Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
File: CYZDIBoqokoLh3o638p6iSBH2_w.mft (raw, json)
Hash identifier: COFsope36p3ZyzutOPXV8ZV8SdSvlTE6d6WXUUQp89w=
Subject key identifier: 71:9B:22:87:77:A0:48:2C:74:5D:0E:5A:0A:B1:E0:B1:E5:50:FE:FD
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 01A0016F49A3D9BBE7AF9739F1A38E9B819C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
Manifest number: 161A
Signing time: Fri 14 Aug 2026 18:01:05 +0000
Manifest this update: Fri 14 Aug 2026 18:01:05 +0000
Manifest next update: Sat 15 Aug 2026 18:01:05 +0000
Files and hashes: 1: CYZDIBoqokoLh3o638p6iSBH2_w.crl (hash: AHCsFpUaIhc70n4Pbc3BvwRH6bHRm1iu/WQtrqQ+wBo=)
2: WIUAFonkV2sfv2obw7wp_H-MGvU.roa (hash: GtKF8czJWl3ExfCMW9FZWgpdCqhRe9QAiKNJnvpNNSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:49:a3:d9:bb:e7:af:97:39:f1:a3:8e:9b:81:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Aug 14 18:01:05 2026 GMT
Not After : Aug 15 18:01:05 2026 GMT
Subject: CN=719b228777a0482c745d0e5a0ab1e0b1e550fefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:7c:39:63:42:54:21:5f:47:9c:45:a9:0b:
37:93:cd:06:46:89:c0:ad:dd:b3:5e:cc:96:22:4e:
f8:f1:80:c5:b2:03:05:66:01:6e:f6:99:34:fc:f6:
9a:9d:40:38:5e:1d:1b:26:a7:09:d8:76:fd:e8:1e:
b9:81:e8:98:ad:03:98:f5:e3:9d:70:07:4b:2b:2d:
a1:26:5d:1b:72:e8:9a:62:26:fe:0a:24:16:3f:78:
72:aa:ac:cf:e5:57:e4:22:7a:0f:d1:c5:2a:c6:b3:
ca:ac:11:01:9a:9d:77:ef:e2:87:1e:2b:b9:17:e2:
dc:1b:7d:e8:41:dd:5d:b9:71:dd:b8:de:c6:af:c7:
e7:8a:0c:72:fc:6b:ee:85:50:17:59:32:fc:68:a4:
75:67:0a:bd:63:c0:79:14:50:e4:ba:5f:8b:33:70:
6b:75:da:17:5f:f2:df:6c:1a:23:88:45:9f:85:d0:
74:fa:03:d3:e4:23:48:df:d6:45:3c:4d:05:b6:68:
d1:2d:04:f1:4c:67:a9:76:bd:7e:f9:97:64:45:e3:
9e:dd:f1:bc:88:34:72:12:40:53:c3:9b:93:64:e5:
41:88:fe:1c:30:cd:a8:6c:bb:85:7a:cd:c7:4e:ce:
eb:ee:8f:eb:ca:6c:9f:ce:f5:9d:7f:24:4b:1f:40:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9B:22:87:77:A0:48:2C:74:5D:0E:5A:0A:B1:E0:B1:E5:50:FE:FD
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8f:35:05:28:04:d3:35:bc:14:a8:e6:34:34:fc:a8:0f:d0:
db:07:cc:ce:c3:16:df:1f:56:10:4f:cb:4b:55:29:66:21:20:
ef:31:e9:56:4b:2b:f4:26:8c:17:c2:ab:4c:39:6a:13:c8:81:
c1:c0:51:09:a5:82:85:77:f2:e4:c4:6f:d6:85:03:64:b6:f2:
dc:d0:f7:a4:cc:6e:79:f7:06:8d:00:2a:83:ca:aa:29:dc:24:
c2:ee:cd:94:10:e6:3d:51:bb:08:1c:18:a3:48:37:08:c7:50:
17:59:56:cb:84:ff:7a:dd:4b:bf:30:88:37:fb:28:75:d9:ff:
94:6f:36:42:1f:7a:68:19:d1:71:34:50:e6:61:04:c6:2e:21:
0b:a6:71:f4:a3:da:e0:36:b7:ce:9f:e3:ea:11:34:85:24:21:
2d:65:01:8f:9f:b9:b2:fe:54:d5:54:60:8d:6c:14:34:2c:ed:
d7:5a:64:d8:88:f5:f9:91:66:8b:df:d6:58:1e:8f:68:59:f1:
4c:a1:2a:cf:c6:05:48:b7:eb:4e:e7:38:0b:9a:53:9b:b7:63:
cd:2b:2b:c3:74:2f:71:01:c8:d4:ed:7d:90:bb:9d:26:b8:9c:
3b:01:2f:dc:54:7e:67:c0:ed:43:6d:75:11:9c:1f:b8:e2:7b:
38:59:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:07:24 2026 by rpki-client