Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: Q3cuA+5505xSh8A5sk7gfn9QdERaABtjmQXtncj/noQ=
Subject key identifier: 5F:62:C4:0D:98:D6:72:92:F3:40:FA:79:41:4C:1A:23:36:19:46:02
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 01A1DFBA1A169B8C2034FA7710AC1749B6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 11C3
Signing time: Sun 15 Nov 2026 15:01:17 +0000
Manifest this update: Sun 15 Nov 2026 15:01:17 +0000
Manifest next update: Mon 16 Nov 2026 15:01:17 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: sLTMOAAOR4YzWtS/SYGVBsPvnueehCgoBKl0w2+q5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:1a:16:9b:8c:20:34:fa:77:10:ac:17:49:b6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Nov 15 15:01:17 2026 GMT
Not After : Nov 16 15:01:17 2026 GMT
Subject: CN=5f62c40d98d67292f340fa79414c1a2336194602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:2a:89:00:eb:51:94:93:d0:bb:8a:dc:08:
44:8f:27:a5:cc:06:08:4e:fa:08:c7:27:33:75:bc:
a4:8b:97:26:67:be:6a:d5:6b:b2:d0:ad:4d:52:b6:
24:c9:2c:fa:c6:57:ac:78:2b:36:17:64:b6:60:c1:
37:6a:ad:94:e8:47:34:8a:7c:d5:1f:3b:90:51:fc:
6e:e0:c7:17:42:e8:27:d4:08:79:12:80:da:7f:96:
cb:c5:2a:31:b4:c0:07:9c:a4:76:8f:cf:cb:c2:28:
91:f8:e6:d4:eb:de:a4:ab:06:5f:ad:45:6b:5e:e5:
45:73:2a:0e:9e:45:1d:ff:08:2d:10:bd:61:b6:92:
12:34:62:97:e9:70:fe:52:43:43:68:0c:99:59:ee:
06:6a:33:53:3b:95:e7:d0:32:6a:19:b0:4c:ab:6e:
ed:24:cf:33:92:37:d8:8a:df:31:03:99:b5:2c:4a:
ed:23:f3:48:e6:aa:b7:01:e4:f8:9c:97:69:59:fd:
ee:60:57:73:c7:2c:83:d4:4e:19:96:a6:79:7b:8a:
1d:2e:51:4d:fa:3b:1b:0f:42:a8:36:7c:7d:5c:c2:
4d:68:e7:08:f9:7b:96:03:ac:67:92:10:67:f2:9a:
31:87:f5:45:cf:8e:92:d9:d3:f3:f6:3c:fa:c4:7d:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:C4:0D:98:D6:72:92:F3:40:FA:79:41:4C:1A:23:36:19:46:02
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:46:1c:02:d9:e0:5f:9d:31:4b:f3:28:5f:be:e5:41:ef:73:
7f:93:15:86:fd:14:6b:cb:f3:d4:5b:da:11:66:be:20:3e:78:
59:df:57:a5:4d:1d:be:63:76:ff:8d:dd:a7:77:c6:84:f6:83:
2f:bb:c6:c9:78:ba:cd:b5:48:fd:84:ac:34:13:e9:89:71:9e:
6c:56:42:a2:63:43:9e:3e:fe:2e:81:4c:15:b1:1a:52:ce:d3:
b0:61:1e:ee:e9:ce:5d:f7:26:66:d7:e3:72:ec:28:30:3d:af:
7b:e0:55:2c:ac:5d:88:67:ed:53:19:5c:62:ce:3c:b4:36:e4:
98:7e:55:dd:4e:e8:65:03:3e:bc:86:9a:9d:b9:33:86:36:fd:
a4:bd:c0:d3:3a:82:06:f6:3a:b8:b7:20:46:36:d1:d5:30:2c:
da:85:6b:ff:31:8e:52:f9:23:41:4d:4a:9d:74:2c:47:19:fe:
f1:e3:93:6d:de:1e:aa:e1:08:9d:1d:46:4a:de:f3:99:29:85:
23:b4:ac:4c:13:10:31:96:1b:82:64:ab:84:f1:f6:51:41:a0:
25:2f:6f:76:75:fc:d3:de:8f:e4:0e:4f:94:dc:1c:99:4d:04:
bf:1e:fd:ba:cd:06:72:15:28:5f:ec:1a:7a:a8:bc:58:95:ad:
ac:d3:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:18:26 2026 by rpki-client