
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: Km9Yn8ZtgJKf2t1dEZuQ257P775EAflyHeaUFrVewCI=
Subject key identifier: 24:AC:8A:EB:BF:A5:B4:41:B1:D4:2C:CA:6B:C9:C7:EA:90:E0:FA:86
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 019E3297975F875D0180CB1E4D151F2658D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 0219
Signing time: Sat 16 May 2026 21:00:55 +0000
Manifest this update: Sat 16 May 2026 21:00:55 +0000
Manifest next update: Sun 17 May 2026 21:00:55 +0000
Files and hashes: 1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: gR2/MVuly09EiyUilwZDSSgQG+zzH14UQfbraavtZn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:97:97:5f:87:5d:01:80:cb:1e:4d:15:1f:26:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: May 16 21:00:55 2026 GMT
Not After : May 17 21:00:55 2026 GMT
Subject: CN=24ac8aebbfa5b441b1d42cca6bc9c7ea90e0fa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:c8:27:52:bc:88:d4:03:d7:d3:94:81:eb:
0f:6a:ee:3c:6d:29:9c:ee:b6:2a:a2:ab:0b:c8:8b:
e6:42:00:79:4d:e0:4c:7b:ed:e8:bf:96:81:54:76:
6f:88:4d:83:b2:b5:ba:89:30:a7:a1:7f:eb:42:42:
b5:95:58:ec:c9:2b:c4:02:e8:7d:05:92:e9:e6:57:
88:47:de:8f:b4:80:28:e8:bb:4d:4c:4b:8f:89:d9:
51:a3:08:88:10:a4:fb:1b:39:ae:b2:91:c2:2f:0c:
1d:b8:1f:0c:64:43:84:3f:d1:8c:e9:c3:53:97:9a:
a9:86:23:70:ca:5d:f0:a6:3f:f3:e4:96:40:5d:31:
9f:eb:e8:53:59:4b:ed:33:ad:13:2b:58:ae:a1:83:
f9:b4:56:1d:f4:8b:af:fe:4c:d0:2d:07:9a:c6:4a:
ce:39:f8:6c:33:0f:27:0e:05:38:7f:82:6a:3e:49:
05:55:82:4b:e6:d5:91:0e:e6:7d:b6:91:8d:9c:c5:
a1:a6:e9:a2:fc:8f:dc:d8:55:f1:b4:d3:ca:99:3b:
e3:48:0d:2b:3b:80:20:68:43:e4:ff:80:c3:35:42:
3a:8e:75:1a:ce:8e:e5:83:a2:2b:d4:b2:6f:e7:11:
b7:d8:35:f1:bf:a1:87:f4:df:b3:97:3b:ff:fd:58:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AC:8A:EB:BF:A5:B4:41:B1:D4:2C:CA:6B:C9:C7:EA:90:E0:FA:86
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a6:e6:ac:da:0c:0e:68:a3:e4:72:af:0c:e6:c7:0a:cb:b9:
19:25:f6:12:df:32:d1:c7:df:f1:60:e8:07:93:ca:50:1c:d1:
d3:42:25:d2:38:11:d4:17:3f:42:3c:a8:4d:90:9f:e7:83:22:
c0:45:22:79:85:45:4d:7a:a3:cc:f7:a1:c4:ed:5a:54:cd:1e:
4c:e3:42:4a:e3:09:5a:b2:fa:68:01:01:46:ff:25:82:6c:1c:
f2:56:d0:24:fc:35:5c:d4:16:fa:ef:76:0e:5a:9a:bf:44:22:
af:d3:e2:5b:e5:e5:c4:d1:79:89:fa:1b:e2:c1:e5:ed:dd:c9:
ac:78:bc:34:cd:e9:c4:3d:7d:9f:79:18:2b:2d:85:d0:6b:36:
d0:d4:ba:7a:16:f6:be:59:bf:b1:12:e0:4a:7e:74:9d:a0:23:
9f:a1:c8:36:e1:ee:5f:98:6c:8f:cc:01:06:2e:63:89:3a:eb:
d5:17:ce:01:3b:ea:b9:4e:cc:f5:23:36:81:a7:b9:e6:7c:b3:
6d:ee:27:9d:06:e9:38:1b:9b:51:20:a1:85:ab:77:a2:89:2e:
e0:af:85:2a:f5:27:89:39:67:b3:6a:8b:16:3a:92:3d:98:d2:
e2:90:b2:db:25:ac:1a:87:57:26:3e:ec:4a:5e:71:80:7e:74:
29:e9:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:14:35 2026 by rpki-client