Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: M7wEak0wnbsuGh6NHrE84SQ3CWPSGTiiOw+LbBr6PN4=
Subject key identifier: 0E:77:D1:5B:A7:EA:FA:AB:05:5A:2C:3B:19:8B:53:8E:F4:A8:BD:AA
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 01A140151AD2E0001B328F6D4A27DC0E7A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 15:01:27 +0000
Manifest this update: Thu 15 Oct 2026 15:01:27 +0000
Manifest next update: Fri 16 Oct 2026 15:01:27 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: Ilp+xxV7UXmvfTSVehBoOG2cg7nCQ+qjhZz2ffdu/nk=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:1a:d2:e0:00:1b:32:8f:6d:4a:27:dc:0e:7a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Oct 15 15:01:27 2026 GMT
Not After : Oct 16 15:01:27 2026 GMT
Subject: CN=0e77d15ba7eafaab055a2c3b198b538ef4a8bdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:0d:83:13:88:e1:43:a6:d2:24:c4:c7:e3:
26:23:be:0a:8d:6b:05:7b:bb:8d:59:e3:f0:06:5a:
52:88:b6:02:66:45:81:35:d5:eb:e1:1a:22:d9:7b:
1d:51:40:13:7a:e9:d5:c5:e9:6a:8e:d2:fc:92:dc:
f0:c6:27:05:97:83:58:79:b3:cd:8f:d5:50:78:d6:
76:04:cd:30:9f:b7:b4:61:64:64:c3:16:2d:52:90:
c1:3f:b5:52:62:18:00:14:6b:f9:07:bb:a5:64:b5:
78:89:b4:b1:a8:de:9c:8d:23:ef:2f:e1:ef:c3:69:
43:66:c2:14:7f:97:d2:bc:ff:ea:fb:8e:18:8a:dd:
8f:e5:f7:9d:e7:79:35:a1:e8:b3:3b:40:b9:7c:aa:
31:11:d8:54:ce:cf:51:14:f8:43:36:dc:ba:38:50:
68:2e:e7:97:1c:4a:5f:ea:03:ef:f2:5f:23:0f:a5:
73:f8:d1:17:8b:ca:ab:61:b9:02:f9:ac:b8:42:2e:
19:aa:b9:e4:79:19:4b:e8:12:88:5c:0a:9a:1f:e2:
28:37:a9:c2:6d:bb:c1:f2:f4:66:cc:d3:63:d2:68:
fe:8d:05:40:fc:a1:e5:e2:cf:87:ab:48:19:dd:00:
57:56:94:55:4e:13:92:66:31:53:98:9d:8b:56:ea:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:77:D1:5B:A7:EA:FA:AB:05:5A:2C:3B:19:8B:53:8E:F4:A8:BD:AA
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:be:74:4c:67:d1:22:a8:43:19:2b:e0:fb:8d:8a:c3:9e:12:
b4:63:93:ac:0e:58:67:41:47:d6:e4:fc:03:7c:e0:2f:c1:01:
3b:11:b4:30:01:90:e0:a9:cc:7f:b0:36:78:07:14:ea:7a:35:
df:41:c8:46:3d:8b:d7:9f:44:9c:7d:a6:a2:90:e4:f8:9b:6c:
86:2c:52:fe:9a:23:dd:9c:5d:bb:c0:be:8f:4a:79:e9:e6:36:
15:17:e7:91:73:27:03:2a:33:24:14:c6:2a:13:a6:24:88:1e:
72:e6:5c:9c:25:2b:96:b2:5c:2a:c8:83:ea:bb:db:ff:50:7b:
d8:bc:ad:8a:21:19:25:9a:47:33:8b:6a:77:c0:42:46:8b:9e:
66:59:21:42:e1:10:07:02:d6:5f:91:21:a7:24:cd:10:c1:13:
f4:ad:d8:81:68:b7:eb:0f:8c:27:58:26:82:30:df:c3:ad:78:
55:14:10:0d:86:89:c4:18:fc:d2:58:45:28:62:de:b6:4c:5f:
4c:51:76:da:09:cc:13:89:1c:85:45:be:73:3c:57:64:88:dd:
84:d3:dd:8f:56:c0:24:de:90:70:41:cf:ea:0d:4f:8d:56:96:
48:8f:37:1d:48:01:be:bf:be:3f:e7:ef:15:2f:fc:c7:f9:24:
a1:68:be:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFRrS4AAbMo9tSifcDnoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGIxYzc5YmZhZTEyYTViODdmMzVjOTk4YmI2MGIzZmE0
ZTY2MjEwHhcNMjYxMDE1MTUwMTI3WhcNMjYxMDE2MTUwMTI3WjAzMTEwLwYDVQQD
EygwZTc3ZDE1YmE3ZWFmYWFiMDU1YTJjM2IxOThiNTM4ZWY0YThiZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGgNgxOI4UOm0iTEx+MmI74KjWsF
e7uNWePwBlpSiLYCZkWBNdXr4Roi2XsdUUATeunVxelqjtL8ktzwxicFl4NYebPN
j9VQeNZ2BM0wn7e0YWRkwxYtUpDBP7VSYhgAFGv5B7ulZLV4ibSxqN6cjSPvL+Hv
w2lDZsIUf5fSvP/q+44Yit2P5fed53k1oeizO0C5fKoxEdhUzs9RFPhDNty6OFBo
LueXHEpf6gPv8l8jD6Vz+NEXi8qrYbkC+ay4Qi4ZqrnkeRlL6BKIXAqaH+IoN6nC
bbvB8vRmzNNj0mj+jQVA/KHl4s+Hq0gZ3QBXVpRVThOSZjFTmJ2LVurjGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA530Vun6vqrBVosOxmLU470qL2qMB8GA1UdIwQY
MBaAFAmLHHm/rhKluH81yZi7YLP6TmYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWIt
OWI3YzQ0ZGMxOTNiLzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWItOWI3YzQ0ZGMxOTNi
LzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL50TGfR
IqhDGSvg+42Kw54StGOTrA5YZ0FH1uT8A3zgL8EBOxG0MAGQ4KnMf7A2eAcU6no1
30HIRj2L159EnH2mopDk+JtshixS/poj3Zxdu8C+j0p56eY2FRfnkXMnAyozJBTG
KhOmJIgecuZcnCUrlrJcKsiD6rvb/1B72LytiiEZJZpHM4tqd8BCRoueZlkhQuEQ
BwLWX5EhpyTNEMET9K3YgWi36w+MJ1gmgjDfw614VRQQDYaJxBj80lhFKGLetkxf
TFF22gnME4kchUW+czxXZIjdhNPdj1bAJN6QcEHP6g1PjVaWSI83HUgBvr++P+fv
FS/8x/kkoWi+ag==
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:32 2026 by rpki-client