Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: qv7sj0rEIRYeHQylPQRX5aUYhpRp2W2OWqmMWOgPX1I=
Subject key identifier: 1E:BF:B6:75:61:56:F7:66:7C:5E:FF:6A:4B:18:33:B9:57:AA:BC:3A
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 01A1DE715FA8B60DB0B7623C98AA7418B219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 09:02:14 +0000
Manifest this update: Sun 15 Nov 2026 09:02:14 +0000
Manifest next update: Mon 16 Nov 2026 09:02:14 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: xCiyny8l+vesgfW/EwLvn8ehTW8YinvtD6wqQSI9ifc=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:5f:a8:b6:0d:b0:b7:62:3c:98:aa:74:18:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Nov 15 09:02:14 2026 GMT
Not After : Nov 16 09:02:14 2026 GMT
Subject: CN=1ebfb6756156f7667c5eff6a4b1833b957aabc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:48:59:42:7b:eb:4a:c8:2c:73:c2:30:eb:
16:2e:40:d5:5d:23:96:14:8e:f1:ad:6f:22:5e:57:
04:f7:23:8d:78:4c:45:67:20:06:96:27:12:37:28:
a5:1d:3d:80:51:cb:b3:df:48:67:16:6e:b1:6d:e2:
87:77:14:89:84:eb:1a:dd:20:0d:c5:20:81:6c:14:
1e:ec:a2:1c:65:57:ab:65:92:60:32:1f:82:4f:92:
3b:b3:f7:1f:fb:30:4f:4f:8e:fe:e6:1e:9f:47:15:
44:4f:ad:0f:be:19:29:06:8f:5a:08:21:90:c5:f4:
31:86:b6:b1:bd:11:5f:ee:5a:86:33:31:9d:7b:95:
c0:72:8e:50:1d:10:60:51:57:9a:1b:40:d6:a6:0c:
22:b9:99:5a:19:6e:fb:15:78:44:43:4b:c6:f1:aa:
f3:d4:9a:5d:a1:4b:e5:67:94:0e:dc:87:a9:15:2d:
78:5c:b0:10:31:ef:b9:1f:79:79:f0:72:eb:cb:1b:
00:ef:d5:3b:ff:47:91:64:fb:a4:82:33:bd:3e:d3:
3e:8e:35:e2:72:2e:33:2f:2f:34:87:c2:5e:93:16:
46:86:d1:94:c1:fa:d6:8d:83:f5:7f:6c:11:f4:b2:
37:72:bb:03:73:87:47:7b:37:f3:ae:50:36:b5:3b:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BF:B6:75:61:56:F7:66:7C:5E:FF:6A:4B:18:33:B9:57:AA:BC:3A
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:e7:81:1a:af:81:92:4a:04:e9:e7:63:49:c6:89:a2:17:69:
33:1d:00:69:bd:e3:37:3e:85:2c:d0:7e:7a:fc:b2:e0:13:b8:
92:2c:7d:8d:03:a3:77:8c:c4:1b:e6:f2:66:50:dc:ed:23:ef:
eb:f3:d0:99:f4:b0:89:90:66:b6:63:bb:3f:8f:40:ef:c0:9a:
e3:d9:21:f8:08:e1:74:c8:f8:9b:29:4c:39:e7:bf:c8:df:28:
66:7b:c0:e3:79:59:a5:7a:a5:3b:b3:85:0d:ac:3d:1e:b6:ff:
b9:c6:76:ef:d8:c9:ef:76:72:6f:37:d1:cc:c0:16:b8:c2:43:
fb:9c:3f:c8:ce:82:ad:f4:a5:73:36:7a:e8:b1:cf:9a:58:a3:
af:b4:53:55:51:b2:4a:53:5c:57:ea:3f:ec:10:2c:79:37:d9:
b7:fd:fe:f7:fc:da:d3:89:f6:3c:50:a2:7a:e9:7f:b0:d2:0a:
01:b0:47:2e:78:9d:8a:0f:0a:99:a3:61:d5:c3:c4:83:dd:60:
40:45:8c:5f:03:d6:5c:ee:37:43:74:9a:fc:9c:0f:fb:da:f8:
52:0d:56:1a:3d:3c:8e:6f:ad:9f:a5:af:d0:b2:20:a8:80:c6:
63:e0:ca:56:32:87:d4:b7:f9:53:2b:28:a8:9a:2b:38:86:43:
b0:88:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:12:34 2026 by rpki-client