Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: eb3WhYj4L7oZ0f06IoP4CwD+CWNYzET1ELi/HFLQoBY=
Subject key identifier: 2E:12:C7:EE:B8:DA:A4:2E:F8:49:2E:E3:FB:5C:32:A6:4E:A2:A7:52
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A12DD7A5E8CC0465E9313B286CE20FF2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0ED3
Signing time: Mon 12 Oct 2026 02:01:09 +0000
Manifest this update: Mon 12 Oct 2026 02:01:09 +0000
Manifest next update: Tue 13 Oct 2026 02:01:09 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: TBON9qE/ZWs50B7Z5AJRN0RDp+U60xeontdIa13viKM=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: vwQY97vonjbxh1XkzUzde2yV1fw.roa (hash: wZk00VJ4ASC7xKiTcPZZlql2bIhIHVpzXkrQAMaWtdc=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:a5:e8:cc:04:65:e9:31:3b:28:6c:e2:0f:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 12 02:01:09 2026 GMT
Not After : Oct 13 02:01:09 2026 GMT
Subject: CN=2e12c7eeb8daa42ef8492ee3fb5c32a64ea2a752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:9e:4f:f6:2d:96:00:1b:84:0c:7f:cb:7d:
4b:ae:6b:ec:f7:90:17:db:cc:4c:db:2a:d1:81:ba:
e6:61:3f:8f:8c:bb:08:67:8a:9f:b3:80:ce:39:81:
2e:3b:0f:b7:77:24:58:53:07:e1:16:11:39:cf:8c:
c7:f4:d0:ed:3c:9a:d2:b2:c4:d6:7a:ef:61:02:13:
04:2d:b5:cf:a0:23:a8:a0:d2:25:40:08:9a:1f:69:
41:5b:88:6e:6e:ad:01:62:10:d5:c4:27:bf:93:b8:
e0:ce:e3:23:d0:7d:dd:cc:57:b2:51:72:3a:9a:8d:
e6:b1:6c:2c:ee:16:63:51:f8:66:81:b5:a7:b5:2f:
f3:65:31:ae:d3:c5:67:ba:83:ce:f6:b1:ec:a9:55:
aa:40:61:19:cf:fb:9d:54:14:38:64:f8:eb:73:48:
90:69:3c:1e:d7:f3:e8:c0:f9:c9:fc:ac:02:58:cf:
24:31:0f:be:e2:af:3c:12:3c:06:3b:3e:d3:ab:6d:
28:a1:6d:9a:41:36:9e:bf:e3:f8:ae:de:3b:0c:88:
75:5f:90:40:54:70:91:c0:75:b6:6c:dd:fd:89:87:
b3:ed:29:5b:2b:50:75:e1:a1:2a:19:58:53:15:6a:
8d:57:09:ed:5e:2a:de:05:a8:da:ce:6e:58:d3:7a:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:C7:EE:B8:DA:A4:2E:F8:49:2E:E3:FB:5C:32:A6:4E:A2:A7:52
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:65:b1:db:2b:7a:fe:22:88:34:1a:47:5e:92:22:28:a7:6c:
38:9d:a0:18:e0:48:39:5d:ae:d9:c5:31:31:2e:c0:33:4d:77:
32:2f:b1:3b:e9:08:42:5a:b1:4c:43:fe:c5:e5:b1:f4:4e:54:
bd:85:2b:72:b6:7d:19:c9:34:89:7b:b4:d7:89:5c:02:ee:f7:
73:b2:97:4f:a8:f9:88:ff:1d:01:21:22:82:bf:75:0a:be:6e:
57:af:db:0d:cb:9b:57:a6:6e:10:4e:5c:f3:a4:48:a6:c8:2a:
b5:82:9d:37:d8:72:87:54:bf:9b:0d:6d:63:96:54:46:ed:f5:
35:9c:3c:96:0b:eb:45:c7:25:c6:e5:28:01:71:62:b2:27:44:
a9:60:a1:78:ea:a5:b8:1f:c7:24:d6:d2:27:eb:e1:46:1e:23:
fc:bc:2c:cd:92:90:61:8e:16:8c:8f:14:8d:b0:e5:e3:1c:57:
07:7e:19:d1:cd:bb:8b:91:30:c5:b1:20:20:ce:fd:5e:ac:27:
71:9c:a6:e3:e8:3b:8e:39:5b:bf:09:74:69:56:7b:46:7c:55:
63:86:91:ea:2f:47:3c:22:97:49:e7:c7:3c:eb:0d:85:06:50:
3a:34:87:b1:06:a1:1d:b5:f3:7f:dc:27:13:74:51:55:66:41:
5f:6c:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:44:01 2026 by rpki-client