Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: WHTn2rgTtyOpR4Rw7tONXepUgAHsYXAyvQCsd61uNM0=
Subject key identifier: 26:68:99:13:DC:86:6C:43:C6:EF:20:65:C7:56:87:A3:88:6C:35:4D
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A17C9777D973526C7CFCBB5904C49A519E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0EFC
Signing time: Tue 27 Oct 2026 09:01:03 +0000
Manifest this update: Tue 27 Oct 2026 09:01:03 +0000
Manifest next update: Wed 28 Oct 2026 09:01:03 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: jpwlsV/wYHvM8vlGWyw9DayP2tE+qRverep491fgI34=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa (hash: l8C6p4QFcok/PgmLUUkYCpOJ4hYEhzcrxtTn9OMHuUo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:77:d9:73:52:6c:7c:fc:bb:59:04:c4:9a:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 27 09:01:03 2026 GMT
Not After : Oct 28 09:01:03 2026 GMT
Subject: CN=26689913dc866c43c6ef2065c75687a3886c354d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:d7:83:95:c6:3a:78:c9:0a:56:19:f0:98:
75:6c:11:a1:af:94:08:be:1b:44:fb:9a:08:d0:b5:
0c:7d:eb:38:92:32:1e:01:52:a2:e0:8b:76:c1:d4:
63:ad:16:d3:ef:e0:8a:45:e0:2c:d7:27:18:21:4b:
32:0c:c0:fd:13:1c:0b:a8:f1:9b:d0:dc:8a:e9:75:
9b:ce:e8:31:06:80:8c:88:b6:56:eb:68:6a:3e:12:
84:96:5e:ab:5c:3f:ef:e5:c9:e9:43:80:21:41:23:
40:48:f2:51:9e:ce:3c:c2:cd:f0:9e:26:f0:51:94:
fe:e1:4d:f1:e8:95:e8:df:ea:9e:e8:8b:e5:41:b5:
51:50:87:70:6c:51:82:e5:b2:7e:0b:74:69:6b:e4:
38:29:33:cd:88:62:a3:54:be:e2:8e:22:5e:d2:45:
f8:63:b0:f5:40:54:df:70:e9:4a:f9:61:79:57:94:
a7:d2:dc:ce:a0:f6:e1:34:ad:b2:12:6d:64:51:71:
d1:5d:46:4b:43:c1:81:ba:5c:5e:bd:db:b3:51:55:
ac:b0:01:76:33:75:34:83:9e:a9:32:7b:72:13:2f:
3b:55:24:bd:fb:78:f4:9c:58:8d:65:2c:e0:a1:d7:
3b:f1:ae:ca:30:2b:68:bd:a8:b9:a0:92:11:48:c9:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:99:13:DC:86:6C:43:C6:EF:20:65:C7:56:87:A3:88:6C:35:4D
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:d9:23:44:d8:de:d9:98:e1:9f:43:6f:3f:f9:dc:d2:1c:
21:b6:eb:64:87:a0:26:de:e5:33:61:31:24:1d:b1:45:29:78:
e0:aa:52:db:f5:3b:8f:39:9f:23:7a:f5:c1:40:f7:65:2e:46:
59:68:b9:1a:c4:e7:88:2d:8a:6c:5c:ed:cf:70:24:3e:c1:40:
ee:6c:be:07:68:8d:17:2b:28:fd:87:87:30:51:ff:69:7a:0e:
34:f3:61:4d:08:e2:6b:1f:a5:74:2c:32:38:8a:ac:f8:cf:fc:
64:7c:ec:d7:7a:66:7c:d6:4c:3b:ba:a8:65:6e:86:1f:f2:f2:
bb:04:fc:26:d2:69:5b:f6:20:ed:77:d8:0a:82:7d:61:5e:5c:
43:b6:b9:b0:31:24:56:e2:ca:04:59:0c:f8:95:4c:df:68:40:
15:6b:39:0e:86:15:88:f3:7d:b7:78:48:88:fb:7f:43:68:70:
80:a4:89:12:b3:8b:f5:59:32:ae:89:c7:d0:83:23:76:ad:25:
8f:a5:8d:a1:5d:5b:5c:9d:82:58:1b:0b:19:c8:9e:d9:50:91:
b3:41:16:a3:2b:59:40:c0:1c:4f:c5:15:bb:85:e4:6b:d5:df:
63:79:73:dc:25:7b:04:23:d7:ea:43:99:be:06:8c:e8:91:81:
e0:66:4a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l3fZc1JsfPy7WQTEmlGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYxMDI3MDkwMTAzWhcNMjYxMDI4MDkwMTAzWjAzMTEwLwYDVQQD
EygyNjY4OTkxM2RjODY2YzQzYzZlZjIwNjVjNzU2ODdhMzg4NmMzNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2orXg5XGOnjJClYZ8Jh1bBGhr5QI
vhtE+5oI0LUMfes4kjIeAVKi4It2wdRjrRbT7+CKReAs1ycYIUsyDMD9ExwLqPGb
0NyK6XWbzugxBoCMiLZW62hqPhKEll6rXD/v5cnpQ4AhQSNASPJRns48ws3wnibw
UZT+4U3x6JXo3+qe6IvlQbVRUIdwbFGC5bJ+C3Rpa+Q4KTPNiGKjVL7ijiJe0kX4
Y7D1QFTfcOlK+WF5V5Sn0tzOoPbhNK2yEm1kUXHRXUZLQ8GBulxevduzUVWssAF2
M3U0g56pMntyEy87VSS9+3j0nFiNZSzgodc78a7KMCtovai5oJIRSMnH9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZomRPchmxDxu8gZcdWh6OIbDVNMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFTZI0TY
3tmY4Z9Dbz/53NIcIbbrZIegJt7lM2ExJB2xRSl44KpS2/U7jzmfI3r1wUD3ZS5G
WWi5GsTniC2KbFztz3AkPsFA7my+B2iNFyso/YeHMFH/aXoONPNhTQjiax+ldCwy
OIqs+M/8ZHzs13pmfNZMO7qoZW6GH/LyuwT8JtJpW/Yg7XfYCoJ9YV5cQ7a5sDEk
VuLKBFkM+JVM32hAFWs5DoYViPN9t3hIiPt/Q2hwgKSJErOL9VkyronH0IMjdq0l
j6WNoV1bXJ2CWBsLGcie2VCRs0EWoytZQMAcT8UVu4Xka9XfY3lz3CV7BCPX6kOZ
vgaM6JGB4GZKMA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:10 2026 by rpki-client