Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: PwQAh+OWGLBThvb4I6drSC80EXphm98mIWKC+byeDX0=
Subject key identifier: E1:82:95:FD:90:B4:0C:87:16:B6:C2:81:77:06:DF:BA:D9:7C:F1:55
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A113E112810E5558A4465ABE14D0C088C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0EC5
Signing time: Wed 07 Oct 2026 01:01:19 +0000
Manifest this update: Wed 07 Oct 2026 01:01:19 +0000
Manifest next update: Thu 08 Oct 2026 01:01:19 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: qCJTZTyou+CngrAa/QQnynQByMwTNzyd8QgrR/Jv5dQ=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
4: K6VP4tF8YCBO-Xf5c8FKwQTHehc.roa (hash: QIkVycDJuyQZ5yMK+HSAb+asnpP+8kmfO4ftfvHVnT8=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:e1:12:81:0e:55:58:a4:46:5a:be:14:d0:c0:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 7 01:01:19 2026 GMT
Not After : Oct 8 01:01:19 2026 GMT
Subject: CN=e18295fd90b40c8716b6c2817706dfbad97cf155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:73:54:ff:3f:5f:e4:89:5d:96:df:a5:c3:
5e:51:d3:6e:6a:7f:f0:bd:e9:1c:38:a7:51:51:8f:
20:83:8e:e9:de:6d:92:e8:24:91:42:d2:c3:50:6e:
ff:d2:7d:6c:6f:56:7d:5f:35:70:58:84:65:27:23:
ce:3f:9d:f2:02:e3:24:d6:09:69:ae:25:44:2d:1c:
e6:d9:32:5b:02:95:6f:56:10:05:0a:d4:cb:48:dd:
a5:a4:d3:bb:72:ac:8e:b8:9a:3e:2b:90:da:a7:2f:
a8:54:cd:f8:79:0e:8e:ab:13:ec:f1:6c:20:84:3a:
22:a4:3a:0c:a6:2f:d0:91:35:b1:59:7e:bc:6d:60:
e4:50:41:1f:b1:fc:e1:86:21:ab:01:bf:c7:a6:ce:
4d:4b:f1:89:00:88:47:ea:f9:10:9a:d6:0d:1a:7b:
51:a8:90:f7:81:29:cf:75:0b:29:cd:d9:59:21:bb:
aa:e1:cb:b9:bc:49:2d:4e:65:64:74:61:c2:c4:9d:
e5:5f:a7:0e:52:0c:3a:f6:fd:84:a7:83:cf:a3:b8:
10:73:35:0a:ec:9f:57:e0:d1:40:f6:b5:d5:6f:e1:
15:a4:ea:0c:bc:bb:9e:4f:98:67:c2:1e:08:f2:a6:
bc:d7:71:68:a9:35:9a:87:90:85:66:3d:42:82:32:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:95:FD:90:B4:0C:87:16:B6:C2:81:77:06:DF:BA:D9:7C:F1:55
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:65:fc:c2:8e:06:cc:1b:55:11:78:78:c0:07:cf:51:52:
30:e4:ec:35:23:81:aa:46:37:ac:46:9e:24:fe:de:4a:51:4a:
d6:b8:f0:59:36:91:a8:4c:39:5b:ea:8d:b6:aa:c2:87:de:43:
cc:27:b5:fc:49:19:72:f7:a7:84:b3:98:2b:6e:0c:d0:05:0e:
f9:d4:f1:e0:25:39:38:76:ed:68:15:0d:cf:d0:4e:e7:9c:9a:
47:2c:9a:ab:0f:82:3f:4a:b6:c2:8f:77:6b:c0:f6:8f:75:84:
d1:3f:c6:14:5d:83:6c:0b:cf:cf:6c:e4:50:aa:6b:2e:db:e9:
35:82:2f:07:2e:eb:e9:c4:5f:16:54:02:eb:92:97:3c:c2:ae:
ea:dc:8c:30:f3:dd:03:60:f4:a4:35:bb:5a:ec:7b:62:49:ce:
e5:81:9d:e4:51:49:50:0d:87:d1:8a:e2:9f:af:3d:4a:6e:85:
8e:d8:f3:ef:57:89:4c:c6:a9:9b:67:f8:09:eb:6f:c0:25:a1:
8c:dd:24:dd:21:31:26:ec:ee:1b:c4:72:7b:c2:77:80:ba:10:
78:ab:d3:ba:c1:77:e4:28:aa:42:41:e6:64:8d:74:dc:13:9e:
7e:d9:e2:b8:d9:26:bf:bd:9c:22:7c:dd:00:e7:84:cd:d2:6c:
c5:fc:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:56:29 2026 by rpki-client