Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier: oSsBSEd+Y7dqQg0hUo2AAmENA3D3u6daUdPfyixTUaE=
Subject key identifier: 79:F4:80:D3:C5:55:32:B8:27:10:88:C3:A8:39:1B:F5:66:7E:79:54
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial: 019D389C278D9EBA8E342F2BAE3B79A38E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number: 0B5A
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: 71mCI3KMqJb1fWbhA5VAOz_YwlY.roa (hash: Yhy9snU417VssGNDPJuFTqPzX5TH460OslWhtb60W/w=)
2: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: QvJlBnhMfmkwXJHw9Jr1eYY7J0aTlkh88ZVf7n4vdIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:27:8d:9e:ba:8e:34:2f:2b:ae:3b:79:a3:8e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=79f480d3c55532b8271088c3a8391bf5667e7954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:1d:90:b5:4d:ba:7d:9a:cd:5e:81:00:dd:
57:f2:58:b0:c1:87:47:f8:3e:42:12:7f:1e:01:78:
45:83:a6:47:ce:48:89:a0:fc:78:cb:8c:a7:fc:74:
58:b0:98:48:0e:27:89:c3:12:1c:34:ea:8c:29:d4:
14:b1:02:08:92:26:4f:ec:a3:6c:38:f8:4a:9f:1c:
c4:a3:47:26:ef:a9:fe:79:4b:3e:28:f6:75:3f:0a:
66:5a:d4:88:a3:f5:b1:00:fc:d1:4c:e1:2c:88:93:
de:16:72:bf:88:33:81:5b:77:77:c8:d5:cf:d5:82:
5b:ba:dd:33:85:04:d2:9a:bd:79:f5:20:7f:4e:d5:
09:ba:46:da:6c:4e:70:cb:8d:97:2c:09:9c:be:6e:
f8:3f:a6:08:fb:66:03:48:1e:a7:4b:28:36:7f:a6:
a5:18:54:7a:c3:7d:b4:00:48:0a:c6:47:61:91:35:
7a:73:d0:f6:d9:de:8b:93:09:7c:36:bf:66:e0:c0:
f1:f2:80:bb:31:05:52:c5:0d:6f:52:13:3f:b0:60:
56:b5:8a:14:55:72:83:24:f4:63:e8:09:37:6e:76:
86:e4:71:8b:30:99:f8:50:82:34:30:f5:cf:2a:40:
e2:6e:7f:e3:f2:61:d2:f3:49:76:a2:42:4d:d1:b8:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F4:80:D3:C5:55:32:B8:27:10:88:C3:A8:39:1B:F5:66:7E:79:54
X509v3 Authority Key Identifier:
keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9b:4b:b7:c3:a0:56:02:52:fa:09:5f:3e:45:b5:35:e7:f6:
f7:16:32:02:08:d6:62:4f:9f:c9:f4:dc:27:9b:c2:c6:bc:8f:
0f:5b:e3:2e:c4:af:0d:ab:84:f7:ff:6c:8f:19:14:96:d4:d4:
48:8d:92:66:17:75:74:3b:f2:fa:ee:95:03:95:24:e6:c8:55:
3c:d5:6d:54:23:d1:fb:4b:aa:7a:8e:22:71:37:2b:58:34:cb:
31:78:ca:24:35:7a:56:bd:8f:86:c5:04:df:e8:fc:30:90:81:
e6:0a:f4:da:9c:47:c5:a9:2d:4e:b6:54:82:f9:eb:f2:43:2d:
25:cf:cd:a1:b2:4a:50:8f:af:46:74:9d:e9:0b:83:7e:c2:c9:
60:5b:ab:df:c2:de:a3:ff:6b:f2:24:10:65:6a:ac:0d:b0:bb:
df:8a:2f:78:8f:d7:7e:46:14:1d:ff:27:93:e9:8c:92:48:ec:
60:e9:cd:00:8a:b4:78:8a:ee:32:04:9b:60:6e:59:a1:76:ab:
44:7f:12:3e:49:89:e7:91:98:47:d3:eb:e8:71:61:4c:ef:ad:
bf:11:d6:2e:a4:17:cb:96:63:ab:48:06:dc:4e:7e:f5:9b:18:
68:5e:9d:a9:7b:bf:3e:d5:e2:b1:63:3e:b0:fd:99:a0:18:9f:
cd:7c:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:08 2026 by rpki-client