Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
File: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft (raw, json)
Hash identifier: WOBDrjRGLQYS3VEjmfmi4NsyxqwIyO8q0pi2TmtMZdg=
Subject key identifier: 68:B5:11:96:E7:F9:68:27:03:A5:95:24:91:45:91:8B:DA:0E:E3:A2
Authority key identifier: 09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
Certificate issuer: /CN=09860c73ba752bf357ff7c00da535558a919caf4
Certificate serial: 019D389C4F23DC907115624A6312ECF78A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
Manifest number: 6E
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl (hash: 9sip5+kQ4C/yqUxxotUzwVZUhdaMSp0ZlAGYQrrTDTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4f:23:dc:90:71:15:62:4a:63:12:ec:f7:8a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09860c73ba752bf357ff7c00da535558a919caf4
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=68b51196e7f9682703a595249145918bda0ee3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:bc:86:6d:86:6f:10:b2:5a:17:1d:3a:c8:
23:58:18:83:cb:93:e6:23:28:0b:63:05:c0:ea:e5:
fb:38:30:d6:f8:34:fc:ef:5b:0c:92:cf:6b:e2:95:
69:92:52:37:04:16:c6:58:e6:eb:6e:81:00:17:2c:
d2:c3:15:44:15:e1:57:ea:c5:47:86:88:f0:37:2d:
56:fb:0c:f9:c6:39:97:4e:dc:5a:ef:61:03:c0:56:
7f:dd:c8:a1:7c:db:1d:80:c3:fc:35:6b:ff:1a:cb:
a4:ed:a2:53:6c:f3:7d:34:39:50:f8:5b:b3:0e:86:
75:47:c5:95:b0:33:30:e5:7f:ea:da:f6:c2:16:c3:
b9:40:67:4c:f2:ec:1a:2d:68:26:31:ca:50:2b:a9:
c1:72:10:05:cf:ef:bc:3c:33:11:01:58:36:74:37:
24:b8:00:e1:29:19:f9:bb:df:a8:32:e3:5a:59:3a:
25:d8:09:47:d6:8f:72:fd:31:ce:bb:d5:db:a6:77:
e6:b6:80:e6:38:7d:f5:79:00:b5:2f:ab:0f:43:98:
5a:7d:46:06:37:4b:1c:5f:ae:1c:83:fd:ec:2e:42:
a8:20:f2:06:2a:db:c6:15:cf:2f:77:a1:ae:30:3d:
3d:98:ac:0d:75:ce:0b:c4:13:1e:d3:fa:eb:85:c5:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:11:96:E7:F9:68:27:03:A5:95:24:91:45:91:8B:DA:0E:E3:A2
X509v3 Authority Key Identifier:
keyid:09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:73:08:38:4d:3b:43:d7:66:4b:18:fb:04:1e:49:11:86:7e:
c3:c9:b1:81:bf:40:c8:90:83:8a:b7:cd:5b:cb:eb:a0:ac:e3:
94:80:1b:ba:ff:99:18:e1:eb:38:b7:a7:7e:70:f6:4a:3a:d0:
47:a1:9d:71:e4:04:80:b2:c2:3a:0b:e8:3d:98:71:16:b6:e0:
bb:a7:a9:70:77:33:3e:69:18:9f:be:cd:af:ea:14:12:04:df:
0d:32:16:18:c9:2c:78:68:3d:2b:98:ef:1d:a7:be:93:3e:1b:
5b:94:d0:dd:82:14:90:f8:96:f4:8f:cb:70:21:5a:46:57:2f:
cc:e7:97:5f:76:bc:ea:f7:f7:93:3c:b1:eb:20:7f:ff:4c:d6:
90:82:7f:d3:ef:e5:4b:a7:80:3e:c6:6d:e1:77:ba:1c:4a:c8:
c9:96:67:13:98:da:ff:88:28:86:a9:f0:30:ad:d1:d9:83:a4:
d3:09:98:21:34:9e:9b:75:4b:d5:8b:2a:37:63:cb:d0:97:99:
76:71:ea:37:ca:d2:8f:71:64:23:ef:aa:a8:71:32:c9:fa:20:
2c:27:cf:f6:63:e8:ce:d1:dc:2e:ac:b2:78:57:f4:80:fa:cc:
d3:e0:44:c4:db:34:a0:66:9e:57:6a:54:7a:b7:51:a8:b5:b9:
c7:29:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:21 2026 by rpki-client