Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
File: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft (raw, json)
Hash identifier: ZWVwUWRySHOR/rGiR5x8e7h8zeY2vpLus5su1PMU2cI=
Subject key identifier: 98:16:59:F7:36:EC:F0:DB:1B:91:E0:DA:F2:E9:6F:A3:9D:A4:8B:B4
Authority key identifier: 09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
Certificate issuer: /CN=09860c73ba752bf357ff7c00da535558a919caf4
Certificate serial: 01A040F2CDB3A9BDF10AE8424065B660F396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
Manifest number: 0200
Signing time: Thu 27 Aug 2026 02:00:49 +0000
Manifest this update: Thu 27 Aug 2026 02:00:49 +0000
Manifest next update: Fri 28 Aug 2026 02:00:49 +0000
Files and hashes: 1: CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl (hash: dM42djHPwx6yDNqdc+rU3WQW2/KZSoP7R1O4BRPZD7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:cd:b3:a9:bd:f1:0a:e8:42:40:65:b6:60:f3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09860c73ba752bf357ff7c00da535558a919caf4
Validity
Not Before: Aug 27 02:00:49 2026 GMT
Not After : Aug 28 02:00:49 2026 GMT
Subject: CN=981659f736ecf0db1b91e0daf2e96fa39da48bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:a1:9a:7f:94:ae:40:40:d6:ea:5a:91:78:
2a:99:18:10:6a:41:c2:78:89:3e:8f:23:dc:a5:fb:
1e:49:64:0a:c6:c6:81:02:35:83:f5:13:79:38:62:
08:35:51:47:22:ef:7d:7a:46:96:45:07:1e:7e:dd:
79:0a:b5:44:8d:85:2b:fd:67:b3:7e:0a:c6:31:c3:
3a:3b:98:2e:61:40:a7:3e:2a:cf:35:dc:31:4d:e4:
51:a6:f2:dc:d5:5d:08:83:2b:0c:b8:39:a9:21:4b:
6f:23:5a:43:c0:1a:fe:f0:66:50:8e:dc:91:e3:c6:
16:6a:b0:09:42:cc:97:74:b3:4e:24:b3:5f:40:26:
10:36:91:f9:4c:92:3d:35:01:ec:b3:38:08:95:b9:
1e:06:df:9d:3a:d6:19:44:74:88:5d:bc:c0:59:98:
f8:9e:62:7c:6e:d9:4a:09:81:81:e2:c2:48:4d:1e:
c0:b5:dd:3d:44:14:ea:c7:e5:44:53:e0:46:af:60:
89:64:45:89:a8:1a:04:59:5b:40:7f:54:c9:30:45:
95:d2:f6:87:d6:76:31:8d:88:1c:06:a6:70:1f:14:
59:41:fe:3c:f2:98:1f:0e:b0:8d:53:f0:47:e6:46:
b7:32:37:78:0b:e6:cf:2d:f9:35:a4:b6:d7:5e:30:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:59:F7:36:EC:F0:DB:1B:91:E0:DA:F2:E9:6F:A3:9D:A4:8B:B4
X509v3 Authority Key Identifier:
keyid:09:86:0C:73:BA:75:2B:F3:57:FF:7C:00:DA:53:55:58:A9:19:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f26b57-4346-4d2f-a2ed-bb193bbed21a/1/CYYMc7p1K_NX_3wA2lNVWKkZyvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e7:c7:e1:d8:30:21:ac:4e:6c:b6:b7:32:5a:92:18:cc:aa:
3b:5b:89:90:be:b8:75:1a:37:53:1f:9e:b6:29:85:ec:b8:6b:
7f:95:6f:e5:38:4d:24:b3:ab:83:d0:43:c4:7c:0f:e3:0b:ef:
d5:fd:45:cd:31:d4:5d:23:9f:fc:6a:ed:25:ec:22:e2:32:12:
99:1a:85:67:19:1a:f2:0a:a7:ca:94:0c:3d:a3:8e:25:24:f2:
b0:c0:9e:e3:da:e8:4e:33:4d:4f:d6:dc:25:08:c9:ac:07:4e:
a9:c5:10:ac:ed:3f:eb:1b:1d:b5:53:da:67:ec:61:21:e0:cc:
3f:af:a7:59:d3:03:26:9d:86:a2:88:a6:eb:87:13:d2:27:81:
b6:77:18:63:4d:5a:11:92:b5:7a:85:52:40:ed:20:52:90:94:
f0:a4:55:b0:71:84:b4:17:af:e1:91:d3:aa:17:b5:75:c9:20:
c4:0f:14:c1:e8:ca:dc:cf:2a:38:d6:c3:c7:86:9e:02:0d:37:
6b:7f:60:eb:8f:77:65:95:cd:fb:ca:86:59:bf:43:5e:b6:0e:
1a:8b:e2:56:b6:0d:97:82:8d:45:e1:a2:31:d8:73:d5:3a:c3:
54:7a:e6:6a:42:e3:57:73:66:c8:c4:f4:dc:ee:8d:9b:9f:fa:
81:b2:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:03:24 2026 by rpki-client