Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: LW26ZUnkrBr6qciPxMzlmdiwxkgEAlwJSBPJZfuF/FE=
Subject key identifier: 2B:CE:99:52:48:16:3D:0C:90:68:BE:B5:A4:4A:F4:3A:BA:D0:C6:76
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019FF26A76E2D572CC3D36128E1B7A9A47AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0E27
Signing time: Tue 11 Aug 2026 20:01:31 +0000
Manifest this update: Tue 11 Aug 2026 20:01:31 +0000
Manifest next update: Wed 12 Aug 2026 20:01:31 +0000
Files and hashes: 1: 6y3oRw3nYteMCJtK4uy0H0RCKeg.roa (hash: 9i0Xm0a/amdzlzG2cdULFMUKlFI5eHMiCm8ALmpX8p0=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: EBbzqorwsl5gfqq+B3AVcbZsGL+9zfWDkqq9PqLJ0hA=)
3: DMNBtHWgTEhz4n5BZo-OdnF1Gpw.roa (hash: tiqfuYupTq2O4jaXvwB3uzDDlD4pfPMY6A9tdmzUNQM=)
4: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 20:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:6a:76:e2:d5:72:cc:3d:36:12:8e:1b:7a:9a:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 11 20:01:31 2026 GMT
Not After : Aug 12 20:01:31 2026 GMT
Subject: CN=2bce995248163d0c9068beb5a44af43abad0c676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:35:c1:75:c5:2f:ee:f4:fd:dc:7c:ff:4e:
2f:c9:da:94:19:f6:a0:28:66:32:d3:83:45:c8:a8:
b0:f2:f6:47:2a:75:1b:60:36:47:bf:b4:0c:0b:09:
a1:e0:3b:44:50:5b:e4:0f:29:a1:f9:30:cc:ae:11:
be:69:60:00:1b:c6:01:2f:5b:73:01:24:88:4e:60:
b9:9e:9a:ee:2f:57:e0:f4:be:35:2b:68:c0:1a:5a:
fe:9b:47:bb:e7:4f:a8:40:06:bf:6a:5b:83:98:2e:
43:2f:96:9b:75:3b:7b:8b:7b:ab:d0:18:ac:7f:a1:
4a:c8:14:4b:a8:ed:ca:e9:5f:a3:8b:0f:48:0c:8c:
e5:6a:b3:12:df:cb:58:a6:b3:5e:83:c3:e2:ce:a4:
30:bd:57:af:76:ed:d5:43:b0:fb:f6:b0:f5:16:5f:
c7:fa:e0:07:bd:ef:ac:30:92:f2:db:b8:28:8a:3e:
50:fc:8c:64:aa:61:26:9c:44:9a:7e:a7:67:03:47:
7e:bd:4d:1e:a1:73:27:0e:e6:ff:d6:3f:89:26:0f:
ca:16:82:97:1a:be:23:22:3c:2a:fa:77:8e:72:1c:
b7:6c:a9:2f:21:fe:2a:36:09:f4:6a:99:27:78:a5:
ea:21:02:96:d4:39:55:d9:d1:14:fe:07:b5:61:4a:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CE:99:52:48:16:3D:0C:90:68:BE:B5:A4:4A:F4:3A:BA:D0:C6:76
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:aa:5e:f4:0d:35:6d:4f:d9:eb:d1:19:d4:50:6b:ed:18:1a:
c8:57:7c:64:21:b4:54:60:c1:d3:ee:cb:27:cc:d5:7f:84:09:
5a:44:6a:5c:87:4f:2a:63:48:78:51:86:28:cf:59:6b:b9:90:
aa:1f:8f:c7:18:cd:48:4b:ea:e3:70:c6:de:a9:59:51:42:df:
a2:51:b4:40:34:56:f4:c1:ea:42:2c:a4:8b:39:70:e9:30:d1:
10:ba:b0:55:24:fe:31:5e:c6:51:d0:65:9d:0f:79:1d:4f:27:
57:20:36:2f:07:6b:a1:19:74:f1:c0:6d:41:23:99:cd:17:f2:
af:40:88:c5:6b:d8:5f:16:e9:65:59:a2:dc:8f:6e:a4:9f:df:
b3:d5:43:45:97:b0:61:b3:bc:3d:7d:43:5d:b2:6e:56:ce:38:
3c:c9:4c:b1:4e:78:eb:64:59:cc:6d:f0:89:88:2f:0a:60:e4:
80:46:26:d8:e4:f3:4b:b1:84:df:76:7a:cb:ff:07:43:78:cf:
95:e9:7d:a5:fe:b7:af:36:e6:a6:40:01:f6:15:75:0c:68:90:
2f:9d:77:55:b1:c5:01:83:90:6c:6e:5e:36:0e:c1:4a:95:d7:
1f:7d:38:d5:6f:b0:e5:06:87:d3:ce:f5:43:31:d1:6a:30:f7:
7a:e4:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 03:46:51 2026 by rpki-client