Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 34OWEFYahq/LtZ4dE7c8GeslzvfaXtYgn0UgPy1FlvU=
Subject key identifier: 63:F6:B8:1E:21:42:E8:87:02:EE:94:BB:B4:6E:97:E4:29:78:32:03
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A18C0A5E6A50E6255EED7ADEFB65BEA600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0F04
Signing time: Fri 30 Oct 2026 09:00:52 +0000
Manifest this update: Fri 30 Oct 2026 09:00:52 +0000
Manifest next update: Sat 31 Oct 2026 09:00:52 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: qLUEP/r09N5eApAxSyzfDsmIVR/aNMVOwV3G+5pFqb0=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa (hash: l8C6p4QFcok/PgmLUUkYCpOJ4hYEhzcrxtTn9OMHuUo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:5e:6a:50:e6:25:5e:ed:7a:de:fb:65:be:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 30 09:00:52 2026 GMT
Not After : Oct 31 09:00:52 2026 GMT
Subject: CN=63f6b81e2142e88702ee94bbb46e97e429783203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:ee:03:1c:f3:0d:27:d9:d5:37:49:cb:b7:
37:1c:16:4a:be:a6:a4:52:a1:2b:11:8f:57:f3:5a:
02:a4:7e:1e:24:f5:53:4e:c6:bf:d3:27:92:c6:5e:
bd:57:17:ec:8e:d8:d4:b4:aa:5d:a6:6e:50:cb:23:
f7:b2:65:db:01:29:15:0a:4e:52:e1:f6:97:b2:fc:
2d:0a:fb:84:6e:fd:3e:41:b1:9b:d6:8a:ce:eb:59:
42:5f:25:b3:97:e1:d2:62:5c:9c:8d:a0:a9:c0:50:
fe:7f:f1:f9:29:55:de:ec:9b:af:d3:e3:48:4b:22:
0f:70:43:fe:f3:4f:5e:4e:7b:78:db:0c:83:72:61:
82:17:bd:85:c0:ae:96:40:04:59:ad:bd:4c:b3:f5:
6d:31:b6:f3:5e:c3:84:c0:7a:82:3f:1f:90:24:6a:
a0:50:f9:02:ce:37:11:e7:2b:10:a2:73:a7:34:6f:
62:7e:3c:b7:f5:1d:32:ee:cc:69:21:c6:c4:7b:8f:
37:c8:d6:40:1a:37:51:46:37:fd:ff:98:3e:4f:6a:
8e:cd:c1:aa:ce:e6:8c:2f:51:8f:a4:6e:fb:a4:87:
5a:53:7f:c5:c5:80:b0:ed:1b:b0:bf:e8:64:3b:69:
5f:37:dc:6b:08:39:ac:47:4e:8e:a0:32:26:bb:37:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F6:B8:1E:21:42:E8:87:02:EE:94:BB:B4:6E:97:E4:29:78:32:03
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:50:0d:e1:47:47:1e:b5:26:fd:18:7f:3f:6c:7d:83:3e:cb:
dc:f6:0c:23:2c:1e:fa:3f:e3:d6:ee:fb:f8:d5:b4:f4:7b:51:
b0:4b:c9:be:9f:3a:cf:57:73:b3:00:2f:a6:73:75:64:9f:47:
7b:89:ca:49:76:07:96:bf:b4:9f:ef:2b:c7:96:58:60:da:5e:
97:12:3a:24:e7:fd:30:5b:39:e4:31:3d:82:59:df:e1:8e:d9:
78:c5:a3:fd:64:0b:d4:fc:ef:43:0f:77:eb:5a:0b:c1:a0:e3:
93:2e:48:dc:24:47:76:af:7f:78:e9:4b:18:29:c1:d7:59:ed:
52:eb:98:ba:72:4c:21:a8:4e:b9:92:5a:35:bd:42:d1:e7:08:
8d:5b:70:72:4f:ae:c5:f4:e4:42:16:65:73:e9:1c:ad:0a:b8:
60:17:24:fb:f7:85:e3:3b:dc:d6:5b:be:15:34:87:47:06:af:
9d:e6:95:a3:e0:a0:ce:25:d4:3e:cd:91:8d:28:f2:34:b0:c8:
26:09:14:18:7f:e4:5b:87:58:4b:76:1f:0d:0c:85:92:98:f1:
9b:28:be:5c:95:9a:02:08:4c:5a:75:53:68:7b:77:e7:00:bd:
a9:7c:a3:5e:4d:a0:e7:db:df:5f:9c:1b:6b:83:da:0b:75:3f:
d3:f7:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:59 2026 by rpki-client