Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: RY9itXwEsBAMMvLvcf+t3rsttRp9uzTPo4Az2YF4TzU=
Subject key identifier: 12:2F:14:3E:86:87:6A:55:DB:7E:0F:16:40:B9:31:90:8D:ED:29:8A
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 019F91360BDE4E1C39B20A46BEF57032F0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 11D3
Signing time: Thu 23 Jul 2026 23:01:05 +0000
Manifest this update: Thu 23 Jul 2026 23:01:05 +0000
Manifest next update: Fri 24 Jul 2026 23:01:05 +0000
Files and hashes: 1: BUE7EIoRZVPe0cNnXcD22KEMCwA.roa (hash: F2S7PMb1ZI5mW1mAQMP7O8Np+g1NdICYYD40JG2Q/yc=)
2: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: WuLzNUqTO+ElEkuNZ9cNllhzqnmEuO/uceCKvsShMt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:0b:de:4e:1c:39:b2:0a:46:be:f5:70:32:f0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Jul 23 23:01:05 2026 GMT
Not After : Jul 24 23:01:05 2026 GMT
Subject: CN=122f143e86876a55db7e0f1640b931908ded298a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:0c:ca:89:16:95:6a:f6:1c:8e:f7:f2:7e:
de:67:ca:de:b5:5b:ca:10:f2:a4:af:5a:28:a2:ae:
7a:7e:1d:66:a9:5d:3a:f7:b0:6d:20:ee:e7:52:d4:
28:55:6d:99:b8:2b:af:11:84:5e:ce:95:6d:60:e5:
78:5b:70:1b:9f:f7:80:e3:7b:a5:d9:2b:22:18:8e:
e0:12:6d:bc:f9:98:63:64:12:29:67:22:42:35:0c:
b9:85:73:0e:41:90:66:1c:81:7e:bd:2b:d1:be:12:
1e:c6:4f:3f:1f:33:bf:75:23:5f:de:0e:f0:42:47:
90:ec:cf:2c:a1:32:eb:0b:32:70:d7:96:d7:54:9a:
4f:fd:73:d7:65:a2:6b:87:35:66:8f:12:9a:c0:4f:
be:08:dc:5e:f9:bd:28:7b:b3:82:8d:a7:4d:88:46:
cb:5b:3f:71:bd:f7:03:1e:9d:83:1e:ef:93:4f:2a:
37:50:f6:44:d1:24:62:62:03:90:c9:e3:f2:9f:c5:
3e:fe:b6:58:46:7a:0f:9b:3d:2c:58:9f:83:bf:51:
31:26:65:1e:12:bd:c4:e5:35:9c:a2:56:d0:90:20:
05:ca:50:60:fd:50:99:6b:6c:7a:51:d3:e2:3d:4e:
00:ba:38:86:b1:83:c5:38:f1:12:f3:60:7b:e0:34:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:14:3E:86:87:6A:55:DB:7E:0F:16:40:B9:31:90:8D:ED:29:8A
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d3:84:b2:ff:ce:c4:25:48:6a:d9:9e:d4:46:a9:db:02:4b:
63:e6:b0:f9:b3:4a:35:92:a2:ff:07:c7:1f:6e:16:06:f5:de:
cc:46:94:5c:b3:87:c5:ae:e6:76:56:07:28:ec:6b:26:bf:05:
60:90:4e:06:89:93:b4:fb:e7:54:49:da:10:e6:80:10:ad:37:
00:60:8e:a8:09:43:14:83:69:3d:9a:a9:15:bd:c3:2d:35:b3:
e8:4c:c1:09:d5:f2:2b:4e:25:42:7e:53:92:58:d0:71:cc:5e:
4b:78:d8:e6:a7:0b:a8:e9:e5:50:b6:7c:86:c0:66:92:86:5f:
c9:d0:a2:3f:93:3c:ff:c5:35:7b:10:1b:72:3e:35:cc:b1:16:
96:c7:ce:de:3f:92:1a:af:7a:8f:93:ed:6a:02:e5:56:bd:eb:
e5:81:af:9d:f4:da:b1:d3:d9:83:3f:57:44:05:f9:27:6c:f2:
53:90:82:ed:b2:81:0c:b6:f0:36:ec:6f:ec:6b:a1:30:37:7a:
e0:4c:e7:98:54:6d:41:d6:61:0a:ad:fb:ef:c0:f8:4b:6b:ab:
fd:72:fc:bb:2e:80:c3:92:4b:61:bb:ae:76:31:ce:f1:e0:b2:
8f:4e:0b:75:d4:c4:91:8c:3e:d3:b2:68:c8:9a:12:43:c7:88:
17:06:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:37 2026 by rpki-client