Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: DwDFBfAWiT8h1Yctxl+cRy7AatspDK3bb9HDi/ab0BU=
Subject key identifier: 38:1E:63:93:F6:C2:3C:90:2F:62:E2:12:F8:F0:0D:48:9C:AC:05:65
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 019F17C27B1BFD98C76B59262793E348EC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 09:00:48 +0000
Manifest this update: Tue 30 Jun 2026 09:00:48 +0000
Manifest next update: Wed 01 Jul 2026 09:00:48 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: HJsiQHH/L0eHTS1ayuve0Wiuly+beYQ13kEttP97w74=)
2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:7b:1b:fd:98:c7:6b:59:26:27:93:e3:48:ec:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jun 30 09:00:48 2026 GMT
Not After : Jul 1 09:00:48 2026 GMT
Subject: CN=381e6393f6c23c902f62e212f8f00d489cac0565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:37:ea:71:71:c7:f4:11:f2:b1:94:59:8b:
87:6b:d5:bd:5b:74:52:1c:36:c4:2d:4c:95:3c:37:
e8:09:dd:9b:83:93:20:d8:57:8b:78:52:8b:c5:cc:
4f:d6:6e:d9:59:f0:32:58:8f:9a:40:e1:95:6e:ed:
df:b8:06:11:fb:00:b6:29:96:7f:b4:0b:ee:9e:62:
22:ca:5d:27:3c:82:48:13:b3:4a:5c:d3:c2:b5:7f:
8c:ab:89:b5:b5:28:f9:42:df:bc:6b:ab:56:16:9a:
af:0a:27:35:9d:63:c4:ee:ee:42:1b:f4:46:e6:88:
41:0a:b9:98:2f:a2:0b:f6:29:77:b6:2c:75:af:58:
b9:4b:73:e9:a0:71:2f:89:87:b4:e4:f9:5f:83:6d:
07:a4:f1:ee:97:b3:97:d0:b5:b0:98:f0:3a:a1:09:
33:a9:6b:70:52:c2:c2:15:96:46:94:39:9a:24:94:
90:c8:05:9e:ab:6d:e6:7c:74:c2:04:f7:a8:36:d7:
ec:43:2d:1b:16:c0:3b:91:66:f6:79:c9:fa:ac:d9:
15:d4:b6:0e:72:9b:96:08:52:bf:23:46:d7:97:6d:
e0:a2:33:cc:db:48:aa:97:0a:15:97:c9:a7:40:bf:
b5:19:05:50:03:66:9f:23:4c:a0:28:6f:89:a8:af:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1E:63:93:F6:C2:3C:90:2F:62:E2:12:F8:F0:0D:48:9C:AC:05:65
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dc:35:a0:41:08:d4:45:af:ad:e8:fa:e1:8f:46:64:f6:fe:
af:a3:fe:56:87:40:c3:6a:c3:84:7d:03:8e:e5:07:1f:27:e4:
97:9f:dd:c1:df:0e:c9:f2:c5:8e:32:3c:e9:07:2a:71:a8:b0:
7a:3f:ff:db:b4:2e:87:b8:05:55:bc:41:3a:43:27:ae:32:5d:
82:37:10:0d:15:04:9b:7f:5f:2c:e6:4a:9b:49:b4:5d:1d:a4:
19:ec:60:4c:9f:55:bc:21:dc:8f:61:43:7c:54:bd:10:63:dd:
a9:6e:2a:64:18:22:00:87:5f:98:86:8a:ff:47:a1:dc:59:e8:
27:6e:63:bf:67:71:a2:00:3f:49:4b:0d:bc:d9:6b:b7:87:82:
15:f3:63:37:08:24:eb:e5:cd:31:9d:dc:49:54:b0:18:9d:3c:
7e:3d:4d:e2:2b:5a:09:5f:a9:1d:01:d2:b0:7f:3b:88:5f:b2:
2b:6a:db:68:b6:24:b7:2f:dd:75:ee:9d:f0:60:14:05:10:1e:
5d:de:d6:cc:92:4c:85:6c:d8:22:a0:35:59:4f:a2:24:d7:3d:
78:0a:e0:00:0b:da:4e:25:93:66:08:e1:1f:8c:32:4c:de:f8:
62:56:c3:c8:55:66:68:ca:e1:51:0c:13:e9:4c:28:3b:23:35:
c7:de:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:04 2026 by rpki-client