Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
File: cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json)
Hash identifier: RJmdfYKHi8Rw+ur+ShKmM53xRtDhelYEJKF7GErlOAg=
Subject key identifier: 21:36:F2:63:BB:E5:73:2D:6B:A4:61:B7:81:1F:7E:6C:1F:7E:A4:38
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Certificate issuer: /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial: 019EB62036BD6D96E66BBB2FA8C49E57D901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
Manifest number: 0D95
Signing time: Thu 11 Jun 2026 10:00:24 +0000
Manifest this update: Thu 11 Jun 2026 10:00:24 +0000
Manifest next update: Fri 12 Jun 2026 10:00:24 +0000
Files and hashes: 1: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: CdubVviOTFUgTx9WV/D6Zgkpiy9XcVLZt2/7SoCjcBw=)
2: paBTm9XJ_5OjOsmofXolfSOu8tI.roa (hash: 0BVMqZx9bh/K7mlP8B+uwanGbjjmcCmxI2TQpqnc/3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:36:bd:6d:96:e6:6b:bb:2f:a8:c4:9e:57:d9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
Validity
Not Before: Jun 11 10:00:24 2026 GMT
Not After : Jun 12 10:00:24 2026 GMT
Subject: CN=2136f263bbe5732d6ba461b7811f7e6c1f7ea438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:c9:7e:4b:db:42:40:cc:79:f5:3a:66:74:
93:ba:a2:6c:cd:ab:58:bb:52:40:18:5c:59:cf:16:
d3:0b:97:6e:54:0a:b8:be:16:d6:a3:91:93:18:9e:
bd:bc:f3:0d:36:88:c2:42:0d:91:2c:84:05:22:76:
68:ac:9a:22:64:e8:88:33:20:fc:a9:eb:d1:b9:91:
0d:ad:00:8d:b6:cc:b4:83:31:62:f0:ae:87:23:42:
51:50:89:73:5f:9f:6a:b4:74:bf:6c:09:1b:8e:a4:
7e:5a:f7:03:d8:31:31:22:a8:ff:6f:ce:26:fc:fa:
65:0a:85:6b:54:0c:52:32:bb:14:1c:27:4d:60:71:
45:f8:92:0d:56:63:b1:02:dc:a8:c7:04:51:a7:eb:
51:6c:58:ec:c0:98:53:38:90:da:2e:bb:14:b7:5f:
28:6e:a4:f7:25:97:50:74:1c:c3:5f:06:e0:5c:61:
13:07:98:2d:ab:61:9e:a1:b2:2d:48:90:e3:6b:3f:
b6:54:91:98:2a:ce:69:1f:35:ae:2f:ee:76:f7:a8:
a0:1f:bc:44:76:1c:13:1d:9c:f5:85:35:87:07:fe:
3b:6a:a9:3e:af:34:63:d9:bf:e5:ed:b7:14:8e:70:
74:a9:a9:17:8f:99:eb:dc:70:a0:8e:b9:85:04:34:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:F2:63:BB:E5:73:2D:6B:A4:61:B7:81:1F:7E:6C:1F:7E:A4:38
X509v3 Authority Key Identifier:
keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:63:29:84:59:48:e3:04:7e:15:9e:56:2e:7e:6a:83:41:6a:
1d:7d:19:48:03:6c:d1:4a:5f:3a:51:0f:24:89:d9:dd:cc:59:
18:23:65:09:8a:70:98:c5:fe:82:c7:97:03:97:b4:14:6f:07:
5e:a0:14:13:96:51:6c:b1:0e:4e:01:ea:a5:7a:11:7c:44:b4:
7c:33:f4:3e:e8:65:b0:e5:87:7f:26:20:7f:ae:a7:eb:3b:a0:
3c:04:fd:0a:7a:ad:61:49:a8:fb:b4:65:42:d2:28:b4:0b:63:
7a:4a:fe:63:6d:02:b4:96:cb:c2:b6:e7:0b:72:72:db:33:54:
46:6e:8f:27:56:56:2f:3c:3d:3e:36:c6:d1:c6:6d:3a:7f:9c:
a2:e1:b6:2f:bf:17:c1:26:15:74:d7:8b:d6:53:09:1b:b9:41:
78:95:3e:40:4d:51:02:a5:18:40:b1:9f:5c:73:bc:b8:4c:ae:
dc:87:51:7f:6e:d6:59:ae:eb:a9:f7:dc:f3:a1:2d:e0:8e:d2:
21:9c:4c:ce:b6:15:81:c4:97:11:a8:94:30:cb:49:76:18:03:
a6:3f:0c:28:f7:ed:94:0b:b0:8d:fc:5c:2d:42:ee:40:ac:96:
4f:2c:32:c0:19:ac:fd:0f:31:75:58:e4:74:db:1e:6d:cd:42:
d0:b4:da:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62IDa9bZbma7svqMSeV9kBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMjk0NGE4NTM4MzU1YjJhZWM3NjY0NWZkOTQ5NDQ4OGFl
NzAyZTcwHhcNMjYwNjExMTAwMDI0WhcNMjYwNjEyMTAwMDI0WjAzMTEwLwYDVQQD
EygyMTM2ZjI2M2JiZTU3MzJkNmJhNDYxYjc4MTFmN2U2YzFmN2VhNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW3JfkvbQkDMefU6ZnSTuqJszatY
u1JAGFxZzxbTC5duVAq4vhbWo5GTGJ69vPMNNojCQg2RLIQFInZorJoiZOiIMyD8
qevRuZENrQCNtsy0gzFi8K6HI0JRUIlzX59qtHS/bAkbjqR+WvcD2DExIqj/b84m
/PplCoVrVAxSMrsUHCdNYHFF+JINVmOxAtyoxwRRp+tRbFjswJhTOJDaLrsUt18o
bqT3JZdQdBzDXwbgXGETB5gtq2GeobItSJDjaz+2VJGYKs5pHzWuL+5296igH7xE
dhwTHZz1hTWHB/47aqk+rzRj2b/l7bcUjnB0qakXj5nr3HCgjrmFBDQKDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE28mO75XMta6Rht4EffmwffqQ4MB8GA1UdIwQY
MBaAFHMpRKhTg1WyrsdmRf2UlEiK5wLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMt
YzJjZjQ1M2MzZTJlLzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMtYzJjZjQ1M2MzZTJl
LzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2MphFlI
4wR+FZ5WLn5qg0FqHX0ZSANs0UpfOlEPJInZ3cxZGCNlCYpwmMX+gseXA5e0FG8H
XqAUE5ZRbLEOTgHqpXoRfES0fDP0PuhlsOWHfyYgf66n6zugPAT9CnqtYUmo+7Rl
QtIotAtjekr+Y20CtJbLwrbnC3Jy2zNURm6PJ1ZWLzw9PjbG0cZtOn+couG2L78X
wSYVdNeL1lMJG7lBeJU+QE1RAqUYQLGfXHO8uEyu3IdRf27WWa7rqffc86Et4I7S
IZxMzrYVgcSXEaiUMMtJdhgDpj8MKPftlAuwjfxcLULuQKyWTywywBms/Q8xdVjk
dNsebc1C0LTasQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:59:16 2026 by rpki-client