Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
File: CYZDIBoqokoLh3o638p6iSBH2_w.mft (raw, json)
Hash identifier: YjzMUNR+83ZComkyO/LgxH7WT3t3AmG2zj/nfRaAT58=
Subject key identifier: F2:2D:B3:E3:C4:BA:9C:75:D6:D8:1E:A4:71:D9:AB:B8:57:8B:A1:43
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 01A13E26B2515E723F163CA09E3719632B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
Manifest number: 16BE
Signing time: Thu 15 Oct 2026 06:01:25 +0000
Manifest this update: Thu 15 Oct 2026 06:01:25 +0000
Manifest next update: Fri 16 Oct 2026 06:01:25 +0000
Files and hashes: 1: CYZDIBoqokoLh3o638p6iSBH2_w.crl (hash: qNnGsfroH/ql/9KCZZpk1yPdi3gU8XssLLSuf4Cr8Cw=)
2: WIUAFonkV2sfv2obw7wp_H-MGvU.roa (hash: GtKF8czJWl3ExfCMW9FZWgpdCqhRe9QAiKNJnvpNNSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:b2:51:5e:72:3f:16:3c:a0:9e:37:19:63:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Oct 15 06:01:25 2026 GMT
Not After : Oct 16 06:01:25 2026 GMT
Subject: CN=f22db3e3c4ba9c75d6d81ea471d9abb8578ba143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:43:83:13:2d:8f:6a:f7:1b:41:c6:9b:84:
79:f6:8a:27:d0:ef:fb:db:16:a2:51:34:d5:38:be:
c0:55:d4:71:96:7b:b4:71:c2:c7:9f:da:31:dc:5f:
a5:58:e2:78:8e:e7:86:26:8c:e4:c3:db:3f:c0:90:
59:f5:6a:f9:bc:41:84:0e:8b:a2:f9:ad:cf:e0:3d:
81:7d:bf:32:8b:aa:29:8d:13:fc:4d:6a:99:09:d8:
b3:f8:f9:a5:04:10:3e:ee:22:fe:18:f5:d9:fb:b8:
aa:db:08:33:64:51:75:d3:cb:18:d8:cf:22:20:3d:
2e:fd:38:75:b6:2b:69:1a:9e:60:55:3d:e6:13:90:
65:c0:f7:75:40:da:6a:c8:0a:dc:96:e4:37:5d:55:
38:3c:21:2a:b6:96:bd:13:34:7b:08:e8:3d:64:fc:
0d:5e:5d:eb:3f:38:7e:a5:de:11:9e:22:59:87:a7:
c9:f3:ca:ea:a6:d2:0c:ac:81:ce:41:51:b1:ec:5d:
02:ce:b6:52:a9:ca:32:2a:ed:10:ab:9f:f9:68:a6:
8b:10:7c:0c:2b:32:8f:c6:57:2e:66:23:d6:29:4c:
76:f9:37:92:41:34:5d:78:55:6b:4d:10:dd:c5:24:
6a:37:14:09:11:6f:7d:b0:e0:13:20:d7:32:90:b0:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:B3:E3:C4:BA:9C:75:D6:D8:1E:A4:71:D9:AB:B8:57:8B:A1:43
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:95:f6:b1:d2:62:f8:29:12:ab:f8:53:92:2d:19:f5:e3:13:
8f:9f:61:c0:72:36:7a:7c:b6:50:e1:a2:7b:a7:12:41:da:8a:
94:03:bb:e9:3a:2a:ae:bb:35:9d:ad:39:ea:04:4f:f1:49:33:
6f:4a:e9:07:2a:95:60:3d:e4:33:28:08:46:e5:e1:0f:df:b2:
d0:6a:74:38:c7:c0:6d:b7:8e:24:80:b0:08:17:25:d0:de:b9:
c2:17:1f:bf:ab:b1:62:dd:42:1f:46:ab:74:90:63:37:59:65:
82:f7:b4:0f:62:db:2c:17:ca:69:1d:70:9f:b6:d9:94:90:97:
34:9b:51:14:07:0a:47:a8:ee:c7:53:c6:a8:89:40:55:b1:f4:
79:b7:67:d5:e9:e5:d9:bd:c3:74:f6:7c:90:c0:c6:25:e6:80:
57:ba:7d:cf:b6:10:04:06:87:cf:1d:e9:b5:be:ab:2d:00:10:
a6:4f:9c:72:65:49:3d:15:99:bd:54:4f:34:64:2b:b2:f8:ea:
46:46:07:b2:59:5f:76:d9:b8:a0:93:ca:ff:b3:1c:0e:4f:f7:
92:e2:37:18:f7:45:b5:1f:51:b6:9c:39:82:34:d9:71:93:52:
a3:45:37:36:23:d7:d4:86:1d:97:2c:19:cb:81:33:51:cf:00:
ab:0d:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:15 2026 by rpki-client