Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: AQA3YIEE/lThUJ8uyMTLnZMue+tZukPi3gGYG3jSdUc=
Subject key identifier: 65:6F:42:45:D8:DF:52:26:43:0C:49:7E:5B:2F:87:47:A0:28:52:C8
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 01A0C9A21F323954D85443CD432DE5E0E276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 1133
Signing time: Tue 22 Sep 2026 15:00:40 +0000
Manifest this update: Tue 22 Sep 2026 15:00:40 +0000
Manifest next update: Wed 23 Sep 2026 15:00:40 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: J/AlWUH98p+jaloi00dcWrWRWUYDWVznLazbdvF/vlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:1f:32:39:54:d8:54:43:cd:43:2d:e5:e0:e2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Sep 22 15:00:40 2026 GMT
Not After : Sep 23 15:00:40 2026 GMT
Subject: CN=656f4245d8df5226430c497e5b2f8747a02852c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:cb:ad:10:9c:bc:7a:70:c1:79:86:6c:89:
5d:b4:e9:34:a5:61:c1:1f:a4:fe:ee:5f:52:4a:2e:
ee:19:d6:f6:ad:44:6c:16:65:ea:d8:94:32:ba:41:
bf:4c:eb:62:7b:95:14:70:00:67:ee:f9:d7:b1:dc:
4b:7f:7b:a9:42:f4:d4:78:c5:03:cd:6f:8b:4d:3c:
32:be:bb:5c:5c:e5:05:28:2e:ae:50:d4:e2:17:f4:
7b:c6:72:96:5a:1c:11:7b:4d:d4:3b:38:5e:6f:e1:
af:ba:c9:9b:f6:86:fb:f0:a6:68:fe:37:10:a6:fc:
9c:54:3f:cd:1a:2e:0c:56:89:db:c2:a0:ff:29:e6:
9e:fb:95:48:49:78:a1:80:b0:cf:7b:c2:31:b8:0a:
c6:2d:1e:de:59:cf:1e:f6:65:04:7a:aa:21:08:86:
29:a8:a8:ca:6e:b2:20:69:f4:f8:7f:c4:e8:27:9c:
c7:8d:42:59:51:08:19:fb:f3:82:e7:95:56:8f:7d:
b4:35:24:2c:b6:37:8f:71:a1:d4:dd:95:b5:58:25:
b4:c0:cc:95:f0:81:1d:92:9d:1c:93:c7:a1:03:a9:
b7:aa:15:c9:2c:1a:ff:88:51:2e:c0:d6:a9:a9:93:
1b:1d:83:97:fc:a9:19:17:fb:85:47:bc:46:b3:60:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6F:42:45:D8:DF:52:26:43:0C:49:7E:5B:2F:87:47:A0:28:52:C8
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c0:46:3f:0d:2c:28:25:e8:36:85:80:45:47:96:8a:d2:21:
da:7a:79:53:66:ae:cc:b7:d5:95:b9:8b:12:4a:6e:94:bb:0e:
2e:ea:6f:27:ea:de:a1:a5:42:93:e2:e2:05:e6:ee:41:92:3a:
8f:4a:ea:71:b9:7d:51:ea:70:d5:c4:55:55:f1:69:b9:6b:d5:
1e:35:a7:c1:9d:e1:db:c5:56:da:c7:f6:fa:f3:e1:2f:da:a2:
80:ec:4a:63:04:5d:67:22:f7:ae:c7:8d:be:19:0e:4f:04:55:
06:a4:d4:57:62:2b:9e:1a:12:68:f5:d5:cc:95:0e:bd:5c:6d:
ee:4b:df:47:6b:13:ea:0a:0a:03:ef:31:af:58:3c:35:42:c3:
44:e2:8a:ad:36:34:41:46:5a:c5:f0:21:7d:b2:e4:42:c7:d9:
d2:56:b9:1d:ce:0c:ac:1d:30:7a:d4:5c:26:2d:37:b9:30:38:
7f:88:b8:03:47:28:c2:01:01:06:e6:4b:ab:fe:c2:55:63:84:
4b:7a:c8:d5:5a:86:44:12:b4:4e:4b:d2:ba:72:71:63:5a:e8:
d8:a5:60:66:e2:c0:75:e1:95:67:3a:8c:a4:99:7f:4a:6c:8b:
75:d1:3c:a1:fe:8c:71:9b:3e:a8:c0:12:3e:23:56:ac:1f:43:
ae:5a:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:26:19 2026 by rpki-client