Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 1Wkfwc1MqQL+9xYUur12GRxMNdnrk9wXEKoFCQYh+rQ=
Subject key identifier: 85:01:BE:9E:B4:A5:45:9A:6A:AC:AA:1C:B9:AC:A4:32:A9:A3:CA:4A
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A03149831428727E51156CFB2CDD14BAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0E48
Signing time: Mon 24 Aug 2026 01:01:36 +0000
Manifest this update: Mon 24 Aug 2026 01:01:36 +0000
Manifest next update: Tue 25 Aug 2026 01:01:36 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: tZu1PD1/Jvcbd/RWH48dJjUWGBfcbZesrSFLoQwP2xI=)
2: DMNBtHWgTEhz4n5BZo-OdnF1Gpw.roa (hash: tiqfuYupTq2O4jaXvwB3uzDDlD4pfPMY6A9tdmzUNQM=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: byfII41hx7v6GfkLHOOgwLy3GLA.roa (hash: Zo/z6gr7446Px1jbq5uM2vZhtDDjC3+TH8hqZRTm9rc=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: i536I-ayrDn5uau328WAcV3xqS0.roa (hash: OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:31:49:83:14:28:72:7e:51:15:6c:fb:2c:dd:14:ba:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 24 01:01:36 2026 GMT
Not After : Aug 25 01:01:36 2026 GMT
Subject: CN=8501be9eb4a5459a6aacaa1cb9aca432a9a3ca4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:fa:0a:d1:35:1e:5e:e8:27:eb:e1:de:f1:
ba:92:75:6f:aa:9a:40:40:9c:28:51:93:f1:6e:12:
b1:ae:c3:53:5e:98:f8:80:5b:00:09:ab:ef:ef:1d:
a4:0a:37:3c:46:67:c7:92:0e:ed:c0:36:f0:95:c6:
ba:4d:3b:01:2c:10:98:d9:37:61:e2:b5:dd:a4:97:
90:a3:5c:fe:a9:ea:10:3b:2d:e6:e7:bd:8c:93:a7:
b9:85:2f:8b:2c:c9:26:26:22:be:af:b0:82:0b:fc:
26:06:02:ba:2c:b1:69:12:11:d2:91:9d:1b:f3:bb:
2a:5b:c6:81:da:b6:70:e5:53:68:1d:cd:9f:f9:98:
3e:02:4b:ee:d1:93:ed:90:cc:91:af:ce:eb:be:5f:
90:c7:41:3a:9c:fd:bf:37:e9:58:92:bd:f6:43:6d:
c4:b4:88:e3:23:11:60:70:16:49:0d:64:01:ff:fb:
de:44:62:de:2f:1d:0e:14:b0:a6:c7:ee:65:1d:c9:
d9:59:02:79:c9:80:73:1c:91:97:b4:e7:b3:52:d0:
74:34:ed:f6:b7:a5:b1:ce:b8:23:f9:84:16:08:19:
42:9e:d3:f9:f7:c1:99:f4:61:80:c4:e8:7a:a9:22:
2d:93:c5:31:b7:a1:b9:a9:e7:f4:d9:7a:9a:c0:21:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:01:BE:9E:B4:A5:45:9A:6A:AC:AA:1C:B9:AC:A4:32:A9:A3:CA:4A
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f7:b7:b6:b0:11:55:43:f7:1a:3a:7e:3d:af:0f:b2:24:2d:
6d:d4:58:63:36:9f:a1:ce:6d:b1:92:d8:08:85:6b:fa:86:8d:
df:2f:38:83:b9:67:e3:6d:df:6a:61:ab:ae:65:f1:c9:1d:1c:
83:ee:12:bc:30:31:89:52:25:16:3c:0b:c9:c1:a4:72:0a:3d:
fa:d9:b7:3e:44:89:1e:2a:c9:62:16:eb:1c:25:f6:06:f0:f5:
48:4f:a9:52:97:c2:49:39:48:1f:c2:04:26:d5:0b:e5:a4:80:
55:f2:a3:a2:82:a9:d4:21:da:5c:e4:b7:d6:7c:f6:ad:be:16:
66:1d:4e:b0:e8:42:35:56:30:16:17:63:83:09:ef:f2:7d:71:
49:2c:45:28:37:0b:5d:08:69:63:5a:3d:e4:1e:a1:a9:9e:ec:
4b:1b:cc:ba:00:75:da:a4:16:50:93:7f:56:f7:14:40:14:eb:
64:e7:93:9e:24:3b:3b:72:14:16:78:4c:c5:d3:7d:9d:3e:17:
0e:85:da:de:52:95:47:ba:b1:1d:ac:4d:01:0f:a9:03:a5:89:
e9:2c:43:b0:30:59:59:ed:04:a0:81:9a:62:6b:36:8f:55:0e:
3c:69:29:86:83:f7:f1:40:ad:74:04:77:16:48:bc:df:6c:9f:
ce:ae:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:33:36 2026 by rpki-client