Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 73XW3+u1MMERl50pRoQ57xKaBKsw/9I0DeFZh8R/IJI=
Subject key identifier: 9D:23:0E:E5:B4:6D:72:86:A1:75:FD:37:11:0E:0C:FD:79:A4:39:E8
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A13ECB63F128483FE0EB60D4BB1675A8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0EDC
Signing time: Thu 15 Oct 2026 09:01:19 +0000
Manifest this update: Thu 15 Oct 2026 09:01:19 +0000
Manifest next update: Fri 16 Oct 2026 09:01:19 +0000
Files and hashes: 1: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: VPu3gMkHEdQNyf5xlwCOrunia+ngaQwepAc8uMDxMXc=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=)
5: ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa (hash: l8C6p4QFcok/PgmLUUkYCpOJ4hYEhzcrxtTn9OMHuUo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:63:f1:28:48:3f:e0:eb:60:d4:bb:16:75:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 15 09:01:19 2026 GMT
Not After : Oct 16 09:01:19 2026 GMT
Subject: CN=9d230ee5b46d7286a175fd37110e0cfd79a439e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:de:a7:9e:e3:55:de:ce:ca:4a:52:1b:23:
d1:b3:97:9a:75:40:6e:62:c8:62:26:a8:d4:fd:97:
5a:03:4d:a5:b4:01:6c:f6:00:ec:15:7c:0a:bc:4b:
df:47:0b:b3:67:1c:12:dc:e7:96:b4:71:28:75:fb:
ae:9d:0d:41:89:a8:a6:e2:e9:d8:e2:e9:aa:71:0d:
d9:9b:71:9f:e6:59:cc:b1:22:3e:bf:1c:65:37:3e:
62:d6:cc:52:5a:be:27:ca:79:7f:a4:83:a3:9c:bc:
49:31:51:9f:65:14:1d:3e:c2:e2:dd:4a:4d:bf:87:
63:36:1f:90:2c:2e:b8:eb:81:91:01:1e:cd:12:24:
2d:d4:9f:1c:1d:c8:5e:5e:39:49:40:72:e5:4a:42:
72:5d:d1:0e:6c:4c:0c:9d:03:06:5e:de:98:ae:e9:
ce:7e:d9:93:8e:bf:32:d6:12:c0:5d:eb:5f:74:5c:
28:44:2e:55:2c:87:c1:b7:b4:d5:19:56:ce:b5:ab:
52:ff:d0:39:98:f6:1f:6a:66:e0:04:7e:80:9e:5a:
c2:24:6c:61:5e:a1:67:53:5d:3e:3a:64:0e:58:1b:
74:89:ec:29:4d:8e:f2:c7:e6:a0:be:d2:9e:e9:fe:
10:8f:c4:e7:f8:cc:fb:46:d7:1e:15:bb:8b:a4:b5:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:0E:E5:B4:6D:72:86:A1:75:FD:37:11:0E:0C:FD:79:A4:39:E8
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:95:3b:a8:9c:ce:1c:cc:75:da:0d:2c:44:ae:06:cb:bd:d4:
f0:a6:82:1a:32:0b:27:70:97:1b:05:67:b5:22:d4:9e:6f:1d:
bb:7f:1b:7f:13:df:66:19:ac:84:f4:52:22:f8:e8:b3:09:ea:
d2:b7:39:5b:0c:d2:d5:d0:a1:58:0f:86:c4:9b:33:cb:76:e0:
44:fd:6f:f3:9b:9a:ef:8e:50:8d:a1:d6:86:14:1e:d8:fd:29:
e1:42:0f:49:11:62:c1:3d:5a:1e:89:98:84:7d:e8:2d:86:21:
17:24:d0:a1:40:20:51:05:cf:ff:c3:99:dc:73:ef:8e:6f:6b:
66:25:c1:dc:0e:4c:3c:a2:08:29:af:ed:3e:06:92:1e:74:60:
99:d7:3f:9c:ff:62:04:1d:a1:9c:8a:8a:dd:9a:61:df:f5:28:
7a:aa:46:b2:23:6c:8b:d7:f7:67:05:9d:71:06:32:9b:be:c8:
9f:a4:96:d7:62:19:a5:c8:4e:e5:5f:c4:b8:5f:b8:02:e6:21:
0b:15:fc:0d:21:8c:90:e5:46:45:de:21:d7:86:c2:0b:f3:72:
eb:6f:9a:31:4a:7e:dd:9a:41:ae:12:d9:b9:94:7e:d3:c9:fc:
39:bb:6a:33:2c:f5:f5:25:7d:08:d2:14:8f:fa:b7:11:97:d0:
cf:52:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:56:48 2026 by rpki-client