
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: wJQXeBLH+SpxgerUlK6dbpAGPoz1wf883g4fcMie4PE=
Subject key identifier: 36:1E:61:A5:83:E2:8A:73:9D:5C:93:B4:DF:E4:8A:60:45:B5:DA:FF
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 019E2136218C6BE308DBA8596CB96DE06765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 0210
Signing time: Wed 13 May 2026 12:00:56 +0000
Manifest this update: Wed 13 May 2026 12:00:56 +0000
Manifest next update: Thu 14 May 2026 12:00:56 +0000
Files and hashes: 1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: WgImTjTbCroPykUbf2FrrlEVCBdkbC2hbZyI4aFJt3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:21:8c:6b:e3:08:db:a8:59:6c:b9:6d:e0:67:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: May 13 12:00:56 2026 GMT
Not After : May 14 12:00:56 2026 GMT
Subject: CN=361e61a583e28a739d5c93b4dfe48a6045b5daff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:2e:7f:2a:33:d9:04:46:85:7d:3a:85:06:
d5:1a:40:3e:c7:00:7f:e2:cc:7e:76:c5:c7:59:f8:
ea:b9:68:31:f7:ba:21:60:bb:3b:af:9b:a9:f8:0c:
d9:0f:0b:eb:87:79:20:55:cf:13:05:e2:a0:74:80:
5c:82:bc:cf:1e:3c:f8:0a:73:e3:8f:81:f3:88:57:
f4:5a:0d:60:03:1d:b8:52:b3:8c:7c:03:bc:0f:f5:
4c:6b:3d:cb:5f:8c:b3:89:99:b1:41:bd:fb:ab:f9:
43:bd:27:9f:e1:83:e1:8c:a2:d2:d6:bd:2e:e9:d6:
53:b8:fb:b6:84:70:c6:d6:ae:35:d7:73:fa:7c:08:
f8:12:84:29:eb:ea:7e:76:35:8b:4d:0d:1f:fd:7b:
a1:e6:17:f9:16:4e:6a:97:8d:b0:55:12:8f:21:3b:
bf:d0:29:c3:b6:3d:a8:f1:23:39:49:1b:2e:5a:ed:
e8:21:d4:47:b1:5f:02:c4:02:32:13:fc:e6:8a:7d:
91:a9:9d:27:80:35:80:7b:54:67:11:a7:57:51:26:
31:b2:72:7c:25:d3:02:c2:18:cb:50:a2:c9:76:66:
62:9a:79:27:36:f9:c6:9e:35:a5:5d:45:a9:88:08:
7b:09:83:5a:63:39:03:5e:7c:95:47:cd:1d:bd:f3:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:61:A5:83:E2:8A:73:9D:5C:93:B4:DF:E4:8A:60:45:B5:DA:FF
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a2:77:4e:30:73:98:ed:ad:2f:43:a2:50:83:b8:c4:94:13:
b7:db:cf:73:31:a1:e4:88:b5:fa:ab:5a:03:62:a0:57:de:d4:
ec:bf:ba:d5:f9:46:94:c4:dc:12:38:da:37:d7:30:86:a8:a9:
60:9f:4f:92:6b:67:17:9f:b4:57:92:a3:0f:c5:d3:49:52:8d:
ae:cb:ad:f2:2a:5b:ad:2d:df:df:9a:f7:15:d2:85:87:fc:d5:
4d:9f:69:ae:e4:8e:81:b8:f3:7d:a8:fd:b3:67:24:08:14:44:
26:2a:9c:43:0e:60:13:02:6d:e8:92:9e:d9:5d:4f:b8:94:dc:
fb:3e:d6:bd:18:c4:70:94:d7:6f:45:0c:35:fb:d3:37:d3:ee:
f9:86:d8:71:d7:c2:d2:d9:24:31:62:f5:ab:ef:4a:24:1a:36:
f6:a4:36:b8:f4:34:8a:92:bd:5f:cf:b5:c9:fe:b0:e9:47:18:
7c:d3:c0:5f:82:ff:f0:31:0d:78:f3:bb:f7:4b:a9:2c:d6:46:
4f:60:36:a3:08:29:cd:eb:0a:32:c9:3a:10:0a:8b:73:a7:ef:
de:a6:cd:a2:c8:34:6e:39:6d:e2:2a:f9:73:e1:a2:6d:8b:7a:
df:74:24:53:d9:bb:2c:99:3a:09:c2:c1:e2:46:7f:38:b2:0c:
24:d4:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:55:46 2026 by rpki-client