Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 2bC5xfyGd7Rs5zg77Opol20uN6F8EijfAeqrrbfVQ/o=
Subject key identifier: 9F:41:0C:52:0B:E5:CD:26:20:C5:1D:B1:85:E6:F9:D5:1D:34:E5:AE
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019FD1961C89D04F98E4EF10B444B0FF65CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0E16
Signing time: Wed 05 Aug 2026 11:01:43 +0000
Manifest this update: Wed 05 Aug 2026 11:01:43 +0000
Manifest next update: Thu 06 Aug 2026 11:01:43 +0000
Files and hashes: 1: 6y3oRw3nYteMCJtK4uy0H0RCKeg.roa (hash: 9i0Xm0a/amdzlzG2cdULFMUKlFI5eHMiCm8ALmpX8p0=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: 4Eod1Rt5tstdaDIC0giLnphwrou1mkrZWfPIJbIXhBQ=)
3: DMNBtHWgTEhz4n5BZo-OdnF1Gpw.roa (hash: tiqfuYupTq2O4jaXvwB3uzDDlD4pfPMY6A9tdmzUNQM=)
4: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:96:1c:89:d0:4f:98:e4:ef:10:b4:44:b0:ff:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 5 11:01:43 2026 GMT
Not After : Aug 6 11:01:43 2026 GMT
Subject: CN=9f410c520be5cd2620c51db185e6f9d51d34e5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:2e:c3:a9:bf:c6:0e:ee:45:88:8e:98:ec:
ce:d8:84:fd:81:f2:46:4a:e0:7b:50:b3:8f:a9:d5:
5a:cf:c2:8a:2e:dd:ca:3a:28:2f:de:53:28:cb:fd:
55:97:15:9c:9c:55:4d:e2:3e:2d:07:eb:fd:0c:3d:
b2:81:f9:39:1d:a4:e6:bb:1e:53:2b:95:6c:ea:e7:
7b:fb:f9:0e:48:50:e7:8c:c6:22:ef:0b:79:af:94:
65:ce:a2:4f:3b:05:6c:23:42:94:b8:70:a4:60:5c:
7b:a7:ff:f6:3b:2b:cd:f2:56:6b:62:cc:be:de:4d:
f8:71:4a:d8:ed:fa:cf:3f:26:d6:5d:69:9d:2e:12:
06:0f:b1:a3:1e:c6:f4:39:25:65:92:d7:fe:0d:19:
9a:56:c6:e7:62:6d:9b:f2:6e:58:cf:7f:7b:18:e3:
e7:3a:74:44:ec:76:f6:19:68:0c:37:98:6e:6e:d2:
5e:a8:e6:6e:e1:bf:d9:9e:6b:a2:85:94:24:8e:22:
7a:6c:02:7f:59:93:f9:ff:9d:47:07:c2:1c:7e:5a:
d6:32:db:d2:e2:e6:72:4c:ea:c7:23:b5:85:0a:73:
03:99:f6:2d:91:83:b0:0f:ff:f1:be:c5:08:e3:42:
58:59:fe:d9:d7:67:e9:2e:64:c5:0d:c0:f0:ab:a0:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:41:0C:52:0B:E5:CD:26:20:C5:1D:B1:85:E6:F9:D5:1D:34:E5:AE
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:c8:f6:48:cf:69:bd:bc:c5:d8:33:bc:b4:10:09:f4:bf:
8b:ab:e6:8d:21:25:88:6a:04:37:a3:ea:0e:5e:6b:6c:39:20:
8c:bc:60:8f:64:f9:42:a2:61:cb:54:c4:d8:e2:c5:fc:48:f8:
91:c3:f9:d1:f1:9b:59:7d:3f:99:10:27:f4:0a:dc:54:60:08:
85:bc:8b:c8:f6:4a:1f:57:83:59:5f:68:32:e1:b5:a0:47:b9:
ae:80:a2:be:bb:34:9e:6b:5c:4e:4a:6c:a8:cb:95:04:25:37:
10:d0:51:23:5c:22:43:73:fd:2b:86:25:21:3d:40:93:ec:6a:
45:fe:de:8f:4d:6e:2b:f9:bd:98:88:7b:59:b9:09:5e:13:59:
41:87:e0:5c:89:5b:c8:13:26:af:9b:3c:2f:76:fc:e7:d4:bb:
da:93:19:81:30:81:5e:ce:f8:43:f7:ab:04:34:73:4b:25:f2:
58:fa:ad:77:f8:ca:01:ca:c5:94:09:1c:d9:e2:8e:4a:11:dc:
9c:4e:02:0f:6c:e1:58:c4:7b:86:02:c7:f2:b4:64:c4:f5:36:
5a:f7:26:b8:ff:7b:ac:7c:fc:81:c5:9e:d6:8d:1a:47:18:75:
16:d4:de:48:dd:22:12:f9:3a:cf:75:4c:df:6d:20:10:25:c6:
97:06:aa:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/RlhyJ0E+Y5O8QtESw/2XOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwODA1MTEwMTQzWhcNMjYwODA2MTEwMTQzWjAzMTEwLwYDVQQD
Eyg5ZjQxMGM1MjBiZTVjZDI2MjBjNTFkYjE4NWU2ZjlkNTFkMzRlNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSsuw6m/xg7uRYiOmOzO2IT9gfJG
SuB7ULOPqdVaz8KKLt3KOigv3lMoy/1VlxWcnFVN4j4tB+v9DD2ygfk5HaTmux5T
K5Vs6ud7+/kOSFDnjMYi7wt5r5RlzqJPOwVsI0KUuHCkYFx7p//2OyvN8lZrYsy+
3k34cUrY7frPPybWXWmdLhIGD7GjHsb0OSVlktf+DRmaVsbnYm2b8m5Yz397GOPn
OnRE7Hb2GWgMN5hubtJeqOZu4b/ZnmuihZQkjiJ6bAJ/WZP5/51HB8IcflrWMtvS
4uZyTOrHI7WFCnMDmfYtkYOwD//xvsUI40JYWf7Z12fpLmTFDcDwq6DKjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9BDFIL5c0mIMUdsYXm+dUdNOWuMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZLI9kjP
ab28xdgzvLQQCfS/i6vmjSEliGoEN6PqDl5rbDkgjLxgj2T5QqJhy1TE2OLF/Ej4
kcP50fGbWX0/mRAn9ArcVGAIhbyLyPZKH1eDWV9oMuG1oEe5roCivrs0nmtcTkps
qMuVBCU3ENBRI1wiQ3P9K4YlIT1Ak+xqRf7ej01uK/m9mIh7WbkJXhNZQYfgXIlb
yBMmr5s8L3b859S72pMZgTCBXs74Q/erBDRzSyXyWPqtd/jKAcrFlAkc2eKOShHc
nE4CD2zhWMR7hgLH8rRkxPU2WvcmuP97rHz8gcWe1o0aRxh1FtTeSN0iEvk6z3VM
320gECXGlwaqgg==
-----END CERTIFICATE-----
Generated at Wed Aug 5 20:45:14 2026 by rpki-client