Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: TLsOB/mer97Rl/XPm2pHe7EEWRjtmK5C/GyvdG5b1+4=
Subject key identifier: DF:C7:0A:AB:CC:6A:16:43:A7:84:7C:A0:FC:3B:19:BA:40:C3:AA:F8
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 019CB8EF936E5C0D72C09C9680433F053F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 184E
Signing time: Wed 04 Mar 2026 13:00:34 +0000
Manifest this update: Wed 04 Mar 2026 13:00:34 +0000
Manifest next update: Thu 05 Mar 2026 13:00:34 +0000
Files and hashes: 1: 9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa (hash: cZRk0f4ULOIcvr4Kq3jJj23UFievd5ZXiHt0/5E2LwY=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: Wkw3ZoTBhsWRo3Pc22ncl21xL4LO5592veDTW1GKoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:ef:93:6e:5c:0d:72:c0:9c:96:80:43:3f:05:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Mar 4 13:00:34 2026 GMT
Not After : Mar 5 13:00:34 2026 GMT
Subject: CN=dfc70aabcc6a1643a7847ca0fc3b19ba40c3aaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:05:0f:65:88:7f:e3:c6:25:4b:f8:68:71:
6d:0a:19:61:f2:19:6d:5e:b1:f8:dc:63:d8:3c:d2:
3e:70:fc:9b:32:cf:46:4b:2e:cd:f3:4b:62:34:82:
d0:2b:c3:b6:d9:cc:2c:44:d3:c0:06:85:aa:15:ed:
01:94:ee:24:c2:fc:3b:b3:20:f1:68:4d:dd:dc:1b:
ae:e6:bb:38:a8:97:f9:71:d3:b2:7b:8e:30:15:df:
30:b3:df:1b:69:67:b4:2e:e6:1c:ef:5e:40:0f:12:
15:ce:d1:10:68:51:8f:91:4c:1a:81:94:b0:50:b1:
e9:08:f9:a9:7c:66:7e:a7:03:19:21:f7:38:b0:68:
eb:58:77:e3:91:4f:3d:5f:e0:29:1e:70:9e:6c:46:
89:78:1a:ac:b2:6b:b2:20:e4:86:48:62:d0:fc:2b:
b6:ca:cf:f2:3d:ec:58:05:0e:47:76:9f:63:61:6f:
7b:82:2d:0a:b6:0d:fd:da:09:74:7d:ae:ee:03:7e:
a6:cf:55:2f:dc:c1:c4:99:30:f0:72:69:2a:fb:45:
87:fb:01:bb:44:1e:c8:93:9d:f2:70:94:e2:47:74:
84:e5:66:40:39:e5:02:ee:47:b4:e1:d0:76:43:39:
b7:1f:20:dd:cd:8d:84:b5:91:b7:bd:1c:bc:c9:6e:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:0A:AB:CC:6A:16:43:A7:84:7C:A0:FC:3B:19:BA:40:C3:AA:F8
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1f:8b:29:df:88:53:ce:2d:f0:32:6d:c6:33:cb:c5:28:e2:
e8:50:2f:11:2b:5b:89:9f:4d:a8:75:ef:17:2e:2c:63:94:dd:
b3:ed:3c:76:f9:fa:7b:4a:cc:11:07:49:d6:7f:ff:3b:60:28:
d1:85:7a:e3:25:d6:ee:7b:46:25:27:b8:8b:87:40:b2:de:ba:
f2:a5:aa:5b:86:4b:7c:97:c1:b0:54:db:ad:e8:38:ee:84:ee:
43:a4:6e:81:03:ae:6b:e6:00:d1:8a:53:9f:a8:8e:96:b8:d8:
93:d3:78:41:cc:6f:db:71:b7:04:29:25:5a:77:ef:9f:18:0c:
93:71:73:e1:8b:c4:47:c5:4d:e3:f7:f1:68:27:86:65:16:34:
4e:81:09:72:aa:e0:14:31:ba:94:1d:9f:eb:82:b2:1f:72:46:
a0:d4:eb:4b:7a:4d:8b:b3:c2:4b:08:07:0f:91:d8:31:8d:89:
5b:06:0d:4e:6f:c9:a6:a9:a3:f6:91:78:51:9e:99:e2:89:33:
77:c4:8b:61:81:5e:80:c6:6c:8a:df:1c:60:3e:a9:1e:dd:fb:
67:76:2b:2b:2d:56:25:0c:8e:e6:b9:f2:32:e9:cb:af:57:53:
08:37:5b:f6:17:9f:16:a1:0f:1a:12:11:9f:d8:64:76:46:3f:
95:72:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:49 2026 by rpki-client