Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: Kf+jxm+4nx+lDx0S1SIprj5J901ZyBI43SbAZh/FYec=
Subject key identifier: 87:92:23:EB:2A:4B:3A:2E:55:54:01:EB:68:FD:C2:12:A1:9F:CF:4D
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 019D38D3C360866F00845E21B971C6A474FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: L3dGAar1RUc5w8zwEAeHQxKGszDiFoYyn42TGkL1S50=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c3:60:86:6f:00:84:5e:21:b9:71:c6:a4:74:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=879223eb2a4b3a2e555401eb68fdc212a19fcf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:73:58:af:84:61:58:a7:43:fa:a6:84:ea:
dd:af:d2:c0:6b:8a:90:4f:e2:5a:2d:7d:22:7b:2f:
61:21:33:d8:b5:7d:c7:68:9f:4b:12:28:f2:62:ce:
d0:64:01:91:50:54:9b:66:6d:9e:5b:0d:cb:44:50:
ec:64:0a:dc:3b:db:58:4b:83:86:55:15:3e:09:18:
ea:3c:b1:55:b6:f3:39:8b:17:ee:8a:f5:c7:37:d0:
db:af:20:27:64:f9:34:ea:7a:bb:8c:47:a6:ee:d5:
12:32:1d:68:02:b9:fd:ed:d4:ca:68:c6:ca:fa:48:
78:52:76:3d:b0:23:8b:2e:36:d3:dc:78:15:9d:4f:
0e:51:5d:54:63:3e:8c:ad:73:81:91:b3:a0:a5:9e:
7e:88:99:19:ff:da:37:49:97:92:e9:97:cd:cf:84:
4c:95:bc:f0:8b:d5:53:b0:91:cb:3d:4e:ab:de:82:
f2:cd:8f:a4:ec:66:31:72:82:dd:d2:0c:2b:2d:38:
64:b8:75:af:68:67:e7:dd:7c:7e:2e:d4:41:b0:82:
52:f5:74:de:31:19:93:2d:6d:01:9e:37:d8:32:63:
b9:7a:7d:33:4b:98:6f:06:c2:84:44:e7:47:2e:1d:
ac:52:f3:e1:46:7e:33:2a:f3:d7:ae:13:b0:0c:38:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:23:EB:2A:4B:3A:2E:55:54:01:EB:68:FD:C2:12:A1:9F:CF:4D
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3d:e7:47:75:df:3c:93:d8:70:db:72:2d:16:21:27:05:9f:
24:ac:64:ca:e5:2a:36:53:fb:38:87:44:c7:c1:0e:af:44:fb:
db:e5:b8:be:72:36:8b:17:d7:6c:6b:13:68:ea:04:d8:53:b1:
52:33:9b:b0:ac:05:7b:5d:d7:4f:fe:97:41:e5:b4:de:cd:66:
14:7f:fa:96:52:db:d0:4a:ec:0f:b8:5c:89:05:fc:0a:54:b1:
4e:a7:8f:34:22:58:0f:9e:04:16:9e:8c:7d:dd:40:39:96:fa:
30:a5:04:a9:fe:11:b4:ee:75:ef:b3:8a:82:21:d5:b3:fb:94:
15:af:7f:d9:d2:74:9f:cc:a4:60:17:a0:0c:06:c8:c1:19:4a:
eb:a6:1b:f7:af:6c:6a:21:af:b4:c8:87:10:4b:57:10:c4:8e:
23:a6:b3:db:9e:d5:9e:25:cd:1f:c5:ab:92:ce:15:b8:a5:e6:
cf:29:35:cf:0a:9c:fe:f7:bb:6c:9d:22:9d:be:94:fb:e9:9a:
bc:04:c5:6b:16:50:49:ce:38:d6:df:de:59:34:5b:54:e6:01:
ad:9c:a9:65:b2:86:bd:2a:b6:87:15:10:2f:d0:0e:97:b9:74:
7a:f6:11:3b:ae:78:93:c9:01:74:d5:5c:0d:0d:4a:57:d8:76:
e0:45:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:41 2026 by rpki-client