Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: Lp38y4Kge7NXEVRkfJlzra5djacCBeuK+4FumFB77dk=
Subject key identifier: C5:57:AA:C0:26:9A:DF:74:24:A2:55:7A:AA:A0:9B:D6:02:01:04:AC
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A0FF109D460B7CCFABC3A037BAE1893A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0EBA
Signing time: Sat 03 Oct 2026 00:01:13 +0000
Manifest this update: Sat 03 Oct 2026 00:01:13 +0000
Manifest next update: Sun 04 Oct 2026 00:01:13 +0000
Files and hashes: 1: 9NN4sneYX5yFX2nF57cB-7DOgUU.roa (hash: CB5iAR6CvTXyfF/elT5SFgoyb5AIIBMWafvdFh1FrK8=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: 27t5aFfoXQGVfX2HPdX4/bLMzW0hfwo5Q+I9lVAMkc4=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:10:9d:46:0b:7c:cf:ab:c3:a0:37:ba:e1:89:3a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 3 00:01:13 2026 GMT
Not After : Oct 4 00:01:13 2026 GMT
Subject: CN=c557aac0269adf7424a2557aaaa09bd6020104ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:6d:60:ed:44:ff:b2:04:30:fc:c5:e1:69:
7f:4d:f2:75:97:cf:d3:43:4f:95:cb:9d:e5:ab:7f:
73:fa:4c:31:f7:4c:75:f8:9f:2c:22:b2:67:a5:41:
d9:a9:21:2d:f1:35:33:e2:84:80:1d:8d:86:29:10:
3f:a7:5a:6f:ce:58:65:7e:72:dc:ad:94:b6:e9:b4:
76:e6:5e:f7:4f:a7:21:41:1d:c4:0c:b8:94:5e:e9:
71:c5:c6:97:5c:35:63:7d:c1:44:6c:27:33:3a:31:
16:52:c0:b9:13:4e:b1:9a:b9:39:db:d0:8c:88:e7:
e3:e8:43:f7:dc:16:72:f9:bc:e7:8a:fb:d0:40:5c:
bb:ae:75:79:ed:dc:01:d0:1c:3b:29:83:61:5e:5e:
73:f3:e2:36:b0:f3:22:ec:d4:f7:83:34:a5:b1:c2:
a4:01:72:0c:04:d4:10:6d:65:ef:35:79:51:10:aa:
e1:3d:8f:01:df:4f:27:2c:55:48:d7:18:bf:50:f2:
c5:57:eb:af:72:25:68:cf:20:2e:3e:70:e4:52:40:
b2:3b:ee:6b:cf:66:eb:3c:5d:3d:7d:bf:7f:ea:4e:
a1:35:45:6d:47:3e:ff:04:10:11:8a:2f:82:23:21:
9e:97:5e:e7:69:84:09:7c:3c:7c:3e:41:4f:82:65:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:57:AA:C0:26:9A:DF:74:24:A2:55:7A:AA:A0:9B:D6:02:01:04:AC
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0c:2f:43:79:07:ea:73:4c:ad:f6:eb:8b:c5:8c:ad:49:d3:
7d:d0:f8:7f:74:f2:84:80:33:a6:5e:ce:34:7f:ea:71:2b:5d:
06:1b:df:26:27:ae:82:cb:eb:cf:f8:3b:d4:a9:ca:e2:80:cc:
33:e4:b1:1d:2e:7d:a2:4d:53:8b:5d:d4:ae:ea:ac:c3:28:6f:
56:b0:af:4a:26:60:1f:9d:7e:b2:01:8d:ad:b5:b0:19:65:0b:
d3:fe:5b:7c:45:4e:44:c0:35:2f:ee:ed:63:d7:71:cc:88:ab:
69:ab:2a:d7:db:01:5f:82:88:b1:3b:8f:5f:be:52:01:3d:15:
0d:54:ef:e9:fb:47:16:7b:44:ec:f7:0e:6f:f0:64:c6:53:4e:
8c:5d:4f:1e:53:29:c7:11:8f:cc:b9:cd:4e:1b:1b:16:6e:c1:
6f:2b:78:b8:f9:4a:1f:69:88:ac:eb:c5:20:b5:b0:19:ec:39:
f4:fe:db:a0:97:41:ab:d6:2d:b6:c7:13:60:0a:39:5a:c3:f5:
ab:86:9a:db:5e:5a:d1:ae:bf:e7:37:15:14:6e:f8:d9:80:e0:
af:0c:35:5c:d0:fb:57:c5:35:17:d8:53:01:90:92:49:04:a2:
e2:40:88:ad:8c:fe:c7:c7:ee:10:3d:8c:3d:c3:b3:02:0f:78:
18:f4:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:53 2026 by rpki-client