Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: AqA75Vn9EdTe3mTCKOOktnDkU6Jb62oA20bnhirIIzs=
Subject key identifier: BF:30:05:47:BE:51:66:C6:D4:74:07:0F:0F:9A:AC:C0:84:DB:ED:20
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 019F8F1088D02D3FB90B4148978B065CB376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 13:00:53 +0000
Manifest this update: Thu 23 Jul 2026 13:00:53 +0000
Manifest next update: Fri 24 Jul 2026 13:00:53 +0000
Files and hashes: 1: VET9JzpN742Kxi_PTAzuOfpLzjw.roa (hash: tmq0ncjsAGMD4Bt4MuYWz/LdnVYgu2OPec/Dp5evxVU=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: fJyPUexYfkqXKeXHKo7sasQErGYCyqmxAsLDeGnCFek=)
3: sOAqQxWMDpHDPx74UHl3gJfcmkY.asa (hash: nLCiNLHUaF9d6fXPw1n+VZdVFlVNoVf9kE2TkaD4JpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:88:d0:2d:3f:b9:0b:41:48:97:8b:06:5c:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Jul 23 13:00:53 2026 GMT
Not After : Jul 24 13:00:53 2026 GMT
Subject: CN=bf300547be5166c6d474070f0f9aacc084dbed20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:a8:01:c9:fb:f9:71:e1:d0:2c:c2:9c:ea:
df:70:00:c5:e8:13:e8:f9:d1:37:f7:94:c5:f9:b5:
21:d2:98:f0:19:39:30:69:65:92:46:5a:13:01:c0:
e3:a8:9d:3e:7c:63:9a:75:de:e7:cc:d6:b3:6e:b0:
8f:0b:aa:e3:74:69:92:7f:86:d9:e2:33:36:49:81:
ff:5d:b3:a9:2f:ed:b2:cc:ec:89:86:a6:14:93:6e:
3d:0e:2d:8a:cd:5e:6d:20:ff:d1:79:90:a5:0b:2a:
b5:65:1b:13:4a:e7:79:da:b6:a0:f0:31:75:81:f8:
8c:3b:45:5e:cd:9c:73:ca:3e:f6:75:20:2d:22:a7:
88:fc:11:24:9c:38:dd:a5:86:f8:e0:ab:7d:f8:17:
a2:02:dd:61:f5:6b:12:77:2f:fe:cc:31:61:86:bb:
55:85:96:51:61:7e:f2:c4:94:04:10:26:ff:94:da:
03:01:9a:a8:8e:f8:67:84:29:5c:9c:90:08:b6:d7:
bc:d4:fb:f2:94:b4:2c:b7:42:94:be:89:ba:5f:9d:
57:0a:16:6e:67:43:c6:c4:0e:19:08:20:e1:f5:30:
c4:9c:6c:9a:ac:0d:4c:29:9f:a4:b3:d1:fd:10:d0:
84:e1:7b:d4:cf:23:bc:a6:b0:bb:0b:58:49:de:fe:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:05:47:BE:51:66:C6:D4:74:07:0F:0F:9A:AC:C0:84:DB:ED:20
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:f9:79:04:14:ec:6c:28:21:68:ea:f8:ee:70:da:30:90:
98:4f:d6:47:f4:4e:c1:2d:18:ec:35:cd:b0:35:ee:c2:0d:ef:
90:bb:5f:e1:e4:61:c6:a5:1a:0f:b9:cb:a0:90:d3:87:23:e7:
42:f7:cb:67:63:b8:09:e3:5b:0c:cf:cf:c4:2d:ce:7d:95:2a:
40:f9:34:2e:24:92:a2:4c:94:a5:7f:0d:d2:1b:5c:8b:73:aa:
b8:79:f7:ea:9d:01:a8:53:72:88:e3:c7:cb:0a:d1:45:2a:1e:
97:d4:91:73:21:21:fa:c6:a8:17:c6:9c:1b:77:e9:da:4c:62:
a2:c9:36:53:c1:46:23:18:92:c2:4e:c1:09:30:87:91:e1:b7:
20:e5:65:a3:d6:15:32:ea:41:b0:0e:c5:94:e0:49:26:79:bf:
7a:da:61:f0:7d:a9:52:62:54:d3:88:cb:1a:60:d6:f9:03:58:
7a:0c:05:3a:df:93:e0:a5:eb:68:87:82:b1:90:f9:40:1e:c6:
81:2c:cf:50:7c:e7:aa:66:35:42:02:d4:1f:fc:d3:12:62:6e:
42:d9:85:5b:41:4e:83:af:f1:0d:27:0c:0b:dc:2a:da:96:59:
84:4a:7d:1e:5b:64:c3:09:73:9b:eb:37:15:09:08:f7:82:2f:
e2:32:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:37 2026 by rpki-client