Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: nrpCXOpSRi3qJV5p/2nTrCTsORRlK+VpfNSR3J1HoYU=
Subject key identifier: F5:95:64:E0:BB:AE:AF:58:1C:19:F8:84:A4:09:E0:FD:2B:18:0C:6C
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 019E1DFEB57A686917011249586C741354E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0FD1
Signing time: Tue 12 May 2026 21:01:32 +0000
Manifest this update: Tue 12 May 2026 21:01:32 +0000
Manifest next update: Wed 13 May 2026 21:01:32 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: phm7862ic2Szxojkba2NxvWyaIGS5bqqlZ4O8Z7LJh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:b5:7a:68:69:17:01:12:49:58:6c:74:13:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: May 12 21:01:32 2026 GMT
Not After : May 13 21:01:32 2026 GMT
Subject: CN=f59564e0bbaeaf581c19f884a409e0fd2b180c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:eb:dc:2e:e6:01:da:4a:ff:26:a6:4b:9c:
2c:cd:d7:b2:e0:8d:8b:12:af:ff:d8:ab:f1:35:40:
3e:05:b3:67:f1:40:59:2c:70:eb:7f:f0:c7:07:36:
59:25:db:32:44:8a:85:eb:a8:e8:af:87:5a:38:9e:
10:a4:5b:f7:0a:73:83:78:03:6b:70:b8:3d:f4:c2:
24:24:2f:91:88:dd:3c:56:62:05:da:11:33:25:34:
5c:25:51:33:b3:f7:96:b5:55:66:08:fa:94:f0:03:
4b:11:8e:d6:16:23:52:fd:fd:93:d2:5a:90:31:68:
f2:53:f1:2e:94:3c:9d:9c:66:73:41:31:10:90:c2:
d9:f5:51:e3:67:bb:d8:d5:71:75:b5:cb:0a:9c:a5:
ca:4b:99:48:1b:64:41:9a:54:a7:af:a9:27:5a:b9:
e0:01:79:e4:b8:98:10:42:48:44:51:b5:3c:e7:7a:
b6:f1:63:94:1c:0c:b8:ce:53:54:ad:ff:df:84:34:
5b:b9:1c:5d:e5:e1:52:90:43:1c:fb:10:e2:17:f5:
1d:2b:b9:6e:42:a2:e4:32:22:e5:05:36:fe:cd:49:
0d:7a:a6:8f:1a:b0:41:0e:8b:7a:08:dd:e6:c1:1d:
0c:e7:32:c1:8f:7a:6e:ec:5e:b4:6b:95:b9:5c:62:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:64:E0:BB:AE:AF:58:1C:19:F8:84:A4:09:E0:FD:2B:18:0C:6C
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:71:79:ce:dd:c8:50:0c:1c:0b:ea:de:40:ca:ca:e2:da:f2:
80:da:92:ba:18:ec:c8:21:7a:cc:f7:aa:81:ef:30:a5:5a:5b:
83:d2:af:49:f8:24:ea:61:4f:0a:2e:d8:0a:1a:38:37:a3:81:
e8:d3:94:c5:4e:f2:96:6c:12:43:ce:3a:74:ff:92:40:f1:cb:
b8:63:00:08:ba:49:19:a6:e9:7a:1a:20:ba:ef:6f:b5:4b:55:
47:55:97:c2:80:cf:7e:50:9c:73:65:a9:c9:ff:2a:7f:0d:e1:
05:44:f7:41:d7:ce:1b:4a:d7:df:ec:cb:7b:68:a4:ec:b8:60:
10:ab:c2:39:e5:cf:9a:04:44:3d:4a:5c:e9:8d:10:d8:95:ee:
e4:d7:5d:48:4b:bb:53:b4:5b:f2:1f:3d:5a:ea:41:10:61:2e:
2e:5d:95:a9:7e:68:30:45:70:13:7a:fe:f3:49:20:b7:0e:af:
4c:a5:3c:b2:8f:6d:6d:2d:ab:77:64:dd:e5:55:6f:7d:81:7e:
a8:2a:80:93:e4:fc:33:b2:d6:dd:1e:3a:09:c6:14:c7:cb:51:
01:2a:77:ec:a2:20:3e:b1:26:e4:bb:1d:35:2f:ae:91:db:0a:
fe:ff:86:f0:37:24:c5:21:0a:50:cb:4d:e9:58:40:b7:00:04:
69:71:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:13 2026 by rpki-client