Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 8Nn2HXn/EoKFbJuwpFyW1ralqvwaoxwQN2diObVrfZ8=
Subject key identifier: FC:D2:D0:B7:8C:CB:23:35:A5:0E:4D:07:17:55:E9:23:47:FA:E6:25
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A1A713F5EA7408F0CBFC39C290066CA0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0F12
Signing time: Wed 04 Nov 2026 15:01:05 +0000
Manifest this update: Wed 04 Nov 2026 15:01:05 +0000
Manifest next update: Thu 05 Nov 2026 15:01:05 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: to4ZKJEy+8kbDGdHFhQ2GWCHDVG6Nxks6ox+a67Lx7o=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa (hash: l8C6p4QFcok/PgmLUUkYCpOJ4hYEhzcrxtTn9OMHuUo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:13:f5:ea:74:08:f0:cb:fc:39:c2:90:06:6c:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Nov 4 15:01:05 2026 GMT
Not After : Nov 5 15:01:05 2026 GMT
Subject: CN=fcd2d0b78ccb2335a50e4d071755e92347fae625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:ab:68:4b:29:9a:e6:fd:88:81:6c:15:88:
29:e1:82:2c:c8:62:b0:7d:c9:66:7d:2a:cf:1e:34:
b8:9a:60:05:4c:16:3a:b6:bf:91:2b:32:4e:eb:f0:
ec:d1:31:06:4e:5a:80:bb:bb:08:12:f8:5a:64:bb:
c5:eb:4a:74:94:78:8d:ed:69:69:e7:8e:88:2b:b0:
83:7a:21:60:92:f4:eb:e5:0a:b9:fd:33:2a:00:10:
58:16:bb:04:d7:bb:74:ce:26:26:f3:39:76:19:68:
84:45:cf:f1:1f:5c:74:e4:d2:23:38:1c:87:06:e8:
6a:b7:4e:fe:00:44:21:e4:27:66:40:b6:89:71:85:
67:ed:71:9c:ab:f4:30:06:64:62:b1:46:5a:59:8f:
f2:7f:e0:fe:64:b2:56:5b:b5:00:94:b5:12:16:79:
05:78:b0:fb:a5:c8:1c:2c:22:68:78:a6:70:dc:fa:
34:74:46:d8:38:2d:c5:b4:92:f2:e3:2f:3f:a5:32:
2e:9d:25:df:23:ca:31:9f:42:6c:7b:ae:94:45:7b:
08:e4:78:25:37:14:d4:1a:90:e6:d0:f3:41:17:31:
55:76:08:c2:62:14:27:3d:ff:e7:6e:b1:3f:07:58:
21:5d:77:30:0e:68:e5:53:fe:bf:0a:9e:4b:87:6d:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D2:D0:B7:8C:CB:23:35:A5:0E:4D:07:17:55:E9:23:47:FA:E6:25
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7f:35:b1:03:b2:4f:64:01:fc:cc:f3:f3:f9:6c:86:0c:c6:
79:99:ec:72:b1:ac:b9:7c:5a:5b:d2:f7:51:ed:49:b6:84:e7:
e6:0c:83:e6:9a:8d:bd:62:6b:42:3c:a0:22:fd:c4:ce:9c:cf:
26:e6:a3:cf:dd:bc:ea:c6:c2:2e:7f:25:4f:92:9e:ff:7b:de:
1f:bf:99:96:ea:9d:f7:96:4e:be:14:46:ab:50:0a:27:f3:e5:
3f:ae:b6:69:5e:ec:59:e1:34:5d:64:19:43:42:6d:02:bb:c1:
56:93:32:7d:4e:46:f1:68:dc:23:26:c7:2d:13:b3:8c:1f:f3:
8a:9e:f9:73:27:32:67:3d:a5:f3:04:99:c1:3d:72:ad:05:f9:
b8:a9:e6:2a:13:f9:63:ab:ed:2c:cd:ca:41:6c:37:b4:3c:e9:
9d:0c:5f:59:8b:7c:12:18:2d:83:87:a0:5f:64:d3:4a:fd:a5:
ca:d5:27:13:54:8f:8e:0b:ae:31:fb:f5:56:f2:51:0d:f7:84:
0b:f3:48:57:1f:de:13:41:40:65:4e:97:08:e2:c5:ce:4f:27:
58:8e:0a:40:6f:be:fd:05:18:81:7c:25:33:1c:53:3f:94:ae:
fc:79:55:d2:32:b4:d5:f2:12:4a:52:5e:18:cd:58:8c:c0:9c:
a9:bc:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:47 2026 by rpki-client