Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: BwLId4lHqSoM5dguYG6YT8x1c1YfXhUBsqWjo1lwdJ4=
Subject key identifier: A5:81:18:FE:28:4D:85:45:12:E2:76:BE:FF:EB:51:DB:42:56:72:E0
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A12241243DF7A26F90E2B96144F60E7C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0ECD
Signing time: Fri 09 Oct 2026 20:00:56 +0000
Manifest this update: Fri 09 Oct 2026 20:00:56 +0000
Manifest next update: Sat 10 Oct 2026 20:00:56 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: 6EUlo7U+roYROkEfzSwuzHZKDdXs+7eDtI4CfiW4anE=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: vwQY97vonjbxh1XkzUzde2yV1fw.roa (hash: wZk00VJ4ASC7xKiTcPZZlql2bIhIHVpzXkrQAMaWtdc=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:41:24:3d:f7:a2:6f:90:e2:b9:61:44:f6:0e:7c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 9 20:00:56 2026 GMT
Not After : Oct 10 20:00:56 2026 GMT
Subject: CN=a58118fe284d854512e276beffeb51db425672e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:17:56:a4:97:56:a4:77:c6:01:a4:01:2e:
05:bf:ff:f5:9a:9f:d9:74:16:11:96:c0:dc:71:1b:
4f:bb:c5:d3:65:9d:51:e5:c4:7e:18:bd:c6:7f:96:
da:07:80:e9:23:89:e8:df:04:18:fd:2b:70:21:28:
30:51:ee:a5:90:eb:02:24:dd:73:d1:23:22:36:1c:
65:07:38:ae:92:4c:2c:b3:1f:5f:64:3f:99:e0:d9:
e0:92:7e:d3:30:ce:d4:c6:a8:c9:fa:8d:f7:3c:c6:
30:46:b6:a5:0f:a1:fa:8d:1b:be:80:75:96:08:ec:
4a:71:9c:a0:42:00:3d:de:a0:41:05:49:86:39:35:
e7:19:3a:1d:4f:59:4a:ac:77:dc:f3:e8:f5:d1:3c:
6d:db:4f:23:40:07:1a:b1:08:96:e3:62:5a:36:08:
61:40:f1:d0:64:ea:86:db:de:1f:5b:55:fd:ea:31:
be:00:21:40:9f:9c:dd:d1:32:21:bc:96:3d:03:d1:
9a:57:66:3c:1b:4c:fc:05:01:f4:38:6c:1f:b9:24:
e4:78:d7:96:d9:53:bb:24:99:d8:6f:e1:66:25:d2:
95:df:67:81:16:c8:53:7e:57:9b:06:20:28:9c:7a:
10:aa:b4:a4:63:6e:e6:59:bf:c0:4e:c8:1b:47:e1:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:18:FE:28:4D:85:45:12:E2:76:BE:FF:EB:51:DB:42:56:72:E0
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:97:dc:29:e9:a1:2d:74:6a:06:f8:80:0e:da:aa:6a:84:48:
07:ee:64:63:23:d2:20:ad:f7:c7:84:7c:5b:15:da:8c:06:ef:
0c:36:83:98:e7:3e:03:b6:c7:47:2f:2a:a4:b4:c2:ca:d2:59:
03:9e:02:1d:69:e6:ad:e8:71:bb:e6:d6:bd:79:ce:6a:67:6e:
42:61:ab:b1:a0:28:5f:b7:3b:00:be:cc:bc:6d:f7:75:06:e2:
57:c3:0a:48:df:ef:85:64:83:4c:1d:c4:07:42:ea:1a:e7:2d:
69:8a:38:c5:f7:7f:42:80:85:88:b6:b2:e4:09:d9:67:68:e1:
dd:56:dc:1b:70:f6:de:ee:69:07:52:bd:f0:74:42:fb:48:b2:
e8:a1:e8:92:0f:e7:1f:46:9b:3b:e8:f5:a6:16:76:f1:aa:e4:
9d:77:3a:86:d0:53:22:ec:e1:b2:76:4a:66:6e:ce:16:78:34:
f1:a5:a9:5f:56:91:15:76:69:06:a2:fe:ad:55:d6:bc:f4:39:
65:b8:cc:f3:d0:15:7b:bb:b3:fb:ee:6c:80:f3:96:4e:0e:77:
92:1c:b3:ea:bc:20:7d:8b:9d:f2:54:e9:ee:4c:d8:a3:fb:d3:
04:4a:3e:5a:69:b4:a3:50:38:2a:aa:6d:51:9d:25:01:24:6f:
f3:85:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:54:20 2026 by rpki-client