Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: iHXc8CyIkgoEOw+yUhf+8+07BDeFXQpTYh1vstHQZOw=
Subject key identifier: BA:D8:54:6D:3E:3B:CB:00:08:83:C4:26:DA:C5:9C:1C:38:F3:85:5A
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 019D382E19530A3468D8DC41F17A17C66688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 0B94
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: b4EKn2o+DfCDYmCmexMZexkiJG3lWC9t2Z9Zag2cKDc=)
2: x2MM1e6RzNZDA4hLyDx2reSAtec.roa (hash: LoKZDS1lTFaAe/itPWyVaeaD97C4a8VpDh8K0DR+aq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:19:53:0a:34:68:d8:dc:41:f1:7a:17:c6:66:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=bad8546d3e3bcb000883c426dac59c1c38f3855a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:c6:31:15:b4:d2:2a:61:cd:a0:9d:ab:8b:
21:ba:58:60:0c:9d:05:98:2f:d4:d8:63:28:6f:d7:
92:85:67:12:b4:41:fa:94:f0:f0:2c:35:a8:b5:70:
cc:35:43:87:a4:ef:c2:b5:9f:b5:63:83:2a:ca:a9:
b4:8a:6a:e8:1d:1a:45:b3:45:af:9f:d4:81:28:44:
4e:6a:5d:bb:da:f3:e7:b1:72:68:d0:90:8e:47:af:
33:13:50:ad:00:5a:99:95:1f:6c:cc:11:02:a8:c7:
95:08:2a:c3:6a:31:cf:3f:c7:00:c9:38:59:03:5a:
82:63:e8:4c:6c:ca:d7:7b:73:7c:86:f2:81:4b:75:
de:9b:b7:23:fa:d1:0c:99:73:48:ea:ed:97:bc:2e:
5e:bd:54:42:d4:fc:03:b6:0d:4c:96:3f:e6:78:25:
00:2e:1a:50:fd:94:a5:b9:2c:f2:95:5d:e6:fd:40:
a3:f7:c2:84:f1:37:cd:87:78:8b:80:31:55:4a:ea:
08:e0:24:f8:c8:b7:93:39:c0:a3:c9:0d:7d:5e:0e:
1d:ea:75:50:84:1c:88:fb:75:ff:af:3a:44:9b:f6:
c7:87:97:25:20:be:25:f1:11:b5:5b:c6:c2:c3:4a:
82:be:e0:a3:39:6b:e3:64:47:d7:13:b5:15:07:a1:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:54:6D:3E:3B:CB:00:08:83:C4:26:DA:C5:9C:1C:38:F3:85:5A
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1c:0d:d7:54:6f:aa:64:d8:bb:26:33:b0:69:59:b7:2d:27:
0c:f6:09:58:3f:69:ca:3d:0f:ba:af:2f:2d:20:25:15:27:15:
01:b3:db:cf:f0:4d:ca:6f:fc:19:52:c2:6d:d6:09:d3:aa:a2:
86:73:37:85:01:1b:b2:f5:01:50:92:4e:38:53:6b:46:d8:02:
8e:69:9c:0b:4c:96:2a:59:76:3e:6d:aa:37:41:73:cf:44:a0:
21:c9:e3:12:a0:d7:19:1a:79:22:2f:3e:50:01:3b:bd:21:76:
0e:3b:22:64:b5:62:e0:b8:11:9d:ff:88:d5:d3:b6:cf:c8:06:
a8:fb:4e:4e:c4:17:08:8f:3e:f5:10:b6:25:4e:15:fa:63:5c:
13:28:08:45:b1:e8:b6:c9:58:ad:6d:aa:ba:de:80:cf:78:be:
0d:50:41:a2:e4:4a:1c:b5:5e:aa:3f:48:ad:82:60:5a:fe:e4:
80:95:78:c1:27:d9:35:a3:45:d9:25:3e:05:fa:bc:d0:5a:46:
5e:d6:43:5f:31:51:76:80:5a:74:00:0e:95:d5:0e:60:72:cc:
aa:11:7c:75:93:48:1f:40:ea:1a:eb:35:64:58:b0:ec:5e:7d:
b1:56:a6:c9:02:dc:8f:1d:ee:cd:58:b6:43:34:92:10:37:d1:
12:53:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:15 2026 by rpki-client