
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.mft
File: CyBJ9sp8_a2vPLPHHkiwg98Lc_4.mft (raw, json)
Hash identifier: n3KBN90tqKL5iGrUHH9RotYukjGYdrnvY4CoXDTvJ+M=
Subject key identifier: 31:4B:C5:17:53:27:D0:64:34:8F:35:58:37:37:FD:EA:77:1D:CD:46
Authority key identifier: 0B:20:49:F6:CA:7C:FD:AD:AF:3C:B3:C7:1E:48:B0:83:DF:0B:73:FE
Certificate issuer: /CN=0b2049f6ca7cfdadaf3cb3c71e48b083df0b73fe
Certificate serial: 01A0CE245682E53D3B22DF1776A02D675D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.mft
Manifest number: 0254
Signing time: Wed 23 Sep 2026 12:01:22 +0000
Manifest this update: Wed 23 Sep 2026 12:01:22 +0000
Manifest next update: Thu 24 Sep 2026 12:01:22 +0000
Files and hashes: 1: CyBJ9sp8_a2vPLPHHkiwg98Lc_4.crl (hash: vWOl+sMaaoRu7Edy1WUIQlX/GVqCoZ25V3W+1nGT40c=)
2: fC_BVeuSRvNhDuyiV5VErP_nsOI.roa (hash: nFVXkMa+yfSpLlm5e8o1/01S27zDuwQKwH6ny5ZPQwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:56:82:e5:3d:3b:22:df:17:76:a0:2d:67:5d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2049f6ca7cfdadaf3cb3c71e48b083df0b73fe
Validity
Not Before: Sep 23 12:01:22 2026 GMT
Not After : Sep 24 12:01:22 2026 GMT
Subject: CN=314bc5175327d064348f35583737fdea771dcd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:3b:f4:89:e0:08:1a:21:c0:f3:96:8a:a0:
e3:d6:55:d6:b4:05:ed:14:ae:d6:96:4b:d4:d8:bf:
a6:56:f1:d9:f6:41:6c:0c:56:62:6f:6c:ce:73:d2:
12:ea:cf:37:e5:ed:c5:2f:c3:d8:0a:64:3e:2f:4b:
f7:6c:ad:e2:f8:b0:2b:b1:18:b9:9c:dd:f5:7f:c9:
df:84:42:66:a0:e6:64:12:ef:c7:b9:b1:2d:11:7b:
fd:1c:8e:57:53:20:77:37:96:9a:fc:eb:66:ed:be:
98:0d:46:f5:a7:6e:d4:cb:5e:84:aa:b2:c9:b9:ac:
28:71:0c:ad:7e:ed:e2:a5:e5:62:48:16:ad:fe:34:
f3:78:0a:69:b5:fa:b0:d6:7b:53:09:55:a8:82:5c:
c4:1c:b1:ff:6e:34:8b:ed:cb:02:05:d6:9b:88:d3:
8f:87:0b:fb:7c:39:25:95:f0:44:ee:1d:65:dc:07:
75:51:f3:88:f4:eb:8b:ef:8f:35:e0:26:04:d3:cd:
d7:ba:28:65:9b:7f:88:4c:31:15:ad:ca:b4:21:4d:
88:04:23:a9:1c:e8:e2:21:69:2b:53:9c:20:99:c9:
de:88:d6:ad:8f:51:c6:21:b2:5c:57:1e:00:4d:95:
b8:30:ce:74:96:a2:b2:1d:e4:24:2c:ce:63:14:68:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4B:C5:17:53:27:D0:64:34:8F:35:58:37:37:FD:EA:77:1D:CD:46
X509v3 Authority Key Identifier:
keyid:0B:20:49:F6:CA:7C:FD:AD:AF:3C:B3:C7:1E:48:B0:83:DF:0B:73:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:18:0a:b9:70:44:d6:67:f4:d3:71:32:56:2c:54:a5:98:43:
