Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: xy7nhR11os2rc2c0M25vaXh/36X76njdz4tB/olUcmE=
Subject key identifier: FE:95:C2:60:EC:22:10:CE:E1:9C:AF:EB:9F:3E:D0:97:92:F6:62:01
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A01262E609181459868FC9B28309B398E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0E38
Signing time: Tue 18 Aug 2026 01:01:06 +0000
Manifest this update: Tue 18 Aug 2026 01:01:06 +0000
Manifest next update: Wed 19 Aug 2026 01:01:06 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: PlcyzfuTN0m53mz1zLk0zr0x3bupEjlBCOWG1BtuqDw=)
2: DMNBtHWgTEhz4n5BZo-OdnF1Gpw.roa (hash: tiqfuYupTq2O4jaXvwB3uzDDlD4pfPMY6A9tdmzUNQM=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: byfII41hx7v6GfkLHOOgwLy3GLA.roa (hash: Zo/z6gr7446Px1jbq5uM2vZhtDDjC3+TH8hqZRTm9rc=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: i536I-ayrDn5uau328WAcV3xqS0.roa (hash: OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:12:62:e6:09:18:14:59:86:8f:c9:b2:83:09:b3:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 18 01:01:06 2026 GMT
Not After : Aug 19 01:01:06 2026 GMT
Subject: CN=fe95c260ec2210cee19cafeb9f3ed09792f66201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:01:dd:1b:cf:a2:7c:d9:37:2e:39:cb:49:
0a:b6:93:74:0d:7a:35:43:b7:5d:4c:6e:79:e6:0d:
e7:12:5c:ac:86:dd:dd:5f:07:b3:f4:8c:35:98:87:
3e:4f:5f:3e:29:76:a3:5f:79:ea:81:cb:fb:8b:91:
63:97:95:43:5d:68:5b:c8:c2:05:ef:71:56:29:0e:
3c:ee:6a:05:5d:c2:b7:5a:f7:6e:21:a6:1c:56:5a:
d7:49:0a:5a:7c:43:d3:49:c3:03:d4:07:e7:98:7c:
4a:f8:a0:77:76:38:5c:32:80:e1:34:5e:89:34:6b:
db:0a:cd:64:fb:6e:59:fa:a8:cb:fa:bb:23:7e:ca:
a1:59:3c:6c:52:9a:da:7e:ce:33:34:29:37:10:2b:
6c:68:7a:09:99:89:85:2a:a2:b5:cc:d1:b3:6f:6d:
f6:83:f6:79:45:9f:d3:76:a2:3b:30:be:06:e1:af:
ad:3d:1c:3a:96:d3:03:ec:be:8b:88:76:0d:f5:fa:
e5:80:46:e9:23:9f:2d:ee:a1:86:de:22:10:50:e5:
f8:12:35:a4:e0:26:86:00:ff:1a:33:76:89:72:8b:
01:c5:39:10:a0:05:39:83:b6:51:f5:c3:8c:7d:f8:
55:a4:4a:28:d1:e8:d8:96:42:fd:83:2b:b7:a9:18:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:95:C2:60:EC:22:10:CE:E1:9C:AF:EB:9F:3E:D0:97:92:F6:62:01
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:78:47:82:5e:c2:ef:8b:b4:89:6c:2c:3f:de:72:25:7d:ef:
09:85:82:df:e9:c6:6e:21:31:45:82:08:9d:3f:66:89:bb:54:
c3:5e:49:cb:8e:65:17:9a:05:a7:81:c6:d7:63:55:f1:0e:e6:
1e:0a:6d:0d:9c:87:fb:19:7c:1b:e6:b7:e1:80:29:ab:29:1b:
e4:47:09:bc:e9:15:11:56:f9:93:e0:bc:7f:c2:70:c6:9e:b2:
e6:24:cd:2e:66:53:e2:fb:20:aa:30:04:f3:20:e2:f6:de:2d:
59:63:f3:c5:7a:b5:b8:33:83:91:6c:dd:c3:a0:e3:e1:28:1f:
4d:a2:8c:8b:11:ef:3d:3c:de:b1:68:01:aa:54:03:b0:b3:ee:
26:dd:5c:3f:ab:af:f0:6f:62:59:ef:1d:3f:a4:57:1d:35:b6:
bc:f0:b8:a1:a1:7d:47:88:0c:e5:b8:d3:ba:45:4d:f4:ff:9f:
ce:10:7c:e8:3e:0b:26:d8:3e:69:3a:69:ae:0e:70:dd:69:ee:
0f:dc:d7:f4:5d:ec:da:9c:e1:b3:e6:46:9c:34:03:54:01:6f:
0f:b5:92:aa:80:f4:e6:19:c7:e2:07:2f:87:6a:e0:12:44:f9:
a4:af:3c:e4:35:c8:d5:7c:78:a0:01:f9:34:71:28:c8:a7:ba:
8c:f6:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 05:25:46 2026 by rpki-client