Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: DGxz4K+W57zEFaD9URZePxEtFwgE6ee2AavkYelq7II=
Subject key identifier: 10:4E:0A:CB:1E:D7:3F:65:43:B0:14:40:97:E7:15:65:D7:97:0D:5B
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 019F859F4F0D7662A0704F7FA77F1F124DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 11CD
Signing time: Tue 21 Jul 2026 17:00:37 +0000
Manifest this update: Tue 21 Jul 2026 17:00:37 +0000
Manifest next update: Wed 22 Jul 2026 17:00:37 +0000
Files and hashes: 1: BUE7EIoRZVPe0cNnXcD22KEMCwA.roa (hash: F2S7PMb1ZI5mW1mAQMP7O8Np+g1NdICYYD40JG2Q/yc=)
2: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: cSsWuwKk3USNtutrU1Y2lgZ0OKzpG5NhHhJqQVnN1Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:4f:0d:76:62:a0:70:4f:7f:a7:7f:1f:12:4d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Jul 21 17:00:37 2026 GMT
Not After : Jul 22 17:00:37 2026 GMT
Subject: CN=104e0acb1ed73f6543b0144097e71565d7970d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:0c:f0:34:df:fc:8a:a0:f1:83:11:dd:23:
08:a2:24:3d:2e:63:2c:cf:0f:aa:55:7b:a8:d7:e8:
d0:47:82:de:62:0f:f5:24:0e:2b:fc:d2:f7:7d:5c:
f4:22:7c:03:db:0a:d9:88:0f:4d:71:c4:f8:04:f3:
84:7a:6f:8d:12:be:d6:eb:6e:13:09:de:1e:7f:31:
02:40:cc:1c:6c:bc:15:00:88:04:64:3e:58:ed:02:
df:92:e5:08:db:db:fe:4d:2c:a2:a3:10:bd:b4:1e:
51:9e:01:db:1b:6b:03:09:aa:65:cc:3e:46:be:b4:
91:0f:34:4f:5a:ce:31:71:a2:fe:23:8f:a0:72:1e:
11:ee:6c:57:54:5d:11:77:e4:e9:29:3e:f0:fd:b2:
6d:cf:c8:0a:4d:b2:08:8f:f5:1b:98:06:8b:b5:f8:
f9:5f:f3:59:99:28:8a:8b:24:75:39:1a:ec:cf:71:
48:3f:f2:38:ef:c9:5c:57:43:e3:0b:52:22:ad:bc:
c8:7c:50:b5:30:f3:f3:1d:88:c7:46:ce:0e:3b:25:
34:54:93:0e:fa:c8:39:62:95:72:fc:01:af:8b:18:
dc:36:de:d1:e1:da:cd:6a:e8:5c:65:3d:7b:db:7e:
c5:30:61:a8:99:62:b6:9c:83:c5:d4:62:3d:7f:5f:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4E:0A:CB:1E:D7:3F:65:43:B0:14:40:97:E7:15:65:D7:97:0D:5B
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bc:f3:01:f5:87:3c:71:bc:a2:74:cd:65:95:da:9f:a5:e0:
89:90:bb:4f:69:8d:12:80:9e:52:c0:08:e6:3e:fd:0d:c0:85:
81:ad:a1:12:81:c4:56:94:22:a3:93:6d:dd:46:c7:86:58:c3:
f3:2f:b7:94:02:13:a9:ee:14:5c:7f:d6:59:5a:e4:64:1a:eb:
21:e1:13:dd:6c:2f:b2:23:69:40:68:47:47:36:dd:24:ce:de:
36:35:7c:50:3d:28:be:c8:cd:bf:f0:f4:91:ea:81:6a:fe:d2:
43:1f:0c:1e:4c:f1:55:84:34:54:50:44:e8:97:0f:b6:81:61:
2e:45:26:02:fd:24:47:e7:a7:9b:ca:cd:96:a8:43:60:d4:5b:
ec:08:7c:47:04:ef:db:90:66:35:59:b0:66:08:64:90:fd:27:
c3:b2:b9:41:21:b0:8f:f9:ce:f4:26:79:2f:32:d7:b2:43:fc:
66:6c:a0:6c:7b:3e:8d:f3:4e:21:70:e0:6d:0e:01:5f:3c:52:
6f:44:75:56:1d:3d:8a:15:30:e7:2d:70:20:e1:1b:b1:9f:33:
c8:38:8c:ce:8e:f2:49:8d:c8:ab:cd:55:35:87:d8:bb:6a:c9:
93:36:61:cf:8a:b4:2c:c9:d6:1c:48:8a:78:33:8f:30:91:e8:
73:d7:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:19 2026 by rpki-client