0f:09:97:64:a4:c5:97:b9:cf:9d:a2:32:84:61:d2:65:5e:97:
6d:4a:53:d8:d5:f4:ba:92:c8:4a:a8:59:f4:de:ff:83:37:e8:
64:31:13:61:f7:35:fc:7b:2c:6e:ab:21:6a:7b:31:59:d9:df:
05:8a:b6:05:92:ce:18:27:60:c8:f6:2e:1c:ba:bd:72:1a:ee:
38:a0:7a:1c:f9:77:0e:6d:ac:44:63:be:1f:81:0f:c9:aa:ee:
c1:92:f1:0f:ed:25:8e:d4:2e:f9:f7:85:75:54:10:95:4b:84:
3b:b1:37:2c:65:cf:03:5c:a9:1d:4b:a3:40:e1:6f:c8:90:5d:
ea:67:df:5d:0b:54:a8:44:da:cb:11:79:4b:63:5e:49:86:3f:
10:69:3a:d6:a8:cc:b2:f6:a8:4c:5a:bf:52:65:80:6f:a4:8e:
1c:ca:d1:0e:4b:70:29:4d:1a:4a:fc:b5:51:a5:1b:4c:83:14:
f7:21:bc:a6:0c:ac:09:f5:64:d6:d1:bd:17:4a:71:85:84:d1:
7c:68:47:c6:2b:13:74:76:39:60:a1:78:3c:7c:03:0f:68:25:
4d:e2:7b:7a:fb:1d:1f:49:09:24:9a:5d:05:e3:b3:54:a0:63:
c9:cc:54:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJFaC5T07It8XdqAtZ10aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjA0OWY2Y2E3Y2ZkYWRhZjNjYjNjNzFlNDhiMDgzZGYw
YjczZmUwHhcNMjYwOTIzMTIwMTIyWhcNMjYwOTI0MTIwMTIyWjAzMTEwLwYDVQQD
EygzMTRiYzUxNzUzMjdkMDY0MzQ4ZjM1NTgzNzM3ZmRlYTc3MWRjZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+w79IngCBohwPOWiqDj1lXWtAXt
FK7WlkvU2L+mVvHZ9kFsDFZib2zOc9IS6s835e3FL8PYCmQ+L0v3bK3i+LArsRi5
nN31f8nfhEJmoOZkEu/HubEtEXv9HI5XUyB3N5aa/Otm7b6YDUb1p27Uy16EqrLJ
uawocQytfu3ipeViSBat/jTzeApptfqw1ntTCVWoglzEHLH/bjSL7csCBdabiNOP
hwv7fDkllfBE7h1l3Ad1UfOI9OuL74814CYE083Xuihlm3+ITDEVrcq0IU2IBCOp
HOjiIWkrU5wgmcneiNatj1HGIbJcVx4ATZW4MM50lqKyHeQkLM5jFGh9hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFLxRdTJ9BkNI81WDc3/ep3Hc1GMB8GA1UdIwQY
MBaAFAsgSfbKfP2trzyzxx5IsIPfC3P+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lCSjlzcDhfYTJ2UExQSEhraXdnOThMY180LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81ZmExOWQtZGNkNS00MjE0LWIxNDgt
YzliNjI1OWRmY2VhLzEvQ3lCSjlzcDhfYTJ2UExQSEhraXdnOThMY180Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81ZmExOWQtZGNkNS00MjE0LWIxNDgtYzliNjI1OWRmY2Vh
LzEvQ3lCSjlzcDhfYTJ2UExQSEhraXdnOThMY180LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxgKuXBE
1mf003EyVixUpZhDDwmXZKTFl7nPnaIyhGHSZV6XbUpT2NX0upLISqhZ9N7/gzfo
ZDETYfc1/HssbqshansxWdnfBYq2BZLOGCdgyPYuHLq9chruOKB6HPl3Dm2sRGO+
H4EPyaruwZLxD+0ljtQu+feFdVQQlUuEO7E3LGXPA1ypHUujQOFvyJBd6mffXQtU
qETayxF5S2NeSYY/EGk61qjMsvaoTFq/UmWAb6SOHMrRDktwKU0aSvy1UaUbTIMU
9yG8pgysCfVk1tG9F0pxhYTRfGhHxisTdHY5YKF4PHwDD2glTeJ7evsdH0kJJJpd
BeOzVKBjycxUtQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:53:35 2026 by rpki-client