Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: Jb1F2D8Uh2UPrY2OJoIeTjxSFVTQbjCB+QfXNvFdf8c=
Subject key identifier: 8F:C5:D9:80:15:88:5C:FF:FA:97:EB:56:EB:93:1E:9A:52:C7:2D:18
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019FA3E0EA3DF25CC4CDADCE0807DBC0FCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0DFE
Signing time: Mon 27 Jul 2026 14:00:53 +0000
Manifest this update: Mon 27 Jul 2026 14:00:53 +0000
Manifest next update: Tue 28 Jul 2026 14:00:53 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: NJKST3CHA/H23VRZHfwh3sOCYcgQ4brtKK50bC3O8YU=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: Z9-G8jBlIUV8JXo4mpweyF3YJ1U.roa (hash: dj5hMhYWdWHJcm+043OLfnQ2pOg2DSF2L7CpAN4Js2w=)
4: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
5: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
6: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
7: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:ea:3d:f2:5c:c4:cd:ad:ce:08:07:db:c0:fc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 27 14:00:53 2026 GMT
Not After : Jul 28 14:00:53 2026 GMT
Subject: CN=8fc5d98015885cfffa97eb56eb931e9a52c72d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:f4:10:4f:2a:23:61:c6:2b:ba:5d:f1:88:
57:02:c6:f3:8d:63:5f:83:73:bb:94:3b:24:58:e5:
74:20:0e:64:84:5d:89:40:a5:d0:4a:21:1d:ff:21:
11:ac:e0:e2:1e:3e:c4:51:30:5a:d4:63:72:b6:37:
45:e0:c6:7e:36:b7:f6:fa:6b:10:eb:03:65:41:7c:
a2:ff:49:e2:04:b0:7c:32:19:8a:56:78:dc:22:73:
22:5e:9b:ef:4c:40:7a:cb:f1:3e:d3:f6:9b:c0:9a:
5c:c1:2b:89:3d:a3:b3:7b:31:1e:a8:99:d9:0f:7e:
00:b2:2a:a4:a1:09:83:90:13:ad:d7:bf:75:7f:15:
07:ce:12:fe:9f:1f:d3:e4:d4:21:d4:b2:5e:51:79:
2c:b1:7b:ae:0a:4d:3b:db:f5:b4:7b:a0:36:67:08:
18:83:c9:89:0b:1a:9e:55:c4:85:78:4f:c3:4e:77:
3f:a1:5c:d9:2f:16:66:9f:1c:70:04:25:dd:a9:e5:
3a:28:dd:a9:c7:b2:18:c7:ff:b3:22:f1:c9:01:cf:
21:23:bb:af:bb:6d:77:3f:1d:88:12:58:d5:4b:0b:
67:25:c9:9a:94:36:8b:37:50:9f:48:32:17:70:f0:
8e:5d:92:f2:e9:f0:0b:45:d2:f2:87:a2:ae:b2:35:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C5:D9:80:15:88:5C:FF:FA:97:EB:56:EB:93:1E:9A:52:C7:2D:18
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3d:7c:75:ae:57:50:fa:45:e4:1b:82:b4:98:62:3f:c1:e9:
41:90:fa:d8:ce:84:7d:be:df:5e:d5:e0:01:c0:73:79:40:df:
62:d6:a7:cb:0e:f8:57:f8:6e:1b:20:48:ec:09:c7:b6:f4:09:
8b:6d:c6:3a:b1:c5:8f:29:cc:a0:14:20:3e:73:d3:bf:fa:6c:
c8:a0:0b:c3:cb:df:53:f3:f2:7e:f4:19:39:a0:5e:da:da:26:
03:55:86:2a:42:30:8d:81:b9:50:c6:fa:dc:e6:77:ea:63:14:
ae:40:5a:7a:99:f1:50:58:ac:40:ef:c7:3f:6c:b5:77:26:48:
c6:2a:8e:8b:f7:95:17:53:6f:5e:b9:3e:0e:c8:e4:94:d8:e5:
4d:b8:3f:4e:2d:ca:f6:20:43:90:31:be:40:6d:8a:d2:65:1d:
f5:02:bf:4b:ee:4f:df:c4:1d:10:8a:e8:96:e4:1c:01:85:23:
0a:bc:87:a9:12:69:3c:27:2f:23:01:0d:07:e3:0c:36:c5:13:
6c:9c:ec:b4:01:f8:05:ea:96:61:0d:a7:53:53:b4:29:30:7f:
2e:82:e9:63:ff:db:a6:89:db:f4:a2:01:33:f1:d2:67:75:99:
9b:90:1a:ab:c6:c0:08:ca:a5:c1:6e:8b:55:62:f1:91:7c:28:
7c:68:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:31:31 2026 by rpki-client