Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: ukDSoILiV1Xt//kUrY77gXYJRDO/mJ5mndTZhZ/0m2E=
Subject key identifier: DC:CF:59:A1:09:F5:71:5F:DF:F7:33:D3:43:4C:6D:8E:06:FC:EC:2A
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 019FA071DE361202B6D4D93AAF2DB056A4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 22:00:44 +0000
Manifest this update: Sun 26 Jul 2026 22:00:44 +0000
Manifest next update: Mon 27 Jul 2026 22:00:44 +0000
Files and hashes: 1: VET9JzpN742Kxi_PTAzuOfpLzjw.roa (hash: tmq0ncjsAGMD4Bt4MuYWz/LdnVYgu2OPec/Dp5evxVU=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: Z+QMtV8agpdpUp2ziFJB4aEP8magQRIecgGWUoQkuvk=)
3: sOAqQxWMDpHDPx74UHl3gJfcmkY.asa (hash: nLCiNLHUaF9d6fXPw1n+VZdVFlVNoVf9kE2TkaD4JpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:de:36:12:02:b6:d4:d9:3a:af:2d:b0:56:a4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Jul 26 22:00:44 2026 GMT
Not After : Jul 27 22:00:44 2026 GMT
Subject: CN=dccf59a109f5715fdff733d3434c6d8e06fcec2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:79:a5:bf:5a:ff:3b:69:9a:68:3d:14:bb:
77:f1:ae:b2:c6:a9:23:cd:bd:6c:42:8c:77:03:b0:
58:e5:fc:30:36:d3:89:7f:c2:31:5c:d3:36:6b:06:
49:e0:a1:cb:86:50:d9:75:3b:7b:9a:0f:4c:e1:6d:
9f:46:31:dd:82:d0:93:58:6d:40:b2:b1:bc:f7:94:
ae:70:f1:d0:2e:a1:fc:ea:7b:b5:44:72:f6:e2:c5:
70:f1:01:c8:42:18:69:91:ac:4c:4a:18:ea:ce:93:
9d:ce:6a:5f:b5:22:05:73:9f:91:35:87:49:1e:9a:
1d:ee:3c:e1:fa:04:20:85:b1:aa:39:e2:4a:54:11:
ac:c4:45:46:b3:bb:2f:4b:ad:68:0c:e9:e4:75:a1:
fc:92:13:81:3a:80:08:2d:d2:af:b3:0e:cf:6d:3f:
e6:c7:25:a5:6d:b0:b1:92:23:6b:57:3e:35:52:db:
bd:6b:f5:8f:90:41:bd:e9:4c:21:83:3d:df:fe:e1:
c1:db:23:c7:bf:22:c2:0b:37:c5:95:ae:6e:0f:66:
64:ba:8a:1d:80:0a:ad:34:30:af:68:86:a6:22:35:
91:fe:10:8d:25:a7:90:3d:1c:1e:85:9b:ee:37:24:
da:12:c8:a9:80:52:fb:5a:17:20:c7:d6:df:0f:34:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CF:59:A1:09:F5:71:5F:DF:F7:33:D3:43:4C:6D:8E:06:FC:EC:2A
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:31:8b:5c:96:04:ad:6a:19:2c:a7:4d:74:da:6f:2d:03:
9f:ce:66:a6:15:bd:0a:9d:18:7b:77:b2:20:ca:86:62:2d:fc:
0f:28:c4:c5:60:67:ec:fa:dd:1c:8f:a5:73:f5:b8:79:4e:e7:
e8:11:23:2d:26:0e:13:79:3f:e2:d6:07:9a:35:93:06:f6:69:
13:4d:c9:74:60:f3:c3:6f:09:99:92:a8:12:23:2e:73:5a:bc:
e6:70:b3:32:ca:18:ac:57:b1:eb:9c:05:34:77:c0:01:f0:76:
8c:ba:d3:be:a9:75:a5:fe:57:e5:c4:24:08:41:8e:63:63:49:
cb:3a:01:1f:cd:8b:63:04:2f:1c:f4:95:0b:cf:91:8c:50:90:
7a:98:99:f5:74:29:c9:3c:ac:72:6f:5e:cc:22:f2:9e:ec:8a:
ef:56:c6:ab:f0:33:4d:a3:43:0f:b8:f2:35:6d:b2:47:62:c8:
eb:2f:2d:fb:fb:55:73:ed:a9:c9:b8:42:c6:b7:c9:4a:7a:ee:
ce:cd:e3:7e:4b:ff:49:e0:c2:50:e4:de:c0:9a:14:40:be:3c:
62:b6:35:07:52:26:e2:ab:81:bd:11:d7:8f:69:ce:7d:c7:19:
3b:09:39:0e:2f:ab:ba:ac:5b:72:f5:b9:15:19:1e:8a:5a:ae:
c8:a9:82:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcd42EgK21Nk6ry2wVqTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMjYwYWFmZWZlMmVlMDcyZTQwNjJlN2JmMWFiOGQ5YzQy
MDg1NjEwHhcNMjYwNzI2MjIwMDQ0WhcNMjYwNzI3MjIwMDQ0WjAzMTEwLwYDVQQD
EyhkY2NmNTlhMTA5ZjU3MTVmZGZmNzMzZDM0MzRjNmQ4ZTA2ZmNlYzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SZ5pb9a/ztpmmg9FLt38a6yxqkj
zb1sQox3A7BY5fwwNtOJf8IxXNM2awZJ4KHLhlDZdTt7mg9M4W2fRjHdgtCTWG1A
srG895SucPHQLqH86nu1RHL24sVw8QHIQhhpkaxMShjqzpOdzmpftSIFc5+RNYdJ
Hpod7jzh+gQghbGqOeJKVBGsxEVGs7svS61oDOnkdaH8khOBOoAILdKvsw7PbT/m
xyWlbbCxkiNrVz41Utu9a/WPkEG96Uwhgz3f/uHB2yPHvyLCCzfFla5uD2Zkuood
gAqtNDCvaIamIjWR/hCNJaeQPRwehZvuNyTaEsipgFL7Whcgx9bfDzTOZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzPWaEJ9XFf3/cz00NMbY4G/OwqMB8GA1UdIwQY
MBaAFHMmCq/v4u4HLkBi578auNnEIIVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zNmMyYjgtMTJkZi00NTUyLTlhMWUt
OGFkMGYwNjhkMTYxLzEvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zNmMyYjgtMTJkZi00NTUyLTlhMWUtOGFkMGYwNjhkMTYx
LzEvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARExi1yW
BK1qGSynTXTaby0Dn85mphW9Cp0Ye3eyIMqGYi38DyjExWBn7PrdHI+lc/W4eU7n
6BEjLSYOE3k/4tYHmjWTBvZpE03JdGDzw28JmZKoEiMuc1q85nCzMsoYrFex65wF
NHfAAfB2jLrTvql1pf5X5cQkCEGOY2NJyzoBH82LYwQvHPSVC8+RjFCQepiZ9XQp
yTyscm9ezCLynuyK71bGq/AzTaNDD7jyNW2yR2LI6y8t+/tVc+2pybhCxrfJSnru
zs3jfkv/SeDCUOTewJoUQL48YrY1B1Im4quBvRHXj2nOfccZOwk5Di+ruqxbcvW5
FRkeilquyKmCSQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:29 2026 by rpki-client