Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: ssYgyE+9iitVnQCn+XoMTxKWzCYtypPBewTyyqm0j0U=
Subject key identifier: 2D:9A:2A:4A:BD:3D:5F:67:07:86:0E:88:C3:F8:D4:C2:7B:CD:09:C9
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 01A0EAAEF72DC7201919EAFF7BD260C9B28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 01:02:10 +0000
Manifest this update: Tue 29 Sep 2026 01:02:10 +0000
Manifest next update: Wed 30 Sep 2026 01:02:10 +0000
Files and hashes: 1: VET9JzpN742Kxi_PTAzuOfpLzjw.roa (hash: tmq0ncjsAGMD4Bt4MuYWz/LdnVYgu2OPec/Dp5evxVU=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: uQTPw8l3jN3b81KIFOzraHD+fI9oxa2a5Q9CLp8K/vY=)
3: sOAqQxWMDpHDPx74UHl3gJfcmkY.asa (hash: nLCiNLHUaF9d6fXPw1n+VZdVFlVNoVf9kE2TkaD4JpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:f7:2d:c7:20:19:19:ea:ff:7b:d2:60:c9:b2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Sep 29 01:02:10 2026 GMT
Not After : Sep 30 01:02:10 2026 GMT
Subject: CN=2d9a2a4abd3d5f6707860e88c3f8d4c27bcd09c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:76:89:3f:b1:c1:12:cc:b6:c6:3e:97:19:
e8:92:64:f0:ba:aa:21:d7:8c:18:bd:d8:8d:a9:77:
15:2f:43:fa:71:f4:34:98:31:9c:97:e2:65:a9:cc:
3f:fa:ac:4b:b2:8d:db:d5:3e:eb:e2:ef:33:dc:81:
64:b7:fc:dd:90:36:a5:e7:91:45:44:f2:f9:bf:49:
7c:5a:e9:f0:64:34:db:4e:aa:20:8e:f5:e7:15:a1:
39:02:6e:6f:9c:04:68:fa:45:48:53:99:f9:7d:91:
6e:84:5a:41:d2:0b:9c:35:3b:97:d6:f1:24:92:cf:
25:28:9e:26:b6:7e:0c:7d:9e:b9:8b:b4:e3:ae:09:
29:3e:60:a3:9d:b8:17:fc:12:e0:31:2f:88:2f:59:
ec:d4:0e:aa:d3:18:25:09:34:14:c1:9f:61:e1:a2:
5c:8a:63:55:1c:15:3a:c5:86:99:59:bd:30:c1:d8:
b8:cc:1a:15:13:55:6d:6c:a4:27:35:06:0d:aa:38:
7d:e1:b0:fd:38:e6:e5:3e:29:c2:bc:95:89:15:1b:
24:c9:de:b3:cd:aa:ac:c3:1e:74:99:ee:f0:1f:1f:
7c:75:00:04:17:21:df:cc:9f:a3:56:96:2a:fb:69:
e8:a0:06:40:b0:7a:4b:27:6a:31:43:f0:62:f8:1b:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:2A:4A:BD:3D:5F:67:07:86:0E:88:C3:F8:D4:C2:7B:CD:09:C9
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:75:06:cf:67:aa:ac:64:e4:78:4f:fa:22:43:ec:ee:16:ff:
e1:73:bd:2b:57:bc:0e:e1:ef:96:fe:fc:9e:72:87:60:c4:2e:
01:41:4a:e1:c3:32:e8:54:62:97:fa:36:6a:89:34:fd:db:9d:
79:1d:13:ed:f0:ab:4d:db:ef:ae:03:41:3c:68:c9:20:23:60:
34:25:c6:45:1d:70:4a:cf:08:a6:da:f2:1c:98:3e:56:5b:de:
e9:71:4b:2f:f4:66:84:37:4c:a6:1d:c4:43:34:2d:2f:c1:98:
ad:54:4d:1a:f5:45:ab:1f:4e:55:74:b5:e3:31:69:23:06:1f:
44:1a:d6:da:f0:f7:b8:6b:a7:99:ea:25:8f:ee:fc:52:0c:f4:
71:1a:f7:d3:28:39:2c:54:30:83:79:f9:50:31:f6:81:b6:c3:
f7:35:0a:f0:b0:c1:49:f4:93:71:5b:6f:ff:29:39:5a:49:b2:
01:fe:8a:ea:1a:2d:34:f0:8d:2f:f3:c4:38:54:d1:6b:cd:4b:
2d:f6:1b:3a:78:66:78:ca:31:36:61:38:24:db:e0:46:5a:bb:
ac:b0:bf:03:01:10:43:00:94:67:c6:13:57:dd:48:46:d6:61:
97:51:30:4d:47:bb:c4:8a:ce:8f:b2:3f:31:a9:66:a8:68:6a:
5e:0b:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:07:24 2026 by rpki-client