
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 6X6k/chUwu7gVFJwkMawzOa7kM9Js2WDLHrW0mbZQRg=
Subject key identifier: 7A:25:89:85:65:98:DB:F0:1D:C7:C3:F1:24:43:E0:B0:2C:76:26:AE
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019E2926AF0C509BA0AFBD3F2577E7B426D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0D32
Signing time: Fri 15 May 2026 01:01:01 +0000
Manifest this update: Fri 15 May 2026 01:01:01 +0000
Manifest next update: Sat 16 May 2026 01:01:01 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: c0yiWYRAvwGTnZJpN+2lNaKi3QBDw5rW2nmW9eF9e38=)
2: IIKBJ5F-ZYfDiLk7t6WJRQ2nV4E.roa (hash: S9KRzMh8QRY1YXASzZ2F1vNcK2llA+Uzs+Q5mhLfjRo=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: Vfrj1CjwXIt_tA2vbVO6W0Q8sww.roa (hash: mvOhadzyYlNh3bwJh8QRN9BDoPYKpsh/DrQUaDTKRJg=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
7: no2DAadLlyCgfJ3yGfXMXAle7ss.roa (hash: wO/hILyjAZxEBMqsImhYXJk4hOHjBmxpFt4GY+g4M0Q=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:af:0c:50:9b:a0:af:bd:3f:25:77:e7:b4:26:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 15 01:01:01 2026 GMT
Not After : May 16 01:01:01 2026 GMT
Subject: CN=7a2589856598dbf01dc7c3f12443e0b02c7626ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:fb:fa:48:d4:74:94:e4:6c:51:0d:c4:33:
03:af:ce:69:76:b5:66:b4:de:9d:b3:a6:56:b4:aa:
fb:dc:cd:d5:2d:e3:84:fd:18:14:2c:c6:a2:8d:7a:
36:13:ee:05:14:43:91:9b:8b:e6:45:bf:fc:0c:91:
41:16:d1:3e:eb:1d:10:c8:c5:44:eb:d9:56:7c:53:
99:aa:be:66:41:e7:0a:a6:e6:b5:b0:d8:ad:68:a7:
f4:92:64:05:fd:eb:08:f4:0d:28:17:54:2a:38:a1:
ac:0a:56:11:aa:0f:40:90:b5:ed:a7:5b:04:3e:3c:
42:d3:6c:a4:61:d7:64:a0:d5:11:c4:bb:a9:c7:94:
f8:ab:9a:88:fd:88:0b:a1:f2:a5:0c:0d:06:e6:54:
f6:45:d7:68:6c:bb:c5:10:1c:bc:9e:c6:f4:c0:00:
8f:27:b6:fc:0e:ef:20:a9:d6:5d:9f:e9:aa:de:5b:
b0:a3:df:1d:1b:60:35:de:72:99:69:9a:42:8e:3d:
39:8e:64:48:14:0f:57:5b:ca:f4:67:af:bd:32:60:
7b:ad:06:ad:c9:56:ce:8f:5f:fb:82:33:62:66:f3:
95:f1:16:6d:5a:9b:a7:eb:2e:76:6c:99:ff:b0:e3:
57:99:31:43:40:c3:b7:e4:fa:32:6f:97:26:78:8b:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:25:89:85:65:98:DB:F0:1D:C7:C3:F1:24:43:E0:B0:2C:76:26:AE
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:df:c9:1f:36:cf:b1:8a:74:43:e3:ca:55:2a:6d:00:3f:ab:
4e:6d:c7:dc:7e:ee:bc:e9:e2:33:60:55:7e:56:03:81:2d:97:
2d:c9:63:8f:29:d6:2f:cd:66:81:09:43:3a:ce:26:86:1c:56:
ba:b5:e5:6c:98:d9:e7:c6:bb:25:36:68:82:4c:7b:72:d9:09:
2d:23:d0:70:c4:98:d7:e4:e6:96:d0:41:c4:4f:42:d6:a2:5b:
fb:96:b5:29:d4:56:59:5f:f4:18:2f:3b:27:87:ea:37:d5:b4:
2a:65:da:a1:58:a8:56:73:00:c3:a2:17:f0:44:22:7b:a8:b9:
b8:8e:a2:ad:5d:c3:fb:22:9e:c2:ec:1d:b9:66:a4:e6:6b:f7:
20:9e:04:6a:a4:ed:12:6a:8b:2f:40:e2:e2:d5:78:0d:09:30:
15:b2:d9:78:b6:c1:c9:61:93:3c:4c:44:e6:6f:08:73:a1:54:
54:55:0b:7b:11:bf:2f:a4:d8:b6:72:b4:ef:49:d4:2c:3c:27:
c5:b1:ba:8c:ac:1e:bc:82:69:88:80:2f:6b:d0:ed:76:06:41:
57:bf:29:8a:ce:35:4e:ab:a9:d4:77:89:e1:ae:7e:93:40:f9:
d2:a8:20:e2:b1:58:2c:30:c3:86:ee:d0:33:ad:3c:64:68:7f:
0d:49:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:24:22 2026 by rpki-client