Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: kTl1TL7nSCg1y+s7Q+qnmrUAKdL0jx9VY3rizIGaPVA=
Subject key identifier: 64:FB:26:4F:CF:FD:BF:CD:1C:E8:FF:B3:BD:E5:8A:2C:18:CB:C3:3A
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 019D2772D790CF59ED631E0B9032F8DDEE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: TOJTvQ0zodzXYYjaeBb4ypLEpBGvIpR2NGK3a3elH1w=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d7:90:cf:59:ed:63:1e:0b:90:32:f8:dd:ee:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=64fb264fcffdbfcd1ce8ffb3bde58a2c18cbc33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:b7:c8:59:04:24:a3:5a:6d:f4:87:7e:3b:
77:f5:54:2e:9f:dd:69:f4:b5:b4:d1:a1:99:59:d5:
ca:59:76:26:57:28:a5:84:46:50:cf:cc:1d:2f:95:
d8:e3:4f:dc:e3:21:17:31:97:83:99:3a:3e:76:64:
64:c6:f8:a1:cf:fe:42:46:29:18:ac:e5:ce:c7:7a:
90:81:31:a4:7e:4d:fd:10:02:54:e3:d5:22:36:b4:
d0:4f:33:c5:44:92:29:7d:69:74:49:0d:b1:4e:ef:
ed:e8:10:00:8e:06:3e:75:9d:5e:d0:37:0b:09:c7:
20:64:76:af:e4:f3:ee:35:1d:0a:cd:ff:4c:e3:81:
79:5c:5e:0e:78:14:ae:69:3d:a6:24:e9:59:94:d3:
8a:4f:e3:3f:a9:38:7d:41:df:af:69:67:c5:c2:fb:
42:bf:f6:bd:5c:19:89:c9:3a:37:96:4d:43:94:c8:
e7:c5:f9:76:d1:30:10:f9:35:e8:9b:70:f5:9d:5e:
b0:be:b6:cc:17:79:cd:0c:00:04:c4:47:d0:11:1d:
52:d2:c8:f9:6b:0d:13:c0:ef:44:f2:f2:70:e9:40:
aa:7a:db:ca:37:0d:f6:47:44:d0:8f:83:3e:58:44:
4f:92:fd:e6:6d:a5:61:a8:82:3f:45:68:43:3b:3b:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FB:26:4F:CF:FD:BF:CD:1C:E8:FF:B3:BD:E5:8A:2C:18:CB:C3:3A
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:86:96:ad:46:fb:5a:5e:a7:55:26:97:e7:2d:02:90:cf:38:
80:62:34:d4:f6:39:6e:87:a6:1e:68:0e:ea:1e:fb:a2:ba:de:
79:bb:76:b0:f6:0a:69:e3:ef:d6:3c:9b:b5:cf:3b:fb:fa:b8:
95:9c:11:a7:f9:60:dc:68:87:ad:50:28:1a:5e:c8:6b:96:3d:
25:e2:28:45:d4:f7:42:69:51:13:c4:75:bc:e8:2f:50:57:fb:
e5:3c:1e:6a:f3:ff:94:d9:0d:6d:aa:89:79:a0:f4:88:6a:87:
73:95:3d:1a:fc:3d:a8:a2:b0:87:6a:54:53:55:f7:2e:24:84:
34:96:c1:f8:b8:d5:2e:e8:56:17:6b:2f:57:f4:52:ec:81:fd:
63:bc:21:80:33:ce:b8:16:60:b7:ca:ea:26:1e:2e:87:a0:d4:
75:f6:ed:40:a0:bf:15:f4:c7:5d:13:f0:30:de:69:71:d3:b9:
9a:c1:0e:db:c8:7e:3e:01:e5:16:3b:dd:d9:74:27:4a:f9:d3:
03:0b:88:69:95:ac:9b:29:af:c0:2b:1b:33:ba:76:f4:36:42:
da:39:0a:27:3e:ff:55:9a:6a:d3:f9:3e:6f:85:cc:5f:cc:1a:
e0:79:7a:77:ab:71:95:6a:de:f3:4e:ea:89:3c:4c:5f:90:1a:
26:8b:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:27 2026 by rpki-client