Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: 7By2g7EDAOpw/zhJz4Pxkjje7Y0isqarjnekgSyArD4=
Subject key identifier: C9:21:6A:2E:30:80:C0:4F:98:D7:F8:F0:B9:1B:C5:3C:F9:4E:93:E9
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 01A0DF180F13333CCDC01C3C2CC325142612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 19:01:30 +0000
Manifest this update: Sat 26 Sep 2026 19:01:30 +0000
Manifest next update: Sun 27 Sep 2026 19:01:30 +0000
Files and hashes: 1: VET9JzpN742Kxi_PTAzuOfpLzjw.roa (hash: tmq0ncjsAGMD4Bt4MuYWz/LdnVYgu2OPec/Dp5evxVU=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: Lu+ekT8vimKtaWINqOdMEVPAiT3YSUkxF8vTdDqG6p4=)
3: sOAqQxWMDpHDPx74UHl3gJfcmkY.asa (hash: nLCiNLHUaF9d6fXPw1n+VZdVFlVNoVf9kE2TkaD4JpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:0f:13:33:3c:cd:c0:1c:3c:2c:c3:25:14:26:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Sep 26 19:01:30 2026 GMT
Not After : Sep 27 19:01:30 2026 GMT
Subject: CN=c9216a2e3080c04f98d7f8f0b91bc53cf94e93e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:2b:33:89:e4:be:30:a4:fa:93:a8:a5:ef:
94:6e:a6:6b:f9:a3:6a:e9:96:b3:34:03:1d:3d:d9:
b4:d0:5a:5a:09:da:0c:9e:24:d1:73:31:4b:8d:89:
98:54:59:fb:4e:b2:c9:36:2c:75:da:9a:9f:8c:78:
5f:43:81:ea:61:f1:42:52:99:b2:01:94:d2:4f:db:
9a:fe:21:bd:29:c3:25:fc:cc:dd:77:c2:aa:04:36:
da:b1:9d:e6:e3:7b:43:09:4a:41:07:c2:6c:ec:25:
b5:94:13:4d:48:c7:0e:7f:fc:50:cb:76:b1:43:b3:
63:bc:ea:ae:19:16:f8:51:4d:ec:36:06:85:44:f0:
54:0b:37:66:3f:00:db:21:4e:98:43:27:32:0a:4e:
d1:87:06:16:25:71:cb:31:20:fa:70:58:a6:c3:76:
1a:d2:de:8c:c6:bb:5d:7f:3d:8b:91:56:e0:9e:33:
9e:b7:51:4c:0a:6e:7d:79:c8:e2:48:ab:c8:ad:2b:
64:72:fc:53:f3:d6:65:b9:82:27:cf:6c:86:0a:11:
d2:cb:c6:9b:e6:19:74:38:3f:af:46:65:38:c2:12:
8c:89:61:69:c3:ee:37:e3:d0:5f:2c:29:1f:e4:7c:
bc:9a:eb:e3:a8:36:bb:6b:69:c7:5f:10:05:d6:73:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:6A:2E:30:80:C0:4F:98:D7:F8:F0:B9:1B:C5:3C:F9:4E:93:E9
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:b2:e3:9f:99:17:14:3b:3e:d0:30:2c:42:bb:d7:6b:10:
cb:13:6d:a7:09:68:c1:5f:51:38:01:d4:64:24:93:eb:1f:b3:
b5:f0:06:d1:d6:dc:25:f6:f7:50:8f:97:b6:5f:95:e7:ee:9c:
2e:3f:65:8d:3e:b8:37:cf:de:ae:4d:d0:e7:fd:bd:1a:54:a6:
00:bd:95:bc:91:44:44:20:2f:0e:9d:ef:f8:8e:c0:7f:6b:3a:
b8:ac:f2:04:32:bb:2e:61:7f:db:87:5e:80:ef:36:0a:b0:56:
d1:e6:ee:56:1b:6e:fb:f2:79:01:76:63:7d:1c:8e:33:33:7b:
49:56:e4:7a:ab:52:d1:84:5a:be:62:17:2d:bc:84:08:6f:83:
4e:57:1b:2a:45:96:7c:78:e3:f5:7e:d8:c5:cb:47:65:4a:f1:
fe:68:53:d5:27:23:5a:e5:dd:4f:73:94:a1:4a:fb:d0:8e:2d:
df:ed:88:15:2d:5a:a3:9e:5a:87:5a:7c:3a:b4:56:28:2d:8b:
99:f7:72:6f:e0:c2:fc:4d:3d:fa:43:d2:8f:6c:b1:71:c7:d8:
fd:dc:b4:38:11:b0:a4:ff:83:b5:e0:b0:1e:36:00:84:16:12:
d9:a0:3b:b4:9a:1c:1e:b3:14:33:8c:b2:40:c4:51:cd:88:01:
79:87:df:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:34:29 2026 by rpki-client