Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: YIPVph8rjgBEr1YDfSgL9B8wDQgMmKyXmh/MveNIDSk=
Subject key identifier: 7B:F2:56:72:19:83:BA:82:32:F1:6B:6C:AF:F8:30:17:2A:D4:BC:2E
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 019D3865F5E892F90956D15EEDB3F3579956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: 037C
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: sPkmdYJFjK9CP/9mxExuAYDVshZfjFp23bZZIynOptU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f5:e8:92:f9:09:56:d1:5e:ed:b3:f3:57:99:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=7bf256721983ba8232f16b6caff830172ad4bc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:02:0f:b1:4e:df:b7:00:80:eb:6a:8d:84:
ad:e4:16:8a:e1:dc:7d:8b:16:61:c2:4f:eb:d0:a2:
0f:8f:2f:a4:e1:f6:1f:61:08:68:6a:dd:fa:8f:eb:
e0:b5:94:5c:56:9b:41:c3:d6:38:12:b6:74:ee:fb:
cd:90:08:f5:ee:19:9f:c4:fd:73:f7:d6:55:3a:e0:
f5:82:ea:aa:e5:1e:8f:e0:13:1d:82:25:31:de:e5:
a2:95:ab:39:1d:78:59:36:3f:f9:8d:ef:4c:dc:6f:
df:c8:b6:c2:4e:3f:3d:c8:04:51:ec:cc:8c:f7:32:
41:cd:92:4f:d2:5b:db:02:c8:06:bd:53:94:58:57:
01:5d:b8:e7:1b:8a:56:5b:c7:7c:bf:7d:df:2c:c9:
38:a7:d3:6b:29:3c:9e:1c:2a:c6:d7:0b:98:a5:7d:
06:ae:70:68:b0:f1:ad:f9:56:e1:94:a3:86:d0:e8:
75:1b:37:05:9d:69:c2:9d:0c:25:08:5b:65:03:5d:
14:11:93:b0:4c:f1:1c:6d:00:64:6c:f3:07:16:1d:
11:ee:4d:fb:8b:21:4a:0c:e4:f4:09:8f:19:2a:fa:
80:d1:d3:5e:b1:33:92:8c:e8:2e:a4:d4:2c:f5:a6:
ec:11:ba:11:23:8f:4a:a2:ef:ba:6d:e3:74:17:97:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:56:72:19:83:BA:82:32:F1:6B:6C:AF:F8:30:17:2A:D4:BC:2E
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bd:ce:e8:db:5e:26:16:2c:ba:3b:8f:cc:c6:6b:b9:c0:7b:
17:54:13:b5:04:7b:81:9b:e6:73:f6:d9:bf:1f:5d:10:ba:28:
09:94:8c:d1:52:0b:8b:2a:6b:7f:78:71:37:31:48:61:c0:06:
cf:c1:0b:9c:35:d0:c9:24:b8:3d:54:4a:1e:5b:62:f9:71:42:
68:2d:ba:56:25:33:f1:cd:14:67:31:a5:0a:28:3c:aa:5f:6f:
29:11:c6:b4:d6:78:85:8d:1a:ea:25:e2:6b:8a:f5:63:31:c3:
93:5f:08:07:d1:39:b7:45:e7:b3:c9:0a:16:5c:de:d6:9b:d6:
3a:54:63:9f:91:26:2d:3a:35:02:d8:17:b9:63:ac:3a:14:46:
0c:1b:e5:6d:1a:13:8b:f1:d1:4e:a5:45:72:5d:e1:a8:f4:13:
f0:cf:ed:97:0b:37:f1:b5:da:32:f5:b0:34:f4:b5:8e:89:79:
12:fc:3a:05:ae:da:56:ce:58:d9:7b:6e:57:98:3e:a5:87:33:
02:ba:da:55:ba:8d:d9:2c:94:6f:c7:29:08:64:c5:3d:a3:57:
e6:2a:9d:3d:d4:5e:1e:01:97:22:0c:10:c7:f5:aa:0a:3d:9b:
ad:a0:9e:7e:94:fa:2b:62:40:98:45:a4:b4:02:c4:22:f3:1f:
a9:cd:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client