Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: JYjLs5Z0LoC2dv0YBDwhjVni7u45EDHnJqnk09IEYQI=
Subject key identifier: D3:9C:9C:40:B4:A8:C3:F2:F4:50:6B:64:38:21:DF:1A:48:43:88:72
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A159D4565D4D8130332276069685CFF84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0EEA
Signing time: Tue 20 Oct 2026 15:00:50 +0000
Manifest this update: Tue 20 Oct 2026 15:00:50 +0000
Manifest next update: Wed 21 Oct 2026 15:00:50 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: iDsmH3fLeb4x5ttUuQJaEbAJJqryJv21ohOqrzPn8Ug=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa (hash: l8C6p4QFcok/PgmLUUkYCpOJ4hYEhzcrxtTn9OMHuUo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:56:5d:4d:81:30:33:22:76:06:96:85:cf:f8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 20 15:00:50 2026 GMT
Not After : Oct 21 15:00:50 2026 GMT
Subject: CN=d39c9c40b4a8c3f2f4506b643821df1a48438872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:02:54:3e:07:bf:66:40:c5:6d:af:52:74:
5e:1a:c4:be:2d:ef:ec:d6:dc:c9:fc:7c:a7:29:89:
6a:91:b7:2d:1e:9c:5f:b6:80:a8:22:21:ca:2c:67:
b8:7d:a8:f8:7b:d1:a7:4e:d0:d9:99:71:ef:89:04:
3a:64:83:df:13:d0:ea:b3:39:cf:b8:3c:32:bf:6d:
74:b7:7c:b9:ae:42:ab:a1:72:32:68:11:d5:0a:85:
01:07:b3:fc:2b:49:bc:18:d8:a3:4a:0a:60:c5:b8:
33:75:b7:c3:15:9e:36:fe:a6:17:a7:8d:a4:4e:d6:
5b:4e:17:0d:df:7d:68:ce:6e:dd:ed:e1:52:18:cb:
73:17:65:6c:81:29:82:92:28:21:bc:1c:28:d7:76:
49:19:04:ca:b3:50:33:89:cc:46:4c:bb:21:fb:3b:
da:a9:cc:04:cd:e4:52:6d:bb:42:ec:78:f0:57:e1:
7d:3f:06:bc:bc:a8:2e:70:1d:b3:fc:79:22:82:1f:
63:b2:5a:d6:1a:9d:45:30:29:26:96:66:fe:d2:13:
9d:9a:b0:a5:3e:4b:cc:31:a8:ee:c4:2b:6a:46:4c:
b7:13:11:7b:6c:fd:39:2e:9d:00:57:5e:de:3d:d9:
b9:f6:cf:9e:3a:06:f4:65:2b:e4:9f:7b:17:6f:11:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9C:9C:40:B4:A8:C3:F2:F4:50:6B:64:38:21:DF:1A:48:43:88:72
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f5:49:8c:ff:2a:a2:14:b9:db:12:21:fb:e5:a5:da:93:de:
fe:ba:61:5f:24:26:cc:71:91:88:85:ce:d8:84:f1:fe:fa:16:
3a:32:f0:c7:ab:81:9d:2d:32:29:40:6a:c5:aa:08:98:a8:8c:
89:6f:c8:ba:4d:d7:02:db:99:7e:0f:d0:3d:41:26:ba:78:78:
3f:b7:1c:70:22:7b:98:85:2c:f9:a6:ad:99:2d:f3:d3:b4:40:
ae:09:72:90:37:5a:ec:03:f1:32:63:44:f1:46:ec:7d:56:f9:
d3:d3:2b:e4:78:41:ca:54:31:48:52:13:5a:af:73:a2:4e:fd:
f9:8b:43:cd:bc:6e:4d:2f:7c:00:32:27:e6:62:1b:92:04:f6:
0c:f6:f7:b8:76:9f:60:4b:a5:4e:1d:e0:5f:d5:f1:60:b0:bc:
f9:f4:0e:00:5f:3f:93:aa:97:00:96:80:69:9e:e0:ed:aa:6b:
76:cf:2d:c1:ba:a9:89:80:6f:04:40:05:e9:cc:b6:ef:ca:9f:
47:c0:7d:2b:e5:45:32:62:40:62:79:8e:b9:56:10:c2:95:df:
83:53:2d:ac:5a:5e:aa:79:df:a4:d8:fc:41:59:d3:cd:b8:76:
10:b6:98:95:7d:50:a0:a6:1c:68:90:0c:0c:91:3d:f2:28:88:
6c:70:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:16 2026 by rpki-client