Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 7zAC5wZfScgzYQCkRsOgk67HKiub+3c8tdFySSkJRlU=
Subject key identifier: 21:E1:5E:B9:04:26:4D:60:6B:1A:75:AB:03:E0:6B:59:42:FB:05:81
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019F84FB06772183EE1B70BF6B8F4E1D9332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0DEE
Signing time: Tue 21 Jul 2026 14:01:11 +0000
Manifest this update: Tue 21 Jul 2026 14:01:11 +0000
Manifest next update: Wed 22 Jul 2026 14:01:11 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: zsEdX7QgFecQlOGq4j/aAPNdsgE8b22ed+ewitbjJSg=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: Z9-G8jBlIUV8JXo4mpweyF3YJ1U.roa (hash: dj5hMhYWdWHJcm+043OLfnQ2pOg2DSF2L7CpAN4Js2w=)
4: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
5: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
6: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
7: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:06:77:21:83:ee:1b:70:bf:6b:8f:4e:1d:93:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 21 14:01:11 2026 GMT
Not After : Jul 22 14:01:11 2026 GMT
Subject: CN=21e15eb904264d606b1a75ab03e06b5942fb0581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:21:20:76:15:9e:92:bb:ab:98:ea:4d:1d:
bd:ce:4d:04:c5:ca:5d:25:96:b3:87:4c:a5:81:b8:
13:ed:a5:64:ff:79:b2:ae:0f:17:08:12:d3:55:6d:
94:80:8b:32:0d:56:17:87:be:14:6f:81:dc:9c:59:
45:57:e6:86:0b:f9:e4:fd:9f:5f:43:09:09:f7:84:
d4:05:86:f9:3e:f5:7c:14:be:82:59:72:04:e4:8b:
41:a8:91:a9:c1:53:36:b3:5e:bb:b2:db:53:a4:11:
66:66:fc:d5:bc:6f:13:27:3a:80:f2:ca:99:b7:71:
6a:3e:5d:3c:ed:f4:1d:ee:25:bc:98:ae:e2:0d:17:
2e:eb:62:65:27:df:7d:91:06:7d:4f:83:d3:5f:84:
52:35:e2:65:7c:82:c8:dc:28:eb:80:7a:55:83:44:
d5:6b:34:40:6d:52:7b:0d:60:6e:62:b0:ef:d3:c0:
bc:50:91:f8:9f:77:8a:92:8e:e8:7f:33:f6:3e:d1:
57:be:66:e1:81:cb:99:cf:35:c9:a2:0a:f2:55:bd:
b0:61:5e:2a:18:4b:8f:bd:5a:1d:b3:7d:d2:10:85:
fb:0b:52:1d:fe:9c:8a:2c:a5:73:84:7a:f0:6f:51:
ab:04:e5:01:cf:74:ac:3e:a5:a8:1c:e6:d1:be:37:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:5E:B9:04:26:4D:60:6B:1A:75:AB:03:E0:6B:59:42:FB:05:81
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:6a:58:31:14:46:ee:1a:14:f0:fa:d1:f2:a1:ff:d0:be:
48:68:07:d6:05:8b:98:a5:4c:1a:ac:2c:65:0d:bc:df:57:3e:
d6:14:58:90:13:a0:ec:94:eb:47:01:b4:f0:24:2f:5f:12:8e:
c6:31:f1:7e:aa:3f:23:9e:f6:48:d4:8b:21:ed:31:e5:0c:9d:
9a:aa:ec:c6:8a:d0:91:83:36:3d:8a:c9:28:ef:0a:bd:2c:69:
ef:f9:73:32:8e:31:ef:e3:e0:a0:c4:78:07:8f:a4:7f:ee:2e:
da:d5:b9:3a:f1:ee:e9:91:b7:40:55:ee:4e:bd:c6:3f:fd:35:
a9:2b:57:88:48:23:da:d8:4a:7f:f2:17:5e:5f:0b:73:33:4a:
9d:02:33:8c:76:8e:0f:9a:ab:aa:34:7f:4c:a7:a6:e8:8f:51:
76:66:ae:1d:1a:77:0e:8d:bb:1a:9e:82:16:1e:63:91:64:27:
70:01:d8:3c:42:b8:18:41:7b:2a:84:ad:51:97:56:e8:68:a1:
c1:d6:8f:db:98:4f:9f:cb:f1:46:47:37:7e:c5:78:65:33:28:
47:b7:de:88:1b:8c:5c:1e:6e:b0:e9:0d:c2:a2:9d:5a:ab:55:
ad:f8:58:e9:0b:43:eb:78:f8:13:4d:42:f0:f6:c8:e6:ce:82:
93:a4:0b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:28 2026 by rpki-client