Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: 0Tlzrh8kDfxE2VWc9BWrL4oIV3bt7aH743SzVQsn3dU=
Subject key identifier: 93:33:F1:18:F3:36:BD:1C:18:73:DD:F2:D2:A5:99:AA:61:A2:7B:4D
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 01A11A197CDE7F309F178DB2CCCE2E322288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 039A
Signing time: Thu 08 Oct 2026 06:00:40 +0000
Manifest this update: Thu 08 Oct 2026 06:00:40 +0000
Manifest next update: Fri 09 Oct 2026 06:00:40 +0000
Files and hashes: 1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: aikK8QCkTyrKTtbMrd0+9I+h8FKsgV+RgWu892baVyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:7c:de:7f:30:9f:17:8d:b2:cc:ce:2e:32:22:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: Oct 8 06:00:40 2026 GMT
Not After : Oct 9 06:00:40 2026 GMT
Subject: CN=9333f118f336bd1c1873ddf2d2a599aa61a27b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:1a:df:c8:dc:bc:48:98:55:3a:2c:13:a5:
15:c8:05:ec:63:3b:a8:0e:c4:b6:10:10:43:19:c5:
6b:e1:22:35:fe:1b:d5:04:58:4c:b7:99:bc:ac:2f:
83:28:ba:c6:38:74:e5:f1:5e:f7:0e:c5:14:96:76:
37:f4:b0:48:2a:c8:b3:8d:fb:d7:ac:ac:2f:2d:cd:
14:fb:62:56:01:05:67:73:78:b2:f8:cd:67:49:2e:
a2:72:bd:ae:4f:76:65:49:73:cd:02:03:8d:9e:47:
75:34:90:c0:f8:81:3e:36:8b:cc:f2:61:1d:8f:aa:
e5:2f:a8:db:68:cf:7c:52:41:84:65:52:d9:98:da:
19:79:36:51:3c:c4:3b:f0:90:48:88:49:a4:8a:15:
22:63:d9:ba:ed:fa:65:8d:3d:19:db:18:35:1a:9d:
e1:26:0a:6b:2c:22:17:5b:b4:32:ba:32:a3:fc:dc:
69:23:40:fd:89:ad:65:ac:07:42:d3:6b:c3:8e:89:
16:6c:33:ba:d9:da:8b:ef:75:fd:e9:47:12:d1:e2:
10:1e:0c:df:93:cd:f0:5f:93:c3:5a:53:d9:22:62:
79:a7:cf:cf:ce:04:11:8c:0a:db:f9:f2:7a:83:5a:
73:61:25:f3:d3:3e:cb:b9:36:9d:86:03:fc:7f:9e:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:F1:18:F3:36:BD:1C:18:73:DD:F2:D2:A5:99:AA:61:A2:7B:4D
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:21:97:ac:96:09:c1:de:70:0f:88:ee:49:c3:dc:81:25:ab:
f1:7a:5c:b5:42:8d:da:a6:e7:e9:b5:f8:69:2e:62:c1:21:89:
69:2d:dd:79:3d:e0:9f:d2:a9:19:8b:2e:65:b7:7d:5f:9b:ca:
69:2e:c3:4f:fc:e1:f3:52:d2:9f:3f:8f:d5:5f:89:4e:3e:24:
36:e0:3c:73:65:aa:bf:bf:ed:fc:98:a8:da:51:7a:13:62:c1:
a2:68:4d:b1:17:e1:ab:c3:67:26:d1:6f:91:39:0d:24:53:53:
9a:40:bd:8f:d0:be:49:93:c7:19:41:2b:34:73:c7:50:94:17:
17:8b:03:e7:e4:d3:67:e1:37:ea:e1:e1:07:c0:58:d4:c3:43:
8f:97:73:69:c3:4b:50:05:da:82:a3:3f:55:88:cc:84:df:37:
f3:ac:de:c2:07:9e:03:41:45:08:2a:90:ec:43:9f:55:4a:ab:
3e:62:b0:19:fa:6a:f9:04:96:8b:75:09:a0:9a:4f:b9:ee:c8:
66:85:74:ed:82:14:73:b7:8a:31:66:9e:5a:3c:d4:e8:43:32:
f0:86:ac:65:be:7e:57:2b:5f:13:e3:be:50:0f:cc:6d:81:6b:
6c:4a:7a:94:95:65:9f:a9:9d:c0:a3:88:12:74:ab:81:2f:fb:
ed:51:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:17:44 2026 by rpki-client