
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: czhHjTAm7i2utcFbOI8PyJlBlD0h/WnZMms3hLrzm8A=
Subject key identifier: AD:BD:0D:AC:48:03:0A:12:9F:D6:C4:AD:DC:44:D7:F4:AC:35:9E:6F
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019F08BD3342D0D83668653453A92186BAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0DAC
Signing time: Sat 27 Jun 2026 11:00:44 +0000
Manifest this update: Sat 27 Jun 2026 11:00:44 +0000
Manifest next update: Sun 28 Jun 2026 11:00:44 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: QtBmOBy/cBPWCgEdKX1fprEBBdHANw0z+8sgn5KL1Xw=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: StKopN7mKY_G686fwWfLGQIs1ZE.roa (hash: Lt0qVcoh5gF6hn1K+QcayMd775gMjWFzF0XYTOVMzcE=)
4: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
5: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
6: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
7: kT1MhOs2pjWPveWnnzpZvLwHE8I.roa (hash: PObzTeTNqjikv/tj+DTeCD2L5aW2W4bJwFPcLIU6GHY=)
8: mMhcTAUsEq-DNycXZbZCJR0srtQ.roa (hash: IfB3ppygA/MuKvduBRn6Oad+w/QpUoS9p6uwhj/GpXM=)
9: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
10: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:bd:33:42:d0:d8:36:68:65:34:53:a9:21:86:ba:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 27 11:00:44 2026 GMT
Not After : Jun 28 11:00:44 2026 GMT
Subject: CN=adbd0dac48030a129fd6c4addc44d7f4ac359e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:13:df:20:b5:9b:8a:8a:a2:0c:87:98:ef:
78:e3:80:6a:9a:01:05:de:b7:1d:39:82:ad:14:0a:
c0:98:93:e3:f5:c7:00:18:f3:fd:ff:c1:6f:ba:f7:
ab:a4:a1:30:b9:92:81:15:b9:81:18:7e:d4:00:27:
25:b3:1d:92:09:af:b4:46:e5:89:f1:6c:b2:28:78:
ca:7a:d0:93:3a:6a:e8:55:45:fe:4f:39:bf:9c:42:
01:e7:e5:8d:11:92:26:b6:f5:dc:35:39:7d:60:a6:
df:7f:d9:4e:87:10:43:dd:5f:34:62:78:43:f6:1b:
00:e0:c1:94:00:3e:92:f8:77:fe:51:7e:9d:15:25:
80:a8:ac:d7:ca:4c:2c:6d:2d:da:f2:08:4f:87:f2:
a4:2c:03:f9:ed:bf:7c:54:72:a6:9a:cc:31:8d:22:
6e:d8:ae:8f:93:61:ef:45:47:04:44:9f:3a:9b:76:
9a:5e:6d:75:81:8c:23:12:25:4a:89:46:5c:e3:0b:
00:9e:3e:3c:8e:1d:71:2a:61:c9:11:12:46:67:6a:
8b:bb:d7:7d:fe:6c:07:76:12:ca:96:1f:2a:a9:80:
37:9f:53:2c:38:e7:42:86:0e:e9:1c:b5:cf:5f:99:
03:43:86:6f:97:08:47:a8:0e:3a:68:e9:d2:6c:59:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:0D:AC:48:03:0A:12:9F:D6:C4:AD:DC:44:D7:F4:AC:35:9E:6F
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:89:a8:07:cb:55:f5:dc:5b:46:06:17:2a:59:31:91:fe:b3:
ae:de:de:01:4c:c9:3f:8e:33:d0:7b:40:69:25:2f:d3:9f:ca:
e3:82:6b:ae:6d:75:0f:31:6f:ff:0b:c5:d7:4d:8e:33:92:4d:
13:e0:0f:a7:6d:eb:ef:b9:43:28:90:07:8f:7e:e0:4e:3f:4e:
76:1c:01:5c:be:6f:4d:43:93:15:ae:8d:fe:5d:ef:f7:02:cd:
6c:f2:4e:d1:45:42:60:f9:34:d8:7a:83:ce:e7:93:94:fd:b6:
49:62:75:48:59:b2:af:52:bb:f5:56:d0:53:9d:75:8d:b5:2a:
93:8d:d4:76:ba:ba:3d:d0:31:a0:2c:3b:cd:05:3c:70:6c:8e:
3b:2c:48:7d:e9:4d:42:14:5b:8c:7e:9a:38:fd:ee:76:a2:e6:
08:7b:05:cf:f6:91:78:af:0f:0c:c1:85:90:fe:18:67:bb:d1:
00:5b:dd:78:fd:67:6b:d8:a5:7e:12:0e:73:86:1d:32:db:89:
1f:42:85:ff:0d:13:b9:ab:48:a0:04:01:f3:51:92:40:72:9b:
61:61:05:f0:18:f4:78:b7:a0:4d:e2:40:c7:5f:c7:0e:5a:74:
b5:de:34:fe:8d:ce:95:3f:5a:9c:49:ab:4b:11:2c:02:3f:85:
46:07:08:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8IvTNC0Ng2aGU0U6khhrrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwNjI3MTEwMDQ0WhcNMjYwNjI4MTEwMDQ0WjAzMTEwLwYDVQQD
EyhhZGJkMGRhYzQ4MDMwYTEyOWZkNmM0YWRkYzQ0ZDdmNGFjMzU5ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC0T3yC1m4qKogyHmO9444BqmgEF
3rcdOYKtFArAmJPj9ccAGPP9/8FvuverpKEwuZKBFbmBGH7UACclsx2SCa+0RuWJ
8WyyKHjKetCTOmroVUX+Tzm/nEIB5+WNEZImtvXcNTl9YKbff9lOhxBD3V80YnhD
9hsA4MGUAD6S+Hf+UX6dFSWAqKzXykwsbS3a8ghPh/KkLAP57b98VHKmmswxjSJu
2K6Pk2HvRUcERJ86m3aaXm11gYwjEiVKiUZc4wsAnj48jh1xKmHJERJGZ2qLu9d9
/mwHdhLKlh8qqYA3n1MsOOdChg7pHLXPX5kDQ4ZvlwhHqA46aOnSbFmsgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK29DaxIAwoSn9bErdxE1/SsNZ5vMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYmoB8tV
9dxbRgYXKlkxkf6zrt7eAUzJP44z0HtAaSUv05/K44Jrrm11DzFv/wvF102OM5JN
E+APp23r77lDKJAHj37gTj9OdhwBXL5vTUOTFa6N/l3v9wLNbPJO0UVCYPk02HqD
zueTlP22SWJ1SFmyr1K79VbQU511jbUqk43Udrq6PdAxoCw7zQU8cGyOOyxIfelN
QhRbjH6aOP3udqLmCHsFz/aReK8PDMGFkP4YZ7vRAFvdeP1na9ilfhIOc4YdMtuJ
H0KF/w0TuatIoAQB81GSQHKbYWEF8Bj0eLegTeJAx1/HDlp0td40/o3OlT9anEmr
SxEsAj+FRgcI0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 27 15:47:30 2026 by rpki-client