Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 1OpBLFzWCpqZHfd2e+8SrQktsaQRy6lBMOIAs/w2LWw=
Subject key identifier: 85:0A:BF:46:25:97:B6:FB:6C:F5:D0:66:F7:B1:B2:82:ED:86:E2:4D
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A15DB0FD294225A5910A58B0BCC9B54A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0EEC
Signing time: Wed 21 Oct 2026 09:00:42 +0000
Manifest this update: Wed 21 Oct 2026 09:00:42 +0000
Manifest next update: Thu 22 Oct 2026 09:00:42 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: TgV4D5JZWOHnw7Z7JdmUc++evLy58rq+keceliriYkc=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa (hash: l8C6p4QFcok/PgmLUUkYCpOJ4hYEhzcrxtTn9OMHuUo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:b0:fd:29:42:25:a5:91:0a:58:b0:bc:c9:b5:4a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 21 09:00:42 2026 GMT
Not After : Oct 22 09:00:42 2026 GMT
Subject: CN=850abf462597b6fb6cf5d066f7b1b282ed86e24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:4c:aa:40:90:5b:d6:53:e9:31:8a:6a:7e:
a2:7a:61:05:1d:a2:86:43:a0:97:69:e5:45:54:28:
69:67:3d:3d:45:25:6f:d4:40:d3:15:eb:5d:92:37:
16:c7:bd:df:37:97:38:3b:d4:90:f1:83:7f:c1:45:
94:a2:be:2f:ce:83:c4:aa:1d:55:79:c5:2c:f2:eb:
e3:05:78:70:a4:bf:7e:83:6b:3c:75:df:93:1d:14:
b2:5d:ac:00:32:a0:bd:b5:cc:f3:22:d2:c6:9d:87:
49:3e:29:0e:26:f8:9d:a0:86:62:d7:d0:0d:98:d0:
3d:20:dc:9c:de:71:1f:75:bf:ab:67:bc:af:c1:8c:
31:b4:8e:81:57:31:a3:e8:87:60:da:e7:89:11:9b:
0b:59:e9:f4:84:83:b7:af:4a:c2:2d:b0:60:6c:81:
b2:d6:9e:49:05:ae:9d:b4:56:b8:9e:4a:4b:41:78:
af:8d:22:9f:da:5e:d9:8d:3c:08:45:71:e9:5c:12:
8e:05:a9:ef:02:00:43:59:8c:9d:ac:b5:6e:6e:61:
4f:fe:3e:a8:91:c0:23:3d:e3:7f:4c:e5:5a:09:2c:
fa:30:73:4a:42:20:59:d4:65:85:b9:7e:83:97:e2:
9e:87:7f:de:7a:1c:06:a2:52:95:39:94:67:7c:96:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:BF:46:25:97:B6:FB:6C:F5:D0:66:F7:B1:B2:82:ED:86:E2:4D
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:23:f5:b9:26:b9:82:5c:c2:62:70:e4:3d:e9:3e:ac:91:e5:
d3:20:2d:e3:88:c0:7f:bd:95:6d:68:c8:ba:0c:ce:b9:89:00:
68:9b:a3:aa:f4:0b:ad:78:ff:ef:0e:78:c6:3c:57:72:18:52:
67:a3:d5:37:50:f7:7f:c1:1a:b8:4d:e0:7c:ca:2e:03:ef:00:
54:53:0c:59:b9:6a:5d:98:70:15:81:99:dd:88:c4:33:78:a7:
92:15:77:b4:04:b2:78:33:43:68:e7:5d:13:bc:d6:d9:3d:c2:
bd:54:23:a0:2e:55:ea:04:5e:8a:64:98:98:e5:43:ca:b2:97:
f1:ad:50:d9:e0:12:68:8a:8d:f5:04:92:2d:a2:10:db:ab:35:
0b:04:dd:71:e8:9f:18:2a:ea:b8:cf:76:b8:32:96:5e:71:35:
d0:13:72:39:ef:ef:7a:d4:4b:dd:aa:7f:2e:1e:2b:e1:fb:95:
7b:ca:bc:2b:cd:23:8b:56:ae:dd:df:b5:c5:f2:f1:29:b8:fc:
88:ba:bd:26:58:8f:1f:c3:8a:d2:ed:93:91:6a:2f:ca:d6:48:
f9:4c:3f:f5:0c:75:00:c1:be:1e:06:0d:07:f0:12:aa:d2:c9:
04:ab:55:03:d5:04:2a:54:5c:5e:2f:bf:32:73:5e:aa:b9:98:
5a:02:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:41:46 2026 by rpki-client