2:f6:a5:cb:22:53:25:9e:c1:54:6b:62:bd:cf:db:f0:e5:
30:e9:78:07:9b:70:93:a3:42:e2:17:79:23:22:c2:4a:4e:34:
a4:52:ae:e1:cb:f5:8d:e1:ee:16:09:ed:44:c7:8b:74:65:0a:
8a:cd:22:d3:8f:87:fa:55:4d:fb:fd:0b:95:76:53:5a:a4:1c:
fb:73:32:b5:49:e9:bf:02:a1:50:78:04:13:47:ae:3c:dc:a3:
c0:fa:65:2b:92:23:bf:56:11:11:f9:61:6e:a3:df:7a:6a:2c:
02:31:e5:f7:dc:18:0f:c5:f4:dd:e9:c1:76:a1:6b:af:6c:76:
41:10:f1:56:1e:28:84:b5:2b:cb:b9:d5:41:cd:e0:04:8f:7c:
22:5f:47:00:cf:57:9f:d8:33:0c:60:31:d4:7a:c7:31:aa:94:
6f:ed:b6:ad:01:ed:fe:0a:25:c7:1f:f5:6f:25:80:67:dd:8c:
6f:d2:fc:be:50:ad:42:85:67:ca:0c:13:20:0b:fe:4a:5e:08:
45:15:ee:7e:57:03:9c:91:ff:ef:9c:0b:c9:42:11:10:9e:b8:
de:af:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:23:54 2026 by rpki-client