Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: oGKz3M9vxGbot1XBSRXAuuKkKrWxwYjBKkP33/ZPWLw=
Subject key identifier: BF:F2:36:B5:6A:F1:F4:90:50:D1:60:64:12:32:7C:F1:2D:B3:7B:6A
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 01A14015077E69A9FFB608D73239DCFA141A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 15C1
Signing time: Thu 15 Oct 2026 15:01:22 +0000
Manifest this update: Thu 15 Oct 2026 15:01:22 +0000
Manifest next update: Fri 16 Oct 2026 15:01:22 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: kN2uxDMt05GsqugNhfqKPm4P+uuBYYIkk/A8wrK0EsY=)
2: eXexMnsXhpiwYKh6Uvz65hPWHAs.roa (hash: Sv4osXCj3qnFKewpXCIs6tgLO2bpxFbqyIwOzHIdMNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:07:7e:69:a9:ff:b6:08:d7:32:39:dc:fa:14:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Oct 15 15:01:22 2026 GMT
Not After : Oct 16 15:01:22 2026 GMT
Subject: CN=bff236b56af1f49050d1606412327cf12db37b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:bc:bf:fd:17:e0:d9:f0:b1:f7:b0:aa:f6:
18:a2:e6:8d:e3:f8:2b:a7:f8:55:99:18:5b:47:7b:
fd:c0:2c:94:1c:60:cc:87:bf:e2:ba:99:d5:32:a1:
43:87:36:f8:b3:f7:d4:a0:0c:cb:55:4e:a5:31:af:
b3:22:8f:53:fc:22:ee:e2:61:8d:89:94:e1:e6:93:
52:28:59:ae:67:48:87:da:54:30:d3:61:e6:b9:f9:
ad:f8:1e:0c:23:ac:dc:43:2d:4e:98:06:5e:df:82:
77:1d:ef:51:86:0f:a6:6a:00:b5:67:04:b0:93:12:
d4:5e:98:f0:42:b1:59:4e:0c:cd:db:11:02:5a:97:
5b:aa:22:8c:b0:8f:8b:6b:92:c0:e3:43:14:e8:cc:
0f:a7:0b:50:29:84:a5:dc:2f:4f:0a:02:f3:91:0e:
b1:67:f7:07:47:7c:68:bc:11:6c:9e:09:cc:aa:13:
7a:44:8d:bb:11:e4:bc:ae:57:65:34:ae:b5:32:17:
ae:19:0b:81:95:af:90:fc:37:1f:19:99:d5:21:9b:
ff:9e:b0:50:ba:de:59:61:9c:0d:e6:04:a7:47:ba:
af:94:c6:d6:31:36:2b:30:94:91:43:f9:e5:f9:37:
e0:85:ac:12:94:92:a8:82:68:7a:aa:74:28:f3:67:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:36:B5:6A:F1:F4:90:50:D1:60:64:12:32:7C:F1:2D:B3:7B:6A
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:df:5d:93:8b:fc:23:2e:89:de:19:03:06:91:ea:42:0a:69:
9e:a9:21:e1:61:cc:f1:ae:c8:8e:f8:94:cc:30:76:0c:41:19:
b0:7f:29:5e:e5:f6:b5:36:20:6a:04:15:43:29:b2:31:f5:86:
b7:97:69:c6:22:fd:fc:80:c7:e0:bf:d1:32:1b:95:5d:a0:a9:
ec:39:d3:2a:e5:3b:6e:61:60:48:82:55:d1:9d:e7:3e:1d:7a:
f8:2c:5a:5b:d3:36:91:fd:32:dc:a6:23:c8:40:d8:c7:99:f5:
6e:13:ac:91:36:f9:54:8d:8f:66:b3:71:c1:5b:cc:31:74:c2:
d8:49:4e:72:61:eb:9f:96:18:28:c4:b1:b5:8d:dc:e4:1b:f6:
bb:8d:bc:c6:30:f9:d8:c3:e5:ef:14:90:f4:25:3d:d0:a7:2a:
3a:5e:af:74:69:4b:71:36:d3:5b:a9:53:78:d7:bb:49:60:46:
9e:b6:a3:f6:3c:aa:6c:72:1b:38:34:2d:28:67:c5:81:df:8e:
97:cd:21:f4:3c:bf:3b:db:1e:84:50:87:de:9b:78:f0:97:17:
7f:47:5e:77:0e:0f:8b:16:9e:77:ce:11:c8:f9:d4:f9:de:7d:
53:2f:a6:22:57:14:9b:aa:7b:30:6b:f3:74:21:20:07:74:76:
c7:4c:85:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFQd+aan/tgjXMjnc+hQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjNhYzIwYmMxZTQ1ODVjNGZkNGNjOGU3YmM5NzYzMzFi
ODVjNmUwHhcNMjYxMDE1MTUwMTIyWhcNMjYxMDE2MTUwMTIyWjAzMTEwLwYDVQQD
EyhiZmYyMzZiNTZhZjFmNDkwNTBkMTYwNjQxMjMyN2NmMTJkYjM3YjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVa8v/0X4NnwsfewqvYYouaN4/gr
p/hVmRhbR3v9wCyUHGDMh7/iupnVMqFDhzb4s/fUoAzLVU6lMa+zIo9T/CLu4mGN
iZTh5pNSKFmuZ0iH2lQw02Hmufmt+B4MI6zcQy1OmAZe34J3He9Rhg+magC1ZwSw
kxLUXpjwQrFZTgzN2xECWpdbqiKMsI+La5LA40MU6MwPpwtQKYSl3C9PCgLzkQ6x
Z/cHR3xovBFsngnMqhN6RI27EeS8rldlNK61MheuGQuBla+Q/DcfGZnVIZv/nrBQ
ut5ZYZwN5gSnR7qvlMbWMTYrMJSRQ/nl+TfghawSlJKogmh6qnQo82ftlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/yNrVq8fSQUNFgZBIyfPEts3tqMB8GA1UdIwQY
MBaAFAsjrCC8HkWFxP1MyOe8l2MxuFxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYt
MDYxODhjZjdhM2MyLzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYtMDYxODhjZjdhM2My
LzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGd9dk4v8
Iy6J3hkDBpHqQgppnqkh4WHM8a7IjviUzDB2DEEZsH8pXuX2tTYgagQVQymyMfWG
t5dpxiL9/IDH4L/RMhuVXaCp7DnTKuU7bmFgSIJV0Z3nPh16+CxaW9M2kf0y3KYj
yEDYx5n1bhOskTb5VI2PZrNxwVvMMXTC2ElOcmHrn5YYKMSxtY3c5Bv2u428xjD5
2MPl7xSQ9CU90KcqOl6vdGlLcTbTW6lTeNe7SWBGnraj9jyqbHIbODQtKGfFgd+O
l80h9Dy/O9sehFCH3pt48JcXf0dedw4Pixaed84RyPnU+d59Uy+mIlcUm6p7MGvz
dCEgB3R2x0yF3A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:55 2026 by rpki-client