Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: gBwUj5BhXznSHBNonTlOi464s1VAyqigQNQIQGSx6ts=
Subject key identifier: B8:1D:7D:2E:ED:2C:16:6C:31:1B:50:FE:48:0B:9A:CB:CC:2D:E9:41
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 01A0D2005E086E669BB72F2D6FFCAF60EFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 06:00:34 +0000
Manifest this update: Thu 24 Sep 2026 06:00:34 +0000
Manifest next update: Fri 25 Sep 2026 06:00:34 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: Cp5uCosfyySKDLy1+vWZMBb4rZb89scIllugS+YIsfE=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:5e:08:6e:66:9b:b7:2f:2d:6f:fc:af:60:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Sep 24 06:00:34 2026 GMT
Not After : Sep 25 06:00:34 2026 GMT
Subject: CN=b81d7d2eed2c166c311b50fe480b9acbcc2de941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:13:24:a7:68:bf:d8:7e:cf:1a:5f:20:46:
08:7b:bd:e0:92:d7:b7:59:c7:9b:31:60:b2:5a:46:
3c:9f:8b:c2:aa:fd:57:30:94:7c:fa:f1:18:93:fc:
63:bf:a3:0d:94:98:27:ec:af:b0:a1:7f:f1:fb:04:
fd:db:d0:bf:fc:56:f0:21:99:a4:b6:29:84:c0:3c:
74:a1:11:27:99:3b:55:43:27:20:0e:b5:d2:1d:33:
f0:a6:51:08:2b:d8:4f:d3:8e:1f:0f:65:ca:f6:21:
6d:ad:10:70:6d:75:36:ad:fb:34:42:d7:27:e7:de:
63:67:17:e5:b0:3a:60:5e:aa:e3:2e:47:6c:99:55:
10:91:64:c6:7f:75:53:47:84:57:59:9c:ff:8d:0a:
0d:c0:9a:14:97:37:6a:f3:93:ae:5a:39:2a:c6:43:
2d:89:ea:02:3d:fe:28:48:73:91:90:88:42:d7:3c:
5e:a9:20:09:9e:c7:9e:a8:78:c0:a3:7a:57:09:13:
38:65:c1:c5:7c:e0:b6:59:4d:e6:06:32:68:7c:ed:
ea:ea:44:e2:e4:c0:d7:f3:43:bb:b7:19:cf:10:c9:
6e:f7:6e:d8:77:f9:f6:6a:17:28:42:48:aa:e8:f9:
ca:05:eb:71:9d:00:5f:12:b3:37:3d:34:86:c3:54:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1D:7D:2E:ED:2C:16:6C:31:1B:50:FE:48:0B:9A:CB:CC:2D:E9:41
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:6b:b0:6b:aa:6c:cb:18:b0:c2:c3:aa:1e:74:74:95:b9:
79:e3:75:51:54:d4:2a:f2:3d:20:53:fb:fb:f5:28:92:6e:bd:
d5:0c:c1:2b:e6:4b:2b:19:92:8f:0f:86:fb:0b:11:0c:b6:6c:
0b:20:5e:fe:0f:2d:df:79:69:ff:7f:81:e5:d1:3c:ff:6d:bd:
97:e2:41:42:98:16:f4:16:2d:cd:da:ab:cf:50:8d:ff:2c:29:
75:b3:f3:d8:31:3f:f8:13:87:28:a8:bc:7a:eb:64:22:6f:05:
6d:c0:b5:fa:cb:0a:c6:46:ed:5e:1a:0a:45:18:65:fa:57:fd:
be:69:82:1a:0b:c7:e4:76:f0:87:59:10:45:f3:85:3d:1a:6a:
b8:5c:11:67:80:4c:d4:5c:d9:c5:f0:aa:e4:d0:82:72:24:94:
bc:53:8b:61:cf:f1:1e:1b:c0:49:6b:e9:c3:d9:9a:d7:63:5f:
d9:a6:17:13:62:e7:90:3b:7f:b4:64:bb:5d:3a:7c:f0:a9:e7:
43:7d:c7:03:a4:dc:96:19:4e:23:86:28:1a:0b:67:b0:a8:06:
64:52:01:da:71:c8:2a:d8:44:43:2b:29:14:0a:bc:c5:de:09:
29:75:09:2e:42:0f:aa:f9:3f:62:41:77:0f:73:e0:98:c9:f8:
0b:8c:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:53:54 2026 by rpki-client