
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: k+KG8RVmJ7NZdclBkfNm0PH/8xYlfs8tRZij7tqg85c=
Subject key identifier: 4C:B7:E9:2D:BE:31:97:7E:71:76:C6:C3:E4:3C:37:BC:07:7F:71:74
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A0502F6FFDE6CDBAA297702897D4BBCF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0E58
Signing time: Sun 30 Aug 2026 01:01:21 +0000
Manifest this update: Sun 30 Aug 2026 01:01:21 +0000
Manifest next update: Mon 31 Aug 2026 01:01:21 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: jZhBlbuASNF7h1PWIupmR6y9SJ34mxJyrMipszRDyqI=)
2: DMNBtHWgTEhz4n5BZo-OdnF1Gpw.roa (hash: tiqfuYupTq2O4jaXvwB3uzDDlD4pfPMY6A9tdmzUNQM=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: byfII41hx7v6GfkLHOOgwLy3GLA.roa (hash: Zo/z6gr7446Px1jbq5uM2vZhtDDjC3+TH8hqZRTm9rc=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: i536I-ayrDn5uau328WAcV3xqS0.roa (hash: OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:2f:6f:fd:e6:cd:ba:a2:97:70:28:97:d4:bb:cf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 30 01:01:21 2026 GMT
Not After : Aug 31 01:01:21 2026 GMT
Subject: CN=4cb7e92dbe31977e7176c6c3e43c37bc077f7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:ab:bc:aa:8d:f0:dd:82:4f:74:9d:83:ae:
12:8a:e2:42:e1:ce:9a:fa:1e:fb:9b:d4:b5:a4:85:
6f:62:30:75:ec:10:66:8b:f6:94:e9:b4:9b:0d:65:
1b:7a:e6:85:e0:fe:58:66:ca:35:2b:95:ab:d3:d0:
6e:77:75:55:0e:02:1d:be:ae:e1:de:67:ed:37:b5:
1c:12:79:0c:6c:2b:2c:42:9a:0f:50:69:a0:e1:06:
0c:c9:2f:aa:ff:1e:3e:46:41:79:ea:c0:f1:5d:c2:
b6:98:f7:fa:3c:11:19:1a:aa:c0:53:34:4b:7f:97:
7c:b0:10:45:1b:3c:19:e0:6d:42:04:46:6c:92:8b:
b3:59:26:d8:96:43:72:17:1e:3d:c2:42:b6:9c:7b:
4a:07:87:b7:13:10:02:af:9a:1e:84:d0:e0:25:6f:
94:e8:ac:da:60:f3:16:72:dd:8b:1a:f7:ac:9c:20:
51:1b:0d:52:3c:7b:1d:b4:ca:af:91:9c:d5:22:c4:
6d:98:03:39:a2:7d:24:01:54:d2:f7:d6:fe:75:9c:
d0:f9:1a:25:51:f5:14:fd:10:e1:6d:0e:2a:0a:8e:
ce:c7:75:d8:fe:1a:08:5d:12:9a:e8:02:57:b8:d4:
08:c4:fb:8d:bc:3a:d5:07:c4:73:4e:60:f9:b1:42:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:E9:2D:BE:31:97:7E:71:76:C6:C3:E4:3C:37:BC:07:7F:71:74
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:67:22:ed:2e:e8:9e:9d:49:4a:f4:70:b6:89:79:ee:4d:62:
52:0c:bf:4c:90:57:ac:5a:95:37:a4:41:51:8e:e1:34:05:ef:
0e:e5:b7:f3:62:e5:aa:59:31:a0:f5:6f:3a:c4:34:d9:cc:04:
da:50:72:ab:1d:b1:53:ba:17:8e:76:de:de:75:04:6c:af:e9:
f9:c5:7c:11:de:81:93:04:d3:e6:2e:0f:48:bc:73:fb:9e:68:
83:ed:15:f0:13:7a:5b:1c:01:ee:e8:dd:c8:b8:62:51:87:82:
be:2d:16:f7:70:36:c3:8f:72:26:7e:4a:e6:bb:48:34:c4:81:
27:af:d4:42:ff:d3:3d:96:da:cf:1c:d4:54:29:cb:45:45:7f:
94:9a:f9:53:4e:97:6c:2c:a2:ae:29:bc:ad:c2:d9:ef:91:06:
40:6a:20:f1:d8:df:f2:53:ef:b8:71:b6:f0:b7:b3:fb:75:af:
4d:ee:1b:5e:cf:52:b9:cc:ab:9c:92:1d:5e:79:24:0a:e3:df:
90:be:9d:f9:1b:a8:67:7c:84:aa:44:e4:1c:d9:c8:0f:ad:57:
6d:e6:fb:51:86:47:84:d6:20:05:8c:9f:df:be:4d:19:e3:18:
ef:34:7d:07:88:15:60:a4:04:9d:c3:84:74:3d:66:0a:29:01:
ae:5f:e7:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBQL2/95s26opdwKJfUu88fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwODMwMDEwMTIxWhcNMjYwODMxMDEwMTIxWjAzMTEwLwYDVQQD
Eyg0Y2I3ZTkyZGJlMzE5NzdlNzE3NmM2YzNlNDNjMzdiYzA3N2Y3MTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtmrvKqN8N2CT3Sdg64SiuJC4c6a
+h77m9S1pIVvYjB17BBmi/aU6bSbDWUbeuaF4P5YZso1K5Wr09Bud3VVDgIdvq7h
3mftN7UcEnkMbCssQpoPUGmg4QYMyS+q/x4+RkF56sDxXcK2mPf6PBEZGqrAUzRL
f5d8sBBFGzwZ4G1CBEZskouzWSbYlkNyFx49wkK2nHtKB4e3ExACr5oehNDgJW+U
6KzaYPMWct2LGvesnCBRGw1SPHsdtMqvkZzVIsRtmAM5on0kAVTS99b+dZzQ+Rol
UfUU/RDhbQ4qCo7Ox3XY/hoIXRKa6AJXuNQIxPuNvDrVB8RzTmD5sUI8BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy36S2+MZd+cXbGw+Q8N7wHf3F0MB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2ci7S7o
np1JSvRwtol57k1iUgy/TJBXrFqVN6RBUY7hNAXvDuW382LlqlkxoPVvOsQ02cwE
2lByqx2xU7oXjnbe3nUEbK/p+cV8Ed6BkwTT5i4PSLxz+55og+0V8BN6WxwB7ujd
yLhiUYeCvi0W93A2w49yJn5K5rtINMSBJ6/UQv/TPZbazxzUVCnLRUV/lJr5U06X
bCyirim8rcLZ75EGQGog8djf8lPvuHG28Lez+3WvTe4bXs9SucyrnJIdXnkkCuPf
kL6d+RuoZ3yEqkTkHNnID61Xbeb7UYZHhNYgBYyf375NGeMY7zR9B4gVYKQEncOE
dD1mCikBrl/n0A==
-----END CERTIFICATE-----
Generated at Sun Aug 30 08:13:14 2026 by rpki-client