Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: O7Y5USx0KEguIhyRZYtUlsnPUsQNJ+EphktBEtO72+k=
Subject key identifier: 7B:2D:41:DD:FA:40:B2:BE:02:30:0B:D6:B5:57:78:66:21:7F:0F:D0
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 019D26286E1D3ED483665612243679AD39E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 018E
Signing time: Wed 25 Mar 2026 18:01:16 +0000
Manifest this update: Wed 25 Mar 2026 18:01:16 +0000
Manifest next update: Thu 26 Mar 2026 18:01:16 +0000
Files and hashes: 1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: QjrJewa00mIoJJmg886cdCLfaAShJq3QPMRM+ClAg8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6e:1d:3e:d4:83:66:56:12:24:36:79:ad:39:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: Mar 25 18:01:16 2026 GMT
Not After : Mar 26 18:01:16 2026 GMT
Subject: CN=7b2d41ddfa40b2be02300bd6b5577866217f0fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:ed:ab:c0:cf:33:ed:cc:49:db:84:6d:b6:
52:85:e5:6c:29:3e:5a:f3:4c:d3:df:a1:ee:35:82:
2a:8f:b1:af:3a:53:6d:a2:69:d0:ca:15:47:99:96:
7f:5e:8f:ba:0a:df:b3:11:d7:5a:60:04:01:f2:a4:
13:19:4b:97:9a:67:1f:25:c7:6e:d6:ae:a5:92:cc:
92:1f:3b:24:20:4c:b2:0c:cb:9f:91:49:53:68:1f:
3a:e0:43:26:dc:76:fc:82:8f:49:22:6a:6e:1a:53:
9e:26:95:f5:20:9a:c2:43:fd:f8:e5:ae:74:45:44:
96:81:51:9a:3a:b3:50:fd:53:ca:b8:12:43:38:81:
0f:17:bc:12:4f:c7:77:cd:ad:b2:75:99:08:23:8c:
fe:01:7c:6e:8d:93:a0:02:52:84:92:03:d5:c0:5f:
04:71:fc:3a:cb:a4:5e:0a:9b:6d:b6:47:61:5b:9a:
09:3b:7b:63:c8:40:cf:bf:a6:03:9c:96:5a:89:c3:
02:80:cc:75:9e:de:6b:1c:77:ad:50:f1:8d:2a:15:
aa:17:e9:16:a0:7f:cd:3f:f0:7d:82:9d:8c:1d:92:
d0:90:a8:5c:6f:85:42:8b:b9:0e:53:56:a8:c6:bd:
64:97:87:18:51:8a:e7:40:a1:0c:83:53:7a:1f:0e:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2D:41:DD:FA:40:B2:BE:02:30:0B:D6:B5:57:78:66:21:7F:0F:D0
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:14:e0:7c:a5:cc:c2:7f:73:c4:4f:bd:f4:72:81:f9:6c:73:
6d:a4:26:bf:e4:d5:69:fd:44:20:01:12:9d:a4:49:78:fa:a2:
ad:63:02:5c:21:3f:d0:35:71:fb:db:43:27:63:89:9f:e4:54:
38:0a:ef:0c:f7:de:ff:c0:99:65:37:75:41:26:4c:e1:6f:fb:
87:a5:06:57:73:4e:ec:e9:58:2b:2a:71:78:37:67:c0:85:87:
0a:3f:67:7b:ca:3a:1a:e0:13:70:38:82:62:8e:79:0d:8c:9e:
72:46:b4:e9:85:31:06:46:96:3c:b7:e7:ac:30:97:04:a9:49:
55:3f:ee:b5:a3:68:e7:de:a1:e3:da:6d:5c:61:b8:87:7f:04:
c1:a8:40:46:9d:a9:be:81:c6:60:cc:18:74:78:ed:4a:10:d3:
4c:a4:4b:93:be:bc:a5:f1:d7:31:15:cc:a5:4b:22:1c:b5:35:
5f:7e:eb:2c:b3:a1:98:8f:cc:2e:30:d5:c0:a1:1d:f2:c2:e7:
cf:61:c3:1f:ce:40:37:8c:06:d4:34:20:92:4c:99:0f:f6:ef:
c4:b3:b7:c4:4a:41:ca:24:74:cf:3d:32:47:3c:e0:c1:ba:53:
7f:bf:c2:b1:c5:b1:21:43:54:d8:b2:f4:d7:38:99:0e:9f:7b:
4d:57:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:42 2026 by rpki-client