Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: V8zEP1Eoc0gsih5el18cW3qR0boCg9egmp/jHi6ivIQ=
Subject key identifier: 4D:89:D0:CB:4C:20:39:96:BB:2B:5E:B3:36:00:69:C3:64:E1:08:10
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 019D2583CF583A490B8810571AE147A7D223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 13A1
Signing time: Wed 25 Mar 2026 15:01:28 +0000
Manifest this update: Wed 25 Mar 2026 15:01:28 +0000
Manifest next update: Thu 26 Mar 2026 15:01:28 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: mYaiKA1nfPEcR0i2R9obuQbdb+Cutna8HEyDYHSG2rc=)
2: eXexMnsXhpiwYKh6Uvz65hPWHAs.roa (hash: Sv4osXCj3qnFKewpXCIs6tgLO2bpxFbqyIwOzHIdMNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:cf:58:3a:49:0b:88:10:57:1a:e1:47:a7:d2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Mar 25 15:01:28 2026 GMT
Not After : Mar 26 15:01:28 2026 GMT
Subject: CN=4d89d0cb4c203996bb2b5eb3360069c364e10810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:9a:bc:0a:77:f9:35:7d:32:3c:88:cb:1d:
de:74:b1:ab:7c:34:b5:df:9d:b7:48:ab:f4:fe:60:
7e:c8:1e:29:7b:c6:b5:6c:67:ac:46:db:fe:d3:20:
7f:e3:89:c0:d4:ae:10:42:93:36:71:78:22:10:47:
2d:d9:30:0c:c2:61:a1:0f:10:fd:6f:ad:df:37:0e:
55:d8:29:83:a3:e5:9e:8d:52:ea:35:12:37:fc:99:
d4:d7:8a:cc:b1:20:04:5f:c5:12:88:e7:c3:a0:15:
c3:1d:16:06:d9:c2:7e:f3:58:66:0e:52:88:4d:23:
57:25:ff:49:c6:cf:94:e9:db:7d:3f:d5:65:17:43:
5e:95:58:92:d1:3b:e1:d2:e6:9d:22:74:d1:e9:a8:
9f:27:36:c7:6f:13:9b:95:c0:f0:77:20:cb:8b:e5:
de:1a:28:f8:32:8f:97:12:d2:c3:28:40:30:2b:9c:
da:9d:5a:4a:65:65:99:f5:26:46:17:db:43:25:46:
48:7b:a1:aa:ac:07:e2:91:52:a2:0b:a1:25:f6:cd:
ad:67:d7:dd:72:b7:a7:5e:a2:95:ad:0b:28:93:8a:
d5:0d:1e:c3:30:f1:b6:d8:5e:f3:bd:59:83:45:f4:
76:ee:94:b7:80:58:13:af:e8:52:ef:ca:a3:ed:d4:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:D0:CB:4C:20:39:96:BB:2B:5E:B3:36:00:69:C3:64:E1:08:10
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ab:1b:fd:86:33:a6:5f:6a:9a:b1:d7:83:42:a8:80:02:79:
d8:ff:77:13:29:19:49:03:93:a7:3d:5c:0e:b0:1f:d2:33:d9:
af:42:2b:90:68:cd:c4:38:e1:fb:48:26:c6:2e:1d:c2:b8:c4:
01:36:e6:14:c6:59:ad:dc:ec:b2:62:33:6e:bc:8b:96:4a:6d:
d9:b3:51:a3:78:31:60:2a:fb:06:b8:b2:38:63:4c:8b:80:7e:
d3:bf:d7:ae:43:88:eb:3b:e9:bf:0e:84:dd:86:1b:77:32:ea:
a8:63:58:a1:b7:c5:f1:62:60:68:fb:c9:bc:c0:13:93:95:2a:
57:6e:1e:1b:db:d2:5f:c6:fe:d9:d4:37:99:a8:3a:2f:96:d7:
93:db:a2:f5:f0:19:3f:47:ea:31:0c:4e:2e:fc:23:f1:6a:ac:
26:04:ac:08:a2:61:88:e0:4e:e3:b7:29:3d:60:d6:97:7b:2f:
25:3f:87:b2:71:02:6b:ed:53:b9:c6:48:ca:6d:c4:d2:2c:13:
0a:1a:80:96:31:11:80:2c:2b:eb:0b:1d:e4:01:78:4d:1a:c2:
4a:82:46:76:15:14:bc:c8:e4:c1:05:fe:94:6c:29:64:37:82:
a6:c4:4b:ab:ca:ac:9b:b8:5e:26:48:3d:9c:2d:97:16:16:ff:
19:5c:93:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg89YOkkLiBBXGuFHp9IjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjNhYzIwYmMxZTQ1ODVjNGZkNGNjOGU3YmM5NzYzMzFi
ODVjNmUwHhcNMjYwMzI1MTUwMTI4WhcNMjYwMzI2MTUwMTI4WjAzMTEwLwYDVQQD
Eyg0ZDg5ZDBjYjRjMjAzOTk2YmIyYjVlYjMzNjAwNjljMzY0ZTEwODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcuavAp3+TV9MjyIyx3edLGrfDS1
3523SKv0/mB+yB4pe8a1bGesRtv+0yB/44nA1K4QQpM2cXgiEEct2TAMwmGhDxD9
b63fNw5V2CmDo+WejVLqNRI3/JnU14rMsSAEX8USiOfDoBXDHRYG2cJ+81hmDlKI
TSNXJf9Jxs+U6dt9P9VlF0NelViS0Tvh0uadInTR6aifJzbHbxOblcDwdyDLi+Xe
Gij4Mo+XEtLDKEAwK5zanVpKZWWZ9SZGF9tDJUZIe6GqrAfikVKiC6El9s2tZ9fd
crenXqKVrQsok4rVDR7DMPG22F7zvVmDRfR27pS3gFgTr+hS78qj7dR7rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2J0MtMIDmWuyteszYAacNk4QgQMB8GA1UdIwQY
MBaAFAsjrCC8HkWFxP1MyOe8l2MxuFxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYt
MDYxODhjZjdhM2MyLzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYtMDYxODhjZjdhM2My
LzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqsb/YYz
pl9qmrHXg0KogAJ52P93EykZSQOTpz1cDrAf0jPZr0IrkGjNxDjh+0gmxi4dwrjE
ATbmFMZZrdzssmIzbryLlkpt2bNRo3gxYCr7BriyOGNMi4B+07/XrkOI6zvpvw6E
3YYbdzLqqGNYobfF8WJgaPvJvMATk5UqV24eG9vSX8b+2dQ3mag6L5bXk9ui9fAZ
P0fqMQxOLvwj8WqsJgSsCKJhiOBO47cpPWDWl3svJT+HsnECa+1TucZIym3E0iwT
ChqAljERgCwr6wsd5AF4TRrCSoJGdhUUvMjkwQX+lGwpZDeCpsRLq8qsm7heJkg9
nC2XFhb/GVyTnA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:13 2026 by rpki-client