Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: iSvGb0I3+mpE5ND932l27phqr4ATZR8txTO2xE5fZlY=
Subject key identifier: 6A:8A:D4:92:A8:89:19:A4:06:83:A4:CE:B2:08:F2:2F:AF:DD:4D:26
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 019E2FCD714CE5566878782ACEBB0D701BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 111C
Signing time: Sat 16 May 2026 08:00:53 +0000
Manifest this update: Sat 16 May 2026 08:00:53 +0000
Manifest next update: Sun 17 May 2026 08:00:53 +0000
Files and hashes: 1: BUE7EIoRZVPe0cNnXcD22KEMCwA.roa (hash: F2S7PMb1ZI5mW1mAQMP7O8Np+g1NdICYYD40JG2Q/yc=)
2: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: 3YvdgIM8TU0Gnig9tarzbRGhDx7x5wonZQXLSjuKUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:71:4c:e5:56:68:78:78:2a:ce:bb:0d:70:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: May 16 08:00:53 2026 GMT
Not After : May 17 08:00:53 2026 GMT
Subject: CN=6a8ad492a88919a40683a4ceb208f22fafdd4d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:ef:a3:eb:bf:29:1b:dc:f2:4b:0c:8f:ba:
59:c4:79:2c:01:f2:89:6f:0c:3f:25:57:86:57:fa:
64:3a:1b:d7:41:1e:3f:bb:7b:41:a7:ec:96:07:a8:
30:24:55:dc:75:9a:1e:99:e7:e0:3d:27:a7:15:49:
58:72:f3:d6:b1:a5:bb:46:78:92:3d:de:96:a7:33:
ef:77:8f:88:e1:90:f7:8b:89:5e:e8:04:5b:00:55:
7b:0d:f1:ad:61:ee:bf:86:01:18:bd:4a:da:54:25:
c2:e9:0e:39:33:5e:5d:ff:1b:7b:fc:c8:37:e8:0c:
2d:98:48:d6:8d:eb:f5:80:29:6b:3b:7e:47:a1:6a:
9d:0c:58:74:63:72:c8:cc:b5:f2:32:e8:fd:c8:37:
ee:ec:81:b7:7c:9e:db:cb:9e:db:d2:05:cb:bc:2a:
c5:ca:57:ee:b7:e8:57:3f:f1:e5:f1:56:79:03:bb:
73:9a:7e:50:34:2f:10:4e:4f:69:ab:c0:79:9b:a3:
51:5e:dd:4c:17:82:dd:d0:1a:fe:92:d3:64:04:9c:
1a:e3:f5:54:fb:7c:56:c3:bb:83:64:e5:70:6b:a3:
de:92:b7:f1:49:da:2a:bf:9f:18:5e:63:f2:df:a0:
cb:b3:21:28:b5:9c:46:92:8a:7a:35:9c:6c:bc:18:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:D4:92:A8:89:19:A4:06:83:A4:CE:B2:08:F2:2F:AF:DD:4D:26
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c4:e6:47:50:14:4a:11:35:59:ec:ba:0f:78:c0:44:4e:29:
b3:13:d0:7b:97:7a:59:a6:53:15:7d:e9:6a:22:7c:2c:28:58:
1b:3f:f1:f0:56:a3:64:b4:97:04:b1:7f:93:49:f3:7e:e5:f0:
39:0c:14:db:d8:16:b5:f1:72:a1:12:90:98:1c:cc:ed:a0:16:
b8:24:f3:75:5c:35:d1:f7:40:81:b7:b5:61:c2:a3:ef:e2:f4:
54:f4:7c:7e:87:13:55:3b:4f:8b:dc:ff:c6:fd:5d:b4:a1:fc:
d2:f2:17:f8:b2:75:02:e3:5d:2a:3f:16:1c:bf:a9:66:c2:ec:
1c:9c:f3:3b:73:fb:0a:90:52:9a:3f:21:07:8a:5d:d5:9e:3b:
f0:9c:67:b1:2e:86:b4:b3:29:0f:d1:05:4e:55:01:b0:0c:77:
83:b7:96:5c:d7:f2:b5:ee:60:7c:ac:b6:8d:54:65:73:22:d5:
a1:eb:95:92:99:ce:f7:88:0a:79:2f:20:54:59:ee:7e:76:16:
80:b7:ba:94:29:f6:ee:6e:23:d6:07:20:a7:ce:03:f9:f9:b5:
4a:d8:a6:1d:da:81:89:89:86:ab:14:e7:25:34:d2:c4:36:60:
4a:b4:21:aa:fa:40:dc:71:2f:dd:d5:28:0b:b4:31:76:5e:a8:
3a:d7:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:49 2026 by rpki-client