Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: Y8SnyK0PZeKwOHkfi6udb7EwlSIOnbuMer7z743T1AI=
Subject key identifier: D4:DC:A2:D8:FB:5C:06:5C:B3:95:A7:F0:A6:F4:6A:15:08:8B:CE:52
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A16D246E39CD8BD8D3E39AF1F8F644EF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0EF4
Signing time: Sat 24 Oct 2026 09:01:06 +0000
Manifest this update: Sat 24 Oct 2026 09:01:06 +0000
Manifest next update: Sun 25 Oct 2026 09:01:06 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: Wk9imjDqpCX6XEJf2uDR1L8qfkB39Oy/HgTs0/RhlVc=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa (hash: l8C6p4QFcok/PgmLUUkYCpOJ4hYEhzcrxtTn9OMHuUo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:24:6e:39:cd:8b:d8:d3:e3:9a:f1:f8:f6:44:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 24 09:01:06 2026 GMT
Not After : Oct 25 09:01:06 2026 GMT
Subject: CN=d4dca2d8fb5c065cb395a7f0a6f46a15088bce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:0b:50:65:8e:b7:b4:14:9c:21:92:dd:c7:
1f:76:53:b2:ea:b1:71:4a:3d:87:d6:52:09:3c:17:
ec:f6:b9:d4:e6:af:df:4a:61:77:59:5d:4c:0d:0c:
b5:da:27:a0:8a:57:65:5a:d9:d3:7a:42:2c:8d:50:
86:20:29:20:b6:86:f0:71:25:8e:0d:76:5c:d3:d7:
ab:e0:42:e6:17:03:30:ad:4b:96:00:e4:47:f9:b6:
71:35:4d:60:1e:d7:85:ba:d4:dc:b7:0d:db:b5:b1:
5b:c5:7c:57:18:3f:d9:15:e0:65:10:97:9a:e1:54:
66:03:54:41:4d:9d:fa:78:04:72:15:66:dc:66:c7:
21:a0:c5:82:b0:d9:7c:29:f7:38:fe:f1:a0:51:c1:
90:56:d3:50:93:25:13:11:16:c2:82:ca:d3:d5:6b:
08:02:82:eb:cd:1f:b0:2c:db:23:93:c9:06:ea:67:
eb:11:7b:87:ba:de:73:3c:27:65:3c:c5:6f:41:af:
68:62:7f:4a:48:aa:b8:81:bd:e0:95:e4:88:23:3f:
dd:45:1a:29:3e:20:65:96:42:8e:09:57:ab:fb:49:
75:47:c3:d4:33:4a:f3:b0:61:87:66:66:51:c4:67:
1e:53:65:25:64:f1:b6:6a:75:4d:5d:3b:2c:21:43:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:A2:D8:FB:5C:06:5C:B3:95:A7:F0:A6:F4:6A:15:08:8B:CE:52
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a7:aa:9a:4f:f1:7f:44:34:f7:5c:2a:51:db:a2:3d:b2:b9:
b8:88:bb:c1:76:7b:4b:a3:62:47:4f:b4:eb:34:3a:df:93:52:
55:b6:51:19:41:f4:bc:67:50:df:a0:5d:22:a8:5e:25:e0:de:
c6:7d:e3:10:30:36:d4:d6:ae:ef:7e:51:0c:ab:8a:76:2e:14:
4a:a5:6a:d4:ab:4b:f0:f0:a5:7f:d6:c8:c4:e8:66:54:e9:fb:
2c:c2:b6:8e:b8:cb:fa:bd:2c:f4:dd:b2:46:2d:b1:bd:dc:39:
6b:e0:88:37:6c:b4:c0:2e:60:86:7b:ae:8d:e1:1b:27:a3:7d:
00:82:b7:ff:9e:55:86:d9:36:1e:bd:fc:1f:70:83:b6:f5:f6:
8f:8d:55:4c:af:0d:98:0e:da:1b:55:e0:0b:a2:99:f9:96:68:
b0:26:96:83:4a:d7:7a:81:06:8e:31:21:19:a9:7b:61:79:27:
aa:dd:8f:c2:d5:86:0b:6c:fb:d2:92:7b:15:78:27:65:f2:7a:
d8:fb:2e:25:2a:ca:c8:ff:fc:75:0e:5d:09:c7:5a:42:58:23:
57:43:09:e3:07:e7:f9:49:d6:c7:96:53:cd:83:29:f2:67:92:
16:92:f3:67:83:35:01:53:64:0e:82:0e:8e:fe:b4:7a:aa:33:
4f:6c:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:29:29 2026 by rpki-client