
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: yk7aabaBXRmQQMFzlg7wCV8vsuK4aYnBC+aTrnZf5aw=
Subject key identifier: C3:B5:38:C3:75:50:23:BD:4C:89:90:5C:9A:2F:DE:BB:20:72:8B:3D
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019FB354453FB1A6BB3713AD5C97766A2D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0E06
Signing time: Thu 30 Jul 2026 14:01:12 +0000
Manifest this update: Thu 30 Jul 2026 14:01:12 +0000
Manifest next update: Fri 31 Jul 2026 14:01:12 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: TuP5QoGPMPBpGFv+SIhbE6OeM9oycsmS0y6MQ0IjBGo=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: Z9-G8jBlIUV8JXo4mpweyF3YJ1U.roa (hash: dj5hMhYWdWHJcm+043OLfnQ2pOg2DSF2L7CpAN4Js2w=)
4: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
5: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
6: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
7: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Jul 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:54:45:3f:b1:a6:bb:37:13:ad:5c:97:76:6a:2d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 30 14:01:12 2026 GMT
Not After : Jul 31 14:01:12 2026 GMT
Subject: CN=c3b538c3755023bd4c89905c9a2fdebb20728b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:89:8c:8b:de:b2:3d:d4:ab:a7:5c:2f:5d:
72:6d:b4:76:eb:5f:aa:6d:e7:36:c9:1f:6b:a8:7c:
2e:df:4c:ed:73:18:c7:bc:b1:54:c8:7d:82:f6:8e:
09:2e:75:f6:1a:46:a1:09:7e:5f:5f:11:22:56:0f:
7d:c7:06:88:2d:6e:ce:1d:6e:ac:bb:f5:f8:d3:d4:
d0:74:e6:ed:78:e7:cb:a6:59:53:12:75:1b:5c:b8:
f1:2b:76:52:04:a8:88:b1:4b:c1:3b:0d:bc:38:33:
88:a6:60:b4:9a:0c:97:5f:8c:a1:0d:ac:ca:7e:9b:
93:36:86:23:b7:5b:fe:2f:01:f6:79:0e:01:3c:eb:
d5:ad:0b:df:7d:63:38:96:70:04:0e:5f:7e:c4:81:
16:e2:b2:3d:a2:3b:4f:a0:6b:d3:8e:1a:b3:cd:13:
8c:3d:1a:1f:dd:07:e4:52:9d:c7:20:23:8c:fa:f4:
e8:30:37:f8:d0:ec:52:f5:68:c4:ff:1d:01:58:fa:
70:ac:d7:16:b7:ce:9f:34:8b:29:54:16:2d:a5:cd:
30:a7:d8:c7:52:45:de:90:dc:7a:6a:7e:e9:4e:47:
5f:1c:cd:b9:e6:eb:0e:19:6b:64:7a:e9:e3:55:6b:
fd:41:ff:75:fb:0a:7a:5a:37:d5:7a:63:1f:b9:36:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:38:C3:75:50:23:BD:4C:89:90:5C:9A:2F:DE:BB:20:72:8B:3D
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:57:f3:94:2c:18:3a:aa:01:1b:b8:45:67:a1:b4:ea:5e:9d:
05:af:95:8e:6f:df:32:bf:56:6c:96:4a:a9:78:26:41:27:fb:
58:eb:34:8c:bd:e6:03:13:1e:07:f7:53:11:e4:b4:46:6f:3e:
6c:d7:e6:4b:93:4b:47:ce:bf:a4:d9:a0:bc:ed:20:ea:a9:10:
64:90:d2:cd:36:38:e0:af:ad:d8:01:ac:e5:51:b7:d0:87:c4:
64:dd:76:6c:a6:7c:8e:ff:47:87:5b:48:4f:dd:b6:c0:8d:85:
40:8e:49:19:e6:c7:96:81:61:df:a6:ef:a1:28:e2:30:ca:60:
d9:fd:03:3a:25:76:8f:e6:1e:88:47:95:98:58:d2:73:79:08:
eb:e3:23:b9:94:3c:1f:f9:62:2d:ba:c1:9c:f1:c7:d2:18:73:
69:d3:e7:12:7f:7f:e6:87:e1:33:ad:f1:dd:73:a1:43:6e:cb:
7c:3a:2d:42:1d:06:5a:08:79:df:09:d4:8e:64:3a:7f:d6:ac:
22:b6:b1:75:77:f4:85:e6:4f:db:dc:8d:2f:69:50:32:ea:f2:
36:8a:54:e8:98:69:9a:06:63:5d:3a:9c:31:3d:ed:e7:a4:4c:
7d:de:70:c9:b9:0d:f5:89:7f:37:c9:4f:e9:7c:b9:94:87:e3:
e0:68:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 20:52:51 2026 by rpki-client