Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: 7c2ag3WY6ygwAEJ2rfwOXiadCm2MlF3Au7z/gVjvNiI=
Subject key identifier: 50:10:65:FC:89:6D:D3:55:4E:51:99:41:5D:94:5C:62:27:92:6E:5B
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 019D29292B5AE8AF0048F5E85C096E2184B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 1094
Signing time: Thu 26 Mar 2026 08:00:57 +0000
Manifest this update: Thu 26 Mar 2026 08:00:57 +0000
Manifest next update: Fri 27 Mar 2026 08:00:57 +0000
Files and hashes: 1: BUE7EIoRZVPe0cNnXcD22KEMCwA.roa (hash: F2S7PMb1ZI5mW1mAQMP7O8Np+g1NdICYYD40JG2Q/yc=)
2: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: HtXFXLuAq24IdG6GWAlbkpGVDAtFxg6ezPR3OUdM/ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2b:5a:e8:af:00:48:f5:e8:5c:09:6e:21:84:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Mar 26 08:00:57 2026 GMT
Not After : Mar 27 08:00:57 2026 GMT
Subject: CN=501065fc896dd3554e5199415d945c6227926e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:6d:3d:7e:51:99:41:d4:e5:05:c2:1d:70:
f5:02:c6:75:a4:6f:62:59:df:50:59:be:3e:04:1e:
9d:9b:44:ef:8d:80:1f:f1:a4:f5:e1:f2:6b:03:df:
ee:f1:c0:f2:14:87:fd:ea:d1:97:a2:db:b4:07:c8:
ad:d8:c6:95:ee:83:02:ac:c8:e1:9f:aa:f6:ac:d3:
77:ad:73:11:dd:ce:6f:d9:43:3c:36:c4:e6:7a:ba:
04:41:93:6b:2e:89:e9:0a:d8:5e:dc:08:5e:7a:9f:
dc:fc:f4:39:eb:1e:43:82:71:04:40:68:34:fb:a2:
a3:d2:c5:e1:9e:86:71:70:c3:59:87:47:f0:1b:4b:
4b:66:81:36:d4:b0:db:6f:d4:d0:95:ec:cc:48:99:
ac:44:02:fe:1a:e7:ac:87:7d:81:d8:b7:7e:12:26:
3d:e3:de:62:87:79:8c:9a:96:22:17:97:0b:ec:e6:
26:c9:70:80:e7:32:2b:4e:71:fa:52:20:8e:27:35:
79:67:70:2b:a4:64:1a:55:2b:43:f1:fe:8c:a3:4f:
e0:ed:d7:bb:f6:dd:a0:d0:c6:30:12:84:97:b5:6c:
a5:1a:8c:f8:28:41:0e:de:7b:ba:88:5b:7d:82:04:
a6:96:c2:70:24:72:f8:2e:84:dc:6a:92:3a:d0:0e:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:65:FC:89:6D:D3:55:4E:51:99:41:5D:94:5C:62:27:92:6E:5B
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ee:37:15:de:31:56:c1:a4:c2:10:6b:f4:22:4b:9e:4f:e6:
74:1d:e1:bd:ed:69:fe:c7:e2:e6:5a:05:23:3e:be:d4:e6:48:
6c:53:b6:4e:57:1f:7b:b2:3d:9a:31:51:cf:8f:1a:b0:cf:b1:
bc:5e:7d:87:c0:bf:45:de:6f:e7:84:97:0e:54:ee:8c:63:da:
22:39:2b:2e:be:6b:62:f7:af:45:96:d7:64:11:b6:3d:b7:fc:
95:51:0e:8d:e4:89:fb:5f:64:61:91:a9:8a:c9:6f:4c:78:e7:
26:a1:56:7e:29:dc:6b:62:be:c5:37:3b:c1:2a:c8:a0:92:f7:
f7:aa:d0:c6:c9:c3:cb:b2:b1:8c:70:e8:54:4a:4d:4c:8f:93:
1a:7f:93:21:b4:ed:8d:3d:17:f0:f9:d8:ad:5e:56:97:07:32:
80:a0:88:9c:c9:7e:6b:69:af:fe:0a:04:e9:10:5a:3e:87:a2:
04:f8:bd:26:99:31:07:37:7d:b2:eb:fd:5b:16:84:fb:cc:2c:
21:ba:e5:22:c6:0c:71:a3:a0:0f:51:a5:12:3b:a9:ff:d5:65:
f1:f0:c9:52:e0:db:86:00:3a:2d:5b:a9:ab:3c:38:15:36:31:
f8:9d:5c:a9:c3:52:f3:5c:9e:bf:20:66:13:b5:af:9b:75:81:
40:50:0d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:40 2026 by rpki-client