Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: lCsWCwMiPLP1LEy87U3OEwoAinJc/qs5yiZ2CK6uI0Y=
Subject key identifier: BD:7A:CC:A0:37:72:81:FC:6F:60:F6:4E:EB:90:85:B6:9A:72:9D:89
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 01A13E26F16F11D706792C16F089CD67B031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 1318
Signing time: Thu 15 Oct 2026 06:01:41 +0000
Manifest this update: Thu 15 Oct 2026 06:01:41 +0000
Manifest next update: Fri 16 Oct 2026 06:01:41 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: POBVmdx+GSfjkfztyIA8TsKJ/q90i5bmMZP1LboTxjk=)
2: VfT1jovZQbB_GOxrewqAg31IJD4.roa (hash: rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:f1:6f:11:d7:06:79:2c:16:f0:89:cd:67:b0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Oct 15 06:01:41 2026 GMT
Not After : Oct 16 06:01:41 2026 GMT
Subject: CN=bd7acca0377281fc6f60f64eeb9085b69a729d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:6f:b9:60:89:64:a2:ef:48:ad:d7:71:ea:
1f:1f:2e:21:63:f3:f7:a6:59:51:f8:64:a7:60:4c:
95:38:48:87:a9:ed:7f:a1:dd:1a:74:d8:77:ef:2b:
29:31:af:7e:4a:4e:93:7a:d2:90:1f:39:aa:98:c7:
21:73:09:c0:83:2f:46:d7:ff:6e:9a:3d:d7:b8:fb:
0d:df:cd:2f:5f:bb:bb:e1:53:9e:0c:eb:1d:92:51:
e4:d6:34:49:e4:39:36:ee:ab:57:b3:3b:4d:f2:c3:
6e:61:7e:84:0a:a7:a8:64:d5:05:29:5f:ff:74:16:
b9:cc:7e:4e:a1:ae:83:41:6a:55:ad:f1:5f:64:87:
a0:95:b3:c2:78:5c:e1:d9:9e:40:e6:4c:db:c5:b2:
ad:23:c8:8d:71:46:fa:40:81:50:8f:d9:5c:e1:a4:
fd:67:bf:45:39:24:a7:d4:5e:c1:88:9f:cf:cf:73:
10:51:bf:c1:92:f1:fc:30:dd:e3:44:9b:9a:a4:38:
e1:ed:1e:c5:56:d5:7c:a8:c3:c3:d7:ff:36:9b:b5:
5b:7e:fc:d9:80:29:be:48:bb:c7:17:f0:a1:cc:59:
ac:41:0c:d7:41:e0:2a:7d:b5:07:af:3b:f6:d3:9b:
56:f3:74:b5:ef:1f:6e:c2:46:31:21:4e:e9:f5:64:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:CC:A0:37:72:81:FC:6F:60:F6:4E:EB:90:85:B6:9A:72:9D:89
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:e7:55:1a:eb:56:b7:68:b1:0a:04:d1:c7:48:dd:de:68:
42:c4:8b:21:dc:1f:91:1f:1c:65:cd:58:21:7d:11:62:b8:04:
01:ae:7d:18:fc:6d:fd:fd:26:1a:4b:d6:f0:20:70:24:ec:dc:
e0:9f:a5:38:81:3a:9f:ac:5b:7c:78:07:e1:71:83:47:97:9a:
92:c5:47:e9:04:76:e5:4f:85:56:cc:b4:81:9f:66:d8:45:dc:
8a:c6:2d:ac:5d:d1:d0:93:3e:9c:9b:93:ab:5c:b5:df:2c:a1:
47:79:1b:bf:95:11:48:d4:e5:bf:b7:0c:5b:23:f9:58:1c:d7:
9d:73:18:fa:10:19:89:1b:91:d2:72:c6:8e:da:16:0f:c2:95:
32:3e:6b:4d:af:ca:34:05:e2:cf:79:56:5c:18:0b:27:54:ce:
b7:da:d9:05:90:76:30:4e:68:94:55:59:e0:7e:d6:91:e1:f0:
34:94:8e:3e:ca:0f:c8:a4:1a:a0:51:fc:48:2a:ff:a4:14:ef:
9b:fc:c9:95:39:b9:55:06:9a:88:e9:75:46:8e:14:29:b2:e8:
8c:85:9d:75:14:ac:5f:0a:07:2b:aa:8f:f1:31:8b:4c:ca:fe:
96:d5:04:8a:dd:8b:56:3b:5e:fb:59:d4:ed:7e:a4:0f:ee:e9:
0f:41:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:47 2026 by rpki-client