Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: jOMlQaOlqKqET8wThcBdKixLZbzSHGO7cxhVzna/k1A=
Subject key identifier: BD:F4:3A:E0:72:A8:28:16:14:A7:E4:83:2A:88:CE:A0:CD:C4:A1:6A
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 019F8ED9308772645DFE365CA7D19C029E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 1090
Signing time: Thu 23 Jul 2026 12:00:26 +0000
Manifest this update: Thu 23 Jul 2026 12:00:26 +0000
Manifest next update: Fri 24 Jul 2026 12:00:26 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: 9r/yHyFlDko56ODQKj2berftHCow3i6ln0GZRqKQrf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:30:87:72:64:5d:fe:36:5c:a7:d1:9c:02:9e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Jul 23 12:00:26 2026 GMT
Not After : Jul 24 12:00:26 2026 GMT
Subject: CN=bdf43ae072a8281614a7e4832a88cea0cdc4a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:ba:93:8e:92:11:ef:9d:56:75:6c:b0:79:
10:c4:10:43:28:22:76:b1:83:cf:36:9e:3a:f6:90:
10:8f:7e:60:81:15:a6:d2:cd:f6:00:4d:e5:03:e1:
f5:22:c0:4a:07:b2:95:59:1c:ec:8e:8b:51:f1:c0:
10:10:8c:3f:17:a9:f4:f2:b1:b6:5c:17:a9:26:a5:
e3:ca:6a:9a:87:5c:cc:ca:52:54:78:08:bf:a9:4e:
b3:1b:82:76:4f:d6:f4:ba:8f:20:0c:fc:b6:81:b1:
03:02:cd:20:1e:5d:00:5f:4b:1b:d5:ab:e6:f4:fd:
b8:91:8c:04:7a:46:68:00:e3:76:40:63:e3:4a:20:
49:6b:82:b6:c7:2f:9c:81:03:ad:ef:d2:c6:64:bf:
d6:4e:e5:57:89:e2:2b:c2:39:32:b2:33:99:d4:c6:
8d:70:54:e2:51:b2:0a:2c:0e:58:41:57:9b:e1:04:
67:44:32:89:0c:32:ed:9a:0e:83:cf:6e:a1:84:a4:
51:00:49:54:0e:e2:0b:b3:40:93:e6:a4:e3:35:a6:
a3:d7:b7:b8:45:d9:2b:b8:87:45:86:b7:38:07:71:
db:34:82:b7:8d:61:eb:ed:7c:41:0b:f5:14:cf:8c:
31:3e:26:b2:9d:73:9d:a2:96:ff:82:ae:7d:07:8d:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:3A:E0:72:A8:28:16:14:A7:E4:83:2A:88:CE:A0:CD:C4:A1:6A
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ee:51:16:e6:2a:0f:74:a5:6b:5e:f3:ae:a6:08:66:12:e0:
24:d1:12:fc:d5:40:70:71:f5:cb:ae:fe:7b:5c:97:57:98:8c:
47:33:9e:b2:8d:2d:02:3c:0d:4f:45:87:a7:c1:92:54:ae:86:
89:92:a8:21:87:f3:2f:85:b2:a6:51:96:07:05:a4:29:e8:23:
8e:83:a6:99:d1:c6:4a:b6:95:66:6a:73:4a:c9:27:ce:9b:63:
7c:f1:22:fe:fc:69:9b:d4:f2:c3:e4:b0:8c:a3:83:90:b8:c6:
13:ae:6a:12:6c:88:ab:f7:74:41:76:0b:00:68:13:72:26:3a:
5d:d8:34:41:ea:4e:7d:e8:c6:c6:89:4a:d5:d9:b6:76:5e:24:
72:7b:d9:f8:f1:5e:ce:8e:9e:8e:07:4b:95:08:37:70:46:e2:
da:9c:8e:f1:a4:55:aa:b4:68:28:14:ea:1e:31:80:86:b5:40:
02:0f:5f:a9:fa:c5:19:5c:db:8b:fc:56:3b:41:41:54:a9:b6:
14:52:c9:a9:d7:5b:59:9f:3c:41:d0:a8:f0:39:45:5a:d5:ab:
3b:84:28:74:50:c7:67:98:db:70:6e:a1:e1:07:9e:78:f7:9f:
5b:2b:0a:e5:12:15:fc:9c:1c:d3:36:da:ed:b4:a4:5c:b6:c6:
37:bb:77:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2TCHcmRd/jZcp9GcAp6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ODYwM2YwZDQ0YTkyMDQ0MzM4YTJjYWRmMTg5ZTgxMDFj
M2JmNWYwHhcNMjYwNzIzMTIwMDI2WhcNMjYwNzI0MTIwMDI2WjAzMTEwLwYDVQQD
EyhiZGY0M2FlMDcyYTgyODE2MTRhN2U0ODMyYTg4Y2VhMGNkYzRhMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwi6k46SEe+dVnVssHkQxBBDKCJ2
sYPPNp469pAQj35ggRWm0s32AE3lA+H1IsBKB7KVWRzsjotR8cAQEIw/F6n08rG2
XBepJqXjymqah1zMylJUeAi/qU6zG4J2T9b0uo8gDPy2gbEDAs0gHl0AX0sb1avm
9P24kYwEekZoAON2QGPjSiBJa4K2xy+cgQOt79LGZL/WTuVXieIrwjkysjOZ1MaN
cFTiUbIKLA5YQVeb4QRnRDKJDDLtmg6Dz26hhKRRAElUDuILs0CT5qTjNaaj17e4
RdkruIdFhrc4B3HbNIK3jWHr7XxBC/UUz4wxPiaynXOdopb/gq59B43A0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL30OuByqCgWFKfkgyqIzqDNxKFqMB8GA1UdIwQY
MBaAFAmGA/DUSpIEQziiyt8YnoEBw79fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYt
YjczNjg2NDI3OTQyLzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYtYjczNjg2NDI3OTQy
LzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYe5RFuYq
D3Sla17zrqYIZhLgJNES/NVAcHH1y67+e1yXV5iMRzOeso0tAjwNT0WHp8GSVK6G
iZKoIYfzL4WyplGWBwWkKegjjoOmmdHGSraVZmpzSsknzptjfPEi/vxpm9Tyw+Sw
jKODkLjGE65qEmyIq/d0QXYLAGgTciY6Xdg0QepOfejGxolK1dm2dl4kcnvZ+PFe
zo6ejgdLlQg3cEbi2pyO8aRVqrRoKBTqHjGAhrVAAg9fqfrFGVzbi/xWO0FBVKm2
FFLJqddbWZ88QdCo8DlFWtWrO4QodFDHZ5jbcG6h4QeeePefWysK5RIV/Jwc0zba
7bSkXLbGN7t3MQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:12 2026 by rpki-client