Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: 66GqRqZPWAtZZAZsBlvLJiSdzMp903rYm4hEgN3QOBM=
Subject key identifier: 5D:C0:F1:CB:29:27:32:AF:61:A9:DE:AD:2F:72:78:1A:DE:6F:D9:78
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 01A0016F71E29F84CB5A5EE0250297136D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 18:01:15 +0000
Manifest this update: Fri 14 Aug 2026 18:01:15 +0000
Manifest next update: Sat 15 Aug 2026 18:01:15 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: n3T7H36HeNyl3v5zFML2mR/r5z5EKuJ6VDFDnJywtKY=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:71:e2:9f:84:cb:5a:5e:e0:25:02:97:13:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Aug 14 18:01:15 2026 GMT
Not After : Aug 15 18:01:15 2026 GMT
Subject: CN=5dc0f1cb292732af61a9dead2f72781ade6fd978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:b2:c8:a7:45:a8:30:49:27:1d:82:79:b4:
46:47:b2:86:b4:a9:76:e9:e0:76:bb:28:1f:eb:2e:
d2:b0:f9:cb:f0:ba:b4:50:9e:d9:f0:82:39:52:c2:
fe:c1:ef:fd:12:93:19:a7:3a:34:78:8a:5d:4e:21:
6a:ce:05:e9:b2:0b:c5:95:0e:e7:78:1d:b3:5b:6f:
4b:82:15:72:26:81:83:85:ba:81:96:49:2e:e7:27:
c5:c2:aa:98:af:51:bc:27:47:87:77:61:0b:b0:37:
44:8c:a8:93:64:ac:4b:4a:bb:46:2e:65:43:e4:cc:
8e:c8:d0:7a:87:46:1f:82:f3:32:67:c8:d1:5d:fc:
fa:85:d3:66:cd:4c:d4:48:7d:bf:00:10:b0:4e:e5:
d0:15:aa:a0:3d:b4:6d:80:cc:82:5a:c3:02:6b:09:
c3:75:22:71:4d:79:4d:4a:d7:cb:b6:8b:e7:99:32:
03:5c:5e:f5:38:f3:75:d2:8b:0e:a5:67:29:49:7f:
ef:70:a1:92:5e:a7:fa:63:70:dc:32:df:63:da:33:
43:0c:e2:e5:0a:28:a0:4f:07:eb:6e:31:ca:39:42:
7c:2b:7f:08:02:ee:97:8f:00:2e:33:c5:94:9f:b5:
d9:ef:7c:a2:7c:c1:b3:e6:91:33:99:c2:1d:33:a5:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C0:F1:CB:29:27:32:AF:61:A9:DE:AD:2F:72:78:1A:DE:6F:D9:78
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:da:1e:62:ca:13:da:fd:94:02:96:6c:80:e0:81:fe:8f:
f0:af:b9:5a:1a:61:4d:c8:42:ed:f5:e3:63:a4:a9:df:09:9d:
b8:2b:8e:72:eb:c8:4d:16:fb:f4:d2:a9:39:21:66:66:da:ce:
5e:cb:42:db:2f:72:0a:3f:73:cc:f0:30:62:4b:1e:bc:79:37:
ae:30:a1:ee:25:27:24:1c:f2:06:67:dc:49:a7:43:5e:33:df:
21:41:e4:6b:f4:33:a0:df:74:fa:d3:46:ee:7e:ae:56:e7:ad:
43:82:10:29:e2:3a:ab:38:c8:54:a6:66:51:d1:e0:7d:dd:15:
09:33:bf:f3:7b:4a:63:67:d4:10:be:06:24:eb:45:5f:88:c6:
8a:22:2c:99:05:d4:53:34:5f:a9:f4:18:d5:f8:17:ec:27:2e:
a1:85:53:69:52:1e:31:4f:88:db:04:00:97:4c:fb:7b:a8:fb:
af:51:6b:45:4a:a4:96:c5:f3:60:2f:b6:5c:ea:f7:63:ca:a9:
5e:13:52:d6:0a:eb:8d:4e:25:32:d9:8c:5b:9d:da:0f:a3:a9:
e1:19:c6:e8:7f:57:7f:37:d9:60:eb:e9:76:46:c5:a1:a0:6b:
c7:96:92:7d:fc:2b:35:e7:cf:90:ed:92:0d:8d:e6:79:85:af:
52:51:4e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb3Hin4TLWl7gJQKXE20aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGIxYzc5YmZhZTEyYTViODdmMzVjOTk4YmI2MGIzZmE0
ZTY2MjEwHhcNMjYwODE0MTgwMTE1WhcNMjYwODE1MTgwMTE1WjAzMTEwLwYDVQQD
Eyg1ZGMwZjFjYjI5MjczMmFmNjFhOWRlYWQyZjcyNzgxYWRlNmZkOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eiyyKdFqDBJJx2CebRGR7KGtKl2
6eB2uygf6y7SsPnL8Lq0UJ7Z8II5UsL+we/9EpMZpzo0eIpdTiFqzgXpsgvFlQ7n
eB2zW29LghVyJoGDhbqBlkku5yfFwqqYr1G8J0eHd2ELsDdEjKiTZKxLSrtGLmVD
5MyOyNB6h0YfgvMyZ8jRXfz6hdNmzUzUSH2/ABCwTuXQFaqgPbRtgMyCWsMCawnD
dSJxTXlNStfLtovnmTIDXF71OPN10osOpWcpSX/vcKGSXqf6Y3DcMt9j2jNDDOLl
CiigTwfrbjHKOUJ8K38IAu6XjwAuM8WUn7XZ73yifMGz5pEzmcIdM6URtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3A8cspJzKvYanerS9yeBreb9l4MB8GA1UdIwQY
MBaAFAmLHHm/rhKluH81yZi7YLP6TmYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWIt
OWI3YzQ0ZGMxOTNiLzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWItOWI3YzQ0ZGMxOTNi
LzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWDaHmLK
E9r9lAKWbIDggf6P8K+5WhphTchC7fXjY6Sp3wmduCuOcuvITRb79NKpOSFmZtrO
XstC2y9yCj9zzPAwYksevHk3rjCh7iUnJBzyBmfcSadDXjPfIUHka/QzoN90+tNG
7n6uVuetQ4IQKeI6qzjIVKZmUdHgfd0VCTO/83tKY2fUEL4GJOtFX4jGiiIsmQXU
UzRfqfQY1fgX7CcuoYVTaVIeMU+I2wQAl0z7e6j7r1FrRUqklsXzYC+2XOr3Y8qp
XhNS1grrjU4lMtmMW53aD6Op4RnG6H9XfzfZYOvpdkbFoaBrx5aSffwrNefPkO2S
DY3meYWvUlFOAw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:23 2026 by rpki-client