Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: hpv67jFtWPgSHz75eFwzLIGgxwWwCqfDLPEgOXYnsv4=
Subject key identifier: 5A:63:32:23:06:B4:09:9E:E3:A8:FA:8A:F5:38:59:E0:4E:EC:88:AA
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 019EACE6104076C2BA529BE4FE5BD6FDAA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 101B
Signing time: Tue 09 Jun 2026 15:00:18 +0000
Manifest this update: Tue 09 Jun 2026 15:00:18 +0000
Manifest next update: Wed 10 Jun 2026 15:00:18 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: jU1QQjQAb1CHH/VDYrxx44AgBtDjWUTy9lqsrMttyTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:e6:10:40:76:c2:ba:52:9b:e4:fe:5b:d6:fd:aa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Jun 9 15:00:18 2026 GMT
Not After : Jun 10 15:00:18 2026 GMT
Subject: CN=5a63322306b4099ee3a8fa8af53859e04eec88aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:c3:4f:bd:02:84:1c:03:0e:8c:40:f7:80:
d8:f2:2e:e5:ae:8e:f8:c9:e2:c4:99:d2:f3:41:fa:
2d:08:bb:17:9f:40:05:c5:b9:2d:09:29:e0:f2:40:
b0:ff:8e:51:6c:4c:f4:ca:e5:f7:a4:5b:cf:e1:b4:
ff:d3:f7:57:5e:29:4d:9e:1c:37:a1:0e:ea:cc:6d:
32:34:99:cd:76:88:15:cd:c4:39:51:ff:04:fc:20:
2c:49:6e:31:5e:7c:fb:36:56:86:e9:44:72:06:8b:
42:54:4d:83:78:75:aa:22:02:5c:86:15:13:e0:c5:
69:6e:8a:f7:45:bc:6f:39:6b:87:bb:f2:0b:d2:13:
f8:d3:72:1d:ee:c3:ac:88:41:99:54:00:56:90:3c:
a4:ef:11:e0:7a:02:20:33:62:32:04:74:64:de:eb:
87:a8:a2:8d:22:6d:5c:cd:05:72:10:89:26:da:46:
76:25:54:41:b7:5f:6d:f3:24:dd:28:cb:35:c4:4b:
c5:8a:e7:e7:cb:ec:9f:0c:5b:e9:de:3c:b5:66:5f:
38:fe:15:90:90:f7:d5:f5:c1:f5:0f:ec:48:16:f0:
56:fc:b6:0d:16:ad:6f:73:43:72:cc:19:a1:87:99:
44:d3:19:70:ec:b0:7c:f6:d7:b2:d1:48:e5:f2:1a:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:32:23:06:B4:09:9E:E3:A8:FA:8A:F5:38:59:E0:4E:EC:88:AA
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:13:c8:84:c9:ec:d4:4a:8b:23:c8:0e:d7:0f:ea:ac:ec:
65:c2:bd:e8:70:8a:a4:d7:95:2e:dd:2b:08:27:b6:f4:54:43:
e5:44:b2:d5:7d:48:fa:20:e9:e6:fd:6d:88:09:11:1b:76:37:
be:48:6c:08:db:9d:49:3b:c3:df:b8:bc:d3:8c:b2:d1:81:84:
bf:07:79:99:bc:57:ed:d5:9e:c0:59:db:4b:cd:ba:17:c8:64:
28:e3:9d:89:44:30:33:10:14:74:25:a6:1e:1d:13:f7:eb:0b:
a9:4d:a8:14:9c:97:a4:0d:99:3e:01:e1:35:87:5b:ad:4e:1a:
b8:83:02:14:8e:3b:de:eb:43:69:68:db:0c:9e:fa:85:2d:ec:
e0:05:3e:f0:4d:ea:83:2f:15:73:1c:c3:98:3e:d3:8f:00:7f:
8c:27:1b:a4:f2:cd:16:58:d9:ed:b9:6c:ca:37:da:4f:7a:b5:
e5:ff:4d:68:10:d4:f8:0a:1e:c8:f4:c1:fc:be:07:d6:8e:12:
ab:fb:5b:f3:ea:78:d6:76:23:42:79:1a:fc:5f:49:82:7a:1e:
ea:96:7e:4e:46:64:c5:d5:6e:cd:e9:7f:97:68:0a:63:de:d1:
f1:9a:7b:af:3b:0a:36:0b:71:30:90:77:92:67:32:e8:d8:1d:
30:d6:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 23:02:25 2026 by rpki-client