Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
File: CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft (raw, json)
Hash identifier: PsRtzKHtWCfMI3xOlotkW7OEPrhbvc78JRkKNpP1tIU=
Subject key identifier: 27:20:9C:D5:35:56:E3:08:85:45:50:2B:61:A6:E9:DC:3D:B3:78:42
Authority key identifier: 09:88:BE:66:C4:34:3E:B8:69:B5:C3:7C:09:EF:D1:64:EE:61:86:C5
Certificate issuer: /CN=0988be66c4343eb869b5c37c09efd164ee6186c5
Certificate serial: 01A0412A3DC8A2BA10B3DB02F1D1FD8BF659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:22 +0000
Manifest this update: Thu 27 Aug 2026 03:01:22 +0000
Manifest next update: Fri 28 Aug 2026 03:01:22 +0000
Files and hashes: 1: CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl (hash: BW0Wzn/1Mup0Ch4zHpud0PKeCQI1+7CWq3CbYWBG7hg=)
2: YU7FK8aSQi73yWezYzaHHpAG_WQ.roa (hash: YMu2fRx6OsADjZfJPJh6N1jUJPHhB6brXyLQQ6O0Xco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:3d:c8:a2:ba:10:b3:db:02:f1:d1:fd:8b:f6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0988be66c4343eb869b5c37c09efd164ee6186c5
Validity
Not Before: Aug 27 03:01:22 2026 GMT
Not After : Aug 28 03:01:22 2026 GMT
Subject: CN=27209cd53556e3088545502b61a6e9dc3db37842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:28:88:fa:dc:38:69:b7:55:38:c0:93:94:
95:dd:fc:a5:de:61:0d:76:48:e5:79:97:d4:68:e1:
78:63:5a:1f:51:14:24:b4:10:bb:a2:1b:19:2d:42:
f2:26:39:aa:51:de:d5:8f:17:d7:f7:93:6d:b9:aa:
e2:29:a0:9c:01:a7:f9:f8:5d:0f:ec:74:e9:e1:c8:
c6:3a:40:2a:cb:76:2f:c5:06:f2:3e:3f:70:18:d2:
97:1a:f3:1a:e0:29:94:92:9d:e5:ae:c5:6f:a9:4e:
b0:61:24:0b:29:97:d0:9c:44:69:bc:88:0e:ec:53:
31:40:86:ee:c5:14:67:b6:89:8f:18:b8:a7:a1:81:
de:1d:c2:1b:6b:77:f4:1f:78:88:36:5f:73:a4:6f:
e6:78:31:98:6a:76:3d:da:3e:59:46:2a:92:f3:dc:
89:56:05:0e:16:f2:b7:5b:26:f8:59:a3:7d:3c:7c:
3a:89:81:5b:f6:44:b7:6c:b8:70:1e:2f:7f:df:2f:
30:39:d8:39:5e:1c:53:71:9e:7f:29:25:25:f9:86:
d5:52:da:d9:99:95:44:54:e9:fc:5a:f7:8c:7c:a5:
64:e3:d2:14:f3:7b:48:3a:fc:f7:34:ed:68:c5:88:
33:aa:01:d9:be:81:d2:0a:24:ba:09:ca:21:61:6b:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:9C:D5:35:56:E3:08:85:45:50:2B:61:A6:E9:DC:3D:B3:78:42
X509v3 Authority Key Identifier:
keyid:09:88:BE:66:C4:34:3E:B8:69:B5:C3:7C:09:EF:D1:64:EE:61:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/CYi-ZsQ0PrhptcN8Ce_RZO5hhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:6b:14:3d:ab:7c:82:0d:34:a1:3d:d2:7f:75:19:12:21:
bd:83:6c:88:99:5a:68:5f:a4:4d:42:6a:3c:8c:6a:ea:1d:6d:
32:8f:d5:61:62:78:07:af:62:25:b5:ba:e0:db:0b:6a:2c:6e:
e5:b5:a9:ae:cc:a1:48:6e:50:f2:d8:45:7a:ca:8b:34:a6:1c:
d7:e0:1a:cd:82:66:32:89:6c:5c:db:fa:bb:63:99:63:8f:ac:
01:4c:77:30:c3:e6:42:bb:9b:04:b8:de:63:7a:0b:02:73:03:
ac:93:af:ee:bf:23:31:58:61:fe:4c:ba:39:c9:7b:06:c0:22:
b5:05:17:a0:bb:17:66:b8:0c:bc:14:d3:33:80:96:1d:4c:e6:
20:b0:ca:f3:cc:8e:7c:2b:b0:be:28:41:5c:15:68:c3:34:b6:
0f:21:3a:0d:b3:fa:94:1a:2f:79:f4:e9:9d:49:de:af:64:ad:
24:45:82:b5:2c:3b:61:25:f2:78:10:1c:72:60:06:65:8e:fa:
48:e4:ff:15:7a:74:72:34:61:83:b6:d5:54:48:e5:5f:7c:9b:
86:17:bc:e9:3c:91:f0:a7:c7:5f:36:ec:1e:fe:dc:3f:db:d4:
96:f9:ad:bb:4c:fb:6e:2c:9e:19:81:37:18:f4:b1:4b:00:b7:
a6:ff:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:12 2026 by rpki-client