Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: XMAjd6ULqjWh4Bn4Quzr97GSQEAFzGWmL4NlbdJGoKQ=
Subject key identifier: AB:FB:A4:8A:D1:28:EE:99:45:3E:B0:8E:7F:14:D4:67:CD:B4:33:0D
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 019D28BB132D7718E34BA2FFA3087450C3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0F52
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: Ip1dyk63RH37ZvBbjrPU1+PbgR+WfxJ/VySgUGHYt5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:13:2d:77:18:e3:4b:a2:ff:a3:08:74:50:c3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=abfba48ad128ee99453eb08e7f14d467cdb4330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:e5:79:75:02:26:ac:7e:c2:6d:d6:8e:58:
55:6b:95:8b:bc:cd:44:ce:c3:fd:2d:6c:76:ab:72:
d8:e6:db:97:97:f7:6b:84:c5:d1:2d:6a:f0:e8:54:
ec:d2:fa:e3:84:0b:95:a2:4c:94:ea:ec:f8:4f:32:
a4:d0:49:c8:7e:de:69:c0:f7:f0:46:9d:a5:e0:5e:
d3:33:82:30:a8:07:eb:b2:8f:71:fe:8c:b8:f1:6f:
2c:5b:79:fc:99:ca:6c:64:a0:9a:3a:04:1d:fe:ec:
de:12:d5:98:53:a6:43:92:1c:96:54:bf:6e:43:cc:
74:ec:a9:ba:d5:a2:a7:6d:0b:03:9b:5b:d6:c0:15:
78:20:16:58:9b:71:13:2f:35:61:22:ca:4f:af:54:
91:4a:74:9c:16:d0:0e:b8:c1:8d:63:44:c1:07:0c:
f9:3f:27:ca:b9:2e:26:4a:4c:56:fa:81:98:28:d9:
ca:68:a3:2f:fc:35:75:b2:25:ae:5f:49:3b:2e:7e:
76:aa:62:87:81:3f:38:0d:b1:b9:58:e7:49:1b:78:
99:61:79:f6:4c:b2:8e:69:62:5d:2b:db:22:1e:0e:
24:15:44:b1:b3:bf:89:e5:ac:88:6b:1a:fb:fc:c2:
65:11:0a:e1:76:cc:b0:01:ef:09:e0:f8:41:d1:68:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:A4:8A:D1:28:EE:99:45:3E:B0:8E:7F:14:D4:67:CD:B4:33:0D
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1d:ad:51:8a:96:03:62:68:41:a0:4e:3a:93:71:87:b9:87:
18:07:bc:48:e8:71:c6:a7:a6:1a:15:3d:c3:93:3b:05:72:5f:
6a:32:78:56:d0:df:df:e6:a5:a0:a3:b1:03:cc:ec:9a:3c:d2:
02:58:f3:31:b7:a7:d7:e6:2a:66:f4:82:12:27:b7:d0:0d:8a:
13:8a:31:8d:f0:e5:17:92:42:14:9f:ce:22:f9:68:c5:86:bf:
10:f2:1b:e6:3c:d3:d8:9e:ab:b0:6f:a7:85:34:3c:a9:db:db:
47:d7:71:97:91:ea:b6:72:2d:94:b2:5f:79:88:aa:60:fd:c6:
b3:12:87:d4:21:82:27:1d:bd:c8:bd:cc:e1:8e:da:22:2a:9a:
b5:29:b3:7c:64:4a:77:ec:ac:31:9e:b2:ab:2f:ee:6d:6c:02:
6f:b5:ab:40:e0:2e:e3:c2:95:d4:dd:0b:2e:83:86:c3:b3:6a:
8a:b6:a0:76:93:f5:15:fd:c8:90:6a:4c:28:82:96:f2:58:47:
85:50:cb:08:c9:a4:3f:3c:fa:d5:91:5c:a9:4c:0e:1b:1a:ed:
bc:5a:d0:3d:a7:51:1c:ad:58:d1:7e:7e:97:df:48:f3:55:ba:
9d:e5:ae:4c:e9:a9:0e:da:cc:85:a5:35:fb:eb:32:66:17:b3:
60:96:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:50 2026 by rpki-client