Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: M4zO5Km9xhPS56hynft818IBK5hxNhWrFvZKkzGfXTQ=
Subject key identifier: 60:1A:57:8E:18:9E:D6:35:41:7E:28:66:40:FC:B5:FE:94:C6:49:1F
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 019D397812BFF4FD3371F0B02184FD55885F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 0198
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: f8pLKOTWnJkC3n73idKwRqxpdwTqLYaV+Re4qRbJ1Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:12:bf:f4:fd:33:71:f0:b0:21:84:fd:55:88:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=601a578e189ed635417e286640fcb5fe94c6491f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:74:99:25:c1:f9:5c:92:f3:69:33:c2:d1:
02:e4:62:78:19:80:2e:d2:c2:40:73:c1:69:d0:8c:
c6:c9:07:71:9d:51:fc:e4:33:83:8e:bd:05:b4:e9:
43:07:99:c1:d8:87:65:c4:22:ea:f0:b9:a0:b9:f3:
78:7c:c4:e8:cf:89:e9:95:94:58:aa:b0:dc:87:e8:
2f:7c:0c:06:6a:07:0d:1b:8f:54:c7:0c:4a:32:41:
8c:b7:bd:dc:25:b5:35:c4:ba:b2:fa:4a:9e:81:82:
84:e4:be:e1:ba:0e:a8:e6:ab:e8:55:73:82:c1:0e:
fc:82:82:1d:5d:f2:af:f8:a4:94:58:f3:96:2c:d9:
3d:1c:9b:2e:5e:2e:40:04:85:88:1b:22:cd:94:65:
bd:30:10:88:c7:12:0d:5a:d3:19:3c:1a:4d:03:5a:
f0:a9:2d:13:d3:0c:32:1b:4d:b2:b2:eb:0d:8c:74:
6b:7b:ee:d1:5d:49:42:e3:65:89:84:36:df:c0:8f:
1e:69:0d:c3:c7:cc:17:70:b6:50:97:69:e7:30:f8:
0c:03:29:f2:c1:2c:44:5e:05:af:9b:a4:58:3d:6d:
9c:21:28:3c:84:08:67:b4:c4:2e:02:84:bb:f4:13:
5b:0e:ed:bb:3e:1b:8c:12:ba:31:18:82:73:17:7a:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:57:8E:18:9E:D6:35:41:7E:28:66:40:FC:B5:FE:94:C6:49:1F
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:de:d4:5e:55:4c:ae:b5:96:ef:4c:a2:df:4a:0d:bd:e5:38:
93:a5:e0:9f:20:81:ee:95:5d:67:ea:10:98:6a:5b:70:37:f7:
73:ff:66:bb:15:35:b9:bf:42:52:c4:b3:67:53:73:78:0c:33:
15:21:dc:c1:d2:52:74:82:1e:07:99:c0:1e:a1:c0:55:7a:75:
5d:f9:75:ec:8f:1a:26:8e:96:2b:8f:ae:54:87:57:f1:1a:c5:
f7:58:2f:50:fd:a1:bf:ae:fb:10:2c:d5:f3:74:de:7d:50:eb:
d1:5b:8b:32:8c:99:50:42:00:a7:e2:74:ec:33:93:ac:ca:77:
2c:99:58:fa:ab:de:55:97:54:de:1d:c2:37:80:c6:09:7b:2d:
07:fd:91:31:57:94:6f:c6:5d:30:d2:83:d0:fd:a2:6e:85:57:
06:68:65:09:7e:f8:be:95:14:45:32:ff:f8:b8:4b:5c:20:50:
1b:00:df:d4:ae:45:cf:21:8c:b5:d8:61:0c:07:20:c7:78:0b:
f0:77:91:3f:9d:90:96:1e:1f:1b:d5:f7:08:cc:5e:50:3b:c2:
06:d7:30:07:1a:e8:7a:9a:42:ea:c5:3c:e8:10:ad:c2:a3:17:
cc:08:f0:1f:ad:51:03:b3:e9:7a:5e:44:4b:20:53:a3:0b:1a:
6f:6a:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:35:44 2026 by rpki-client