Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: fG+3Twi7b1+wvfBS7uLznSLIGoeWIa+pSk5wwS1wYVU=
Subject key identifier: F7:73:92:AA:0A:97:AD:A9:F2:C9:B5:C7:38:15:1E:87:89:84:1B:D5
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 019D28BB1CF0CFF355A4724CB361F55146EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: KU8Zmjj9dj3nx4CVPWNX3SZV90tWxcAURjXATmbyP+E=)
2: rbQLRQQ57T1QHNETgtQKDJDxvVs.roa (hash: LJ4g0UoBULTP2DaQsUUzIZ3AibWkiJwfnok2tkxhGgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1c:f0:cf:f3:55:a4:72:4c:b3:61:f5:51:46:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=f77392aa0a97ada9f2c9b5c738151e8789841bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:54:74:88:c3:95:2e:68:fb:a5:5c:a4:81:
f2:83:14:86:b4:f1:41:58:14:28:be:95:e6:98:5f:
33:f5:4f:be:2d:a9:f3:7f:eb:a2:bc:64:27:68:06:
04:3a:79:af:3c:bd:71:d4:ad:f0:21:93:35:58:d9:
94:3f:bc:79:6e:5d:d6:58:0c:e6:1d:18:06:70:79:
20:f0:62:ff:2f:6b:c7:8b:bc:41:22:d9:4e:40:06:
73:d4:d0:f2:48:aa:d5:20:f4:25:f2:56:1b:82:98:
2b:66:69:9d:00:63:3c:77:e9:14:d7:9d:29:52:4a:
4a:88:fb:f2:23:04:d5:91:8f:ac:e8:90:79:af:99:
b9:b8:5b:c0:eb:02:c4:9f:48:24:4c:4d:db:81:60:
58:a2:53:12:ac:3f:38:c7:4c:e4:dc:8b:24:4c:60:
a3:b7:ae:ee:4a:cf:6a:cc:c7:3f:fa:7f:3b:7e:3d:
9a:ab:65:59:9d:54:c0:4b:58:73:48:39:63:37:c8:
a5:d1:24:f4:17:5c:00:16:3b:a7:b6:38:2a:98:bb:
4a:b1:7f:94:39:5e:05:2b:dd:e4:5e:96:7b:bc:f3:
85:84:e8:43:09:d3:43:a3:16:45:04:8b:6e:81:1a:
a4:c8:ea:47:95:e0:fd:ff:4a:16:ce:18:b2:b7:c2:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:73:92:AA:0A:97:AD:A9:F2:C9:B5:C7:38:15:1E:87:89:84:1B:D5
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:44:7f:27:6b:a5:fe:b3:df:8d:93:9c:7a:7e:bf:d2:62:05:
5d:fd:81:8e:4b:c6:b1:2f:94:b3:bf:ab:92:55:89:75:cc:d8:
98:55:c5:0a:0a:82:18:69:42:f3:14:7b:10:ea:bf:9c:73:03:
f7:bb:7b:c3:8e:2f:92:e8:85:77:57:74:73:8b:55:b8:52:5a:
50:a2:be:0b:d4:45:aa:79:5b:03:fc:36:7c:ae:03:9d:49:f8:
aa:2d:af:4a:99:22:63:89:ae:62:96:a0:a6:cf:28:aa:cc:07:
3d:33:8c:0d:f6:90:c5:66:a2:3a:78:02:a0:5e:1e:46:43:83:
37:38:37:6b:11:4f:91:03:52:f7:2a:9a:34:a4:aa:92:44:f3:
a8:16:37:ac:fe:11:2a:d0:18:8e:cb:d1:80:e8:d5:11:f1:84:
6d:8f:3e:2f:06:bf:a9:c0:0c:ba:a1:2d:7d:d9:aa:d1:78:58:
5d:d7:f1:04:fc:55:52:ea:9c:79:fe:4e:e9:e2:b9:e9:01:85:
42:7a:c6:a5:cf:a5:de:28:bf:1c:fe:2d:eb:d6:5d:3d:5f:85:
06:18:f5:24:09:af:b4:ad:d0:ad:ba:b2:c0:3f:ac:7d:69:ad:
ac:db:86:e1:83:0e:2a:6f:2b:b2:89:d0:e8:f0:d7:9a:6d:f9:
fa:6c:82:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouxzwz/NVpHJMs2H1UUbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODZlNjRiNTgyM2M0YzYxMjg3ODU4ZDk3NzBjNzBkZjcw
NmIwY2MwHhcNMjYwMzI2MDYwMDQ0WhcNMjYwMzI3MDYwMDQ0WjAzMTEwLwYDVQQD
EyhmNzczOTJhYTBhOTdhZGE5ZjJjOWI1YzczODE1MWU4Nzg5ODQxYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSJUdIjDlS5o+6VcpIHygxSGtPFB
WBQovpXmmF8z9U++Lanzf+uivGQnaAYEOnmvPL1x1K3wIZM1WNmUP7x5bl3WWAzm
HRgGcHkg8GL/L2vHi7xBItlOQAZz1NDySKrVIPQl8lYbgpgrZmmdAGM8d+kU150p
UkpKiPvyIwTVkY+s6JB5r5m5uFvA6wLEn0gkTE3bgWBYolMSrD84x0zk3IskTGCj
t67uSs9qzMc/+n87fj2aq2VZnVTAS1hzSDljN8il0ST0F1wAFjuntjgqmLtKsX+U
OV4FK93kXpZ7vPOFhOhDCdNDoxZFBItugRqkyOpHleD9/0oWzhiyt8KwJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdzkqoKl62p8sm1xzgVHoeJhBvVMB8GA1UdIwQY
MBaAFHGG5ktYI8TGEoeFjZdwxw33BrDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUt
NjU4YjgwMGE1ZDYxLzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUtNjU4YjgwMGE1ZDYx
LzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUR/J2ul
/rPfjZOcen6/0mIFXf2BjkvGsS+Us7+rklWJdczYmFXFCgqCGGlC8xR7EOq/nHMD
97t7w44vkuiFd1d0c4tVuFJaUKK+C9RFqnlbA/w2fK4DnUn4qi2vSpkiY4muYpag
ps8oqswHPTOMDfaQxWaiOngCoF4eRkODNzg3axFPkQNS9yqaNKSqkkTzqBY3rP4R
KtAYjsvRgOjVEfGEbY8+Lwa/qcAMuqEtfdmq0XhYXdfxBPxVUuqcef5O6eK56QGF
QnrGpc+l3ii/HP4t69ZdPV+FBhj1JAmvtK3QrbqywD+sfWmtrNuG4YMOKm8rsonQ
6PDXmm35+myC2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:09 2026 by rpki-client