
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: IelIGc6V0HeRxLsefTlUfqGr3Cr2lzVvVc00mUwE03g=
Subject key identifier: 22:6B:9D:2E:43:36:37:1F:34:A1:B5:77:B3:38:DE:AD:5B:16:79:7A
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A002F01E9F4684A3B8B27CBBB153D8FDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0E30
Signing time: Sat 15 Aug 2026 01:01:25 +0000
Manifest this update: Sat 15 Aug 2026 01:01:25 +0000
Manifest next update: Sun 16 Aug 2026 01:01:25 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: J7LwOxDfCYH5kx6fQQ6FL16IL+aAsDVoVzM4jWL60LA=)
2: DMNBtHWgTEhz4n5BZo-OdnF1Gpw.roa (hash: tiqfuYupTq2O4jaXvwB3uzDDlD4pfPMY6A9tdmzUNQM=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: byfII41hx7v6GfkLHOOgwLy3GLA.roa (hash: Zo/z6gr7446Px1jbq5uM2vZhtDDjC3+TH8hqZRTm9rc=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: i536I-ayrDn5uau328WAcV3xqS0.roa (hash: OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:1e:9f:46:84:a3:b8:b2:7c:bb:b1:53:d8:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 15 01:01:25 2026 GMT
Not After : Aug 16 01:01:25 2026 GMT
Subject: CN=226b9d2e4336371f34a1b577b338dead5b16797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:40:af:d6:89:9f:89:86:9c:b4:bc:09:8b:
a9:21:be:e7:6e:6f:d2:30:16:7e:5d:98:ca:2d:7f:
29:48:bd:8e:9c:92:47:7b:d3:d4:0f:77:d6:ee:5a:
4f:29:64:62:7c:82:5c:00:e3:9c:cf:53:d5:89:68:
45:0e:30:81:92:9c:94:32:8a:3c:6b:1f:66:3b:de:
34:a1:f3:53:8d:e6:28:29:51:2d:08:9e:62:75:e6:
a2:d2:0e:da:9f:da:c2:a2:05:21:bc:b7:5c:df:83:
16:ec:bf:44:9b:39:85:65:25:0d:c8:64:cb:e2:d4:
c9:5f:51:0b:76:f4:2f:e7:2e:b8:84:9e:32:1e:62:
b7:2c:89:54:f7:cb:e0:5a:95:98:31:e6:45:39:d3:
09:d0:05:c1:d2:05:0a:b9:14:1b:0f:a5:be:72:b4:
08:48:c6:98:7d:34:6a:02:69:48:b7:53:86:b9:42:
42:a8:91:4c:a0:23:03:c0:e3:3e:02:3d:c3:e5:e7:
76:1a:5e:52:5b:38:9b:17:ca:58:9c:f4:4a:3b:50:
4b:0d:c1:7c:16:59:ef:6d:60:20:67:a7:cb:2c:22:
b2:2e:39:d0:18:95:f3:ad:8a:4b:df:04:33:c5:35:
fe:10:22:f5:45:cb:7f:90:e5:9d:43:3e:bc:07:4a:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6B:9D:2E:43:36:37:1F:34:A1:B5:77:B3:38:DE:AD:5B:16:79:7A
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ee:f0:9b:82:1d:ef:0c:36:7a:b4:11:ff:be:83:02:d2:ea:
9f:97:1b:06:22:8a:58:ca:1d:ae:5b:2f:fe:45:9b:ba:41:64:
c0:34:47:ad:80:30:68:a2:25:f4:46:fd:59:6c:38:12:63:8f:
e7:f1:63:40:60:01:e8:db:8f:0e:94:f0:fa:fb:f9:a5:7e:c1:
08:3a:c1:e8:c4:5f:57:6a:0f:57:61:32:d5:42:bf:48:05:e7:
74:56:26:bd:a3:04:c2:55:0e:e7:cf:69:96:4b:0f:05:20:06:
b9:25:81:06:fd:71:7b:c9:e9:13:d4:76:e1:18:e8:a5:c0:10:
b0:62:70:49:6d:a8:fb:6a:af:04:33:d4:85:37:f1:75:95:43:
cd:68:10:58:7d:80:fe:2d:8c:29:c9:15:7d:4a:70:f9:19:5c:
e0:2a:17:63:4e:1a:ff:a8:a2:d3:5e:77:6d:63:97:a6:00:ad:
6e:c6:a6:c2:2a:83:bd:8e:13:fa:82:4a:0a:4f:c3:5e:d2:db:
0e:26:4e:ba:da:ed:e7:3e:10:9a:d4:03:58:3c:2f:aa:57:57:
76:cf:de:33:f0:15:0a:9f:ee:7e:03:13:3f:c0:9e:ad:f1:4d:
8e:05:e0:0d:72:7b:54:49:29:c9:9a:a0:3d:ba:0d:2c:60:ed:
e0:3f:04:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC8B6fRoSjuLJ8u7FT2P2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwODE1MDEwMTI1WhcNMjYwODE2MDEwMTI1WjAzMTEwLwYDVQQD
EygyMjZiOWQyZTQzMzYzNzFmMzRhMWI1NzdiMzM4ZGVhZDViMTY3OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wtAr9aJn4mGnLS8CYupIb7nbm/S
MBZ+XZjKLX8pSL2OnJJHe9PUD3fW7lpPKWRifIJcAOOcz1PViWhFDjCBkpyUMoo8
ax9mO940ofNTjeYoKVEtCJ5ideai0g7an9rCogUhvLdc34MW7L9EmzmFZSUNyGTL
4tTJX1ELdvQv5y64hJ4yHmK3LIlU98vgWpWYMeZFOdMJ0AXB0gUKuRQbD6W+crQI
SMaYfTRqAmlIt1OGuUJCqJFMoCMDwOM+Aj3D5ed2Gl5SWzibF8pYnPRKO1BLDcF8
FlnvbWAgZ6fLLCKyLjnQGJXzrYpL3wQzxTX+ECL1Rct/kOWdQz68B0qtHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJrnS5DNjcfNKG1d7M43q1bFnl6MB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO7wm4Id
7ww2erQR/76DAtLqn5cbBiKKWModrlsv/kWbukFkwDRHrYAwaKIl9Eb9WWw4EmOP
5/FjQGAB6NuPDpTw+vv5pX7BCDrB6MRfV2oPV2Ey1UK/SAXndFYmvaMEwlUO589p
lksPBSAGuSWBBv1xe8npE9R24RjopcAQsGJwSW2o+2qvBDPUhTfxdZVDzWgQWH2A
/i2MKckVfUpw+Rlc4CoXY04a/6ii0153bWOXpgCtbsamwiqDvY4T+oJKCk/DXtLb
DiZOutrt5z4QmtQDWDwvqldXds/eM/AVCp/ufgMTP8CerfFNjgXgDXJ7VEkpyZqg
PboNLGDt4D8Esw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:02:38 2026 by rpki-client