Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: CvKkG4sJO6arj+wgKg84EaHF2K9ijNIPaClSFbfz57M=
Subject key identifier: 11:43:1E:FF:E0:00:71:F3:B4:A5:6F:22:BA:67:88:36:1F:4E:25:14
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A021D574F1479F0F230D04CCA3D883EA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0E40
Signing time: Fri 21 Aug 2026 01:00:32 +0000
Manifest this update: Fri 21 Aug 2026 01:00:32 +0000
Manifest next update: Sat 22 Aug 2026 01:00:32 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: 6jwrTSk1+Mph6imWBhrBOdrkkf/2gg/NvTNMiBP8ZCE=)
2: DMNBtHWgTEhz4n5BZo-OdnF1Gpw.roa (hash: tiqfuYupTq2O4jaXvwB3uzDDlD4pfPMY6A9tdmzUNQM=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: byfII41hx7v6GfkLHOOgwLy3GLA.roa (hash: Zo/z6gr7446Px1jbq5uM2vZhtDDjC3+TH8hqZRTm9rc=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
7: i536I-ayrDn5uau328WAcV3xqS0.roa (hash: OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:d5:74:f1:47:9f:0f:23:0d:04:cc:a3:d8:83:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 21 01:00:32 2026 GMT
Not After : Aug 22 01:00:32 2026 GMT
Subject: CN=11431effe00071f3b4a56f22ba6788361f4e2514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:17:5d:5d:a9:f8:7a:64:96:68:97:3b:b2:
88:23:bd:fd:40:ca:07:a3:4e:4d:88:99:7b:94:d3:
c9:f7:38:05:2e:8d:fe:5c:d4:f1:da:4d:a2:35:ab:
df:3b:f2:48:07:e3:f8:3d:16:a7:3d:51:2e:1e:aa:
ea:ac:39:eb:95:07:01:20:ff:ca:d5:dd:2e:c7:3f:
e8:98:4c:a3:dc:4d:b7:a4:76:cf:8a:c2:1f:ae:f0:
86:8d:69:87:24:33:78:60:c7:df:ec:0a:d9:59:84:
9d:dc:6c:91:63:ad:76:7c:1d:f1:5f:04:fd:5f:e0:
c7:81:be:f6:20:cc:5a:7e:ed:07:3b:1a:23:eb:dc:
a2:b3:13:8e:26:ce:11:bb:e8:d0:63:8f:3d:5a:3b:
c9:ba:a3:46:ff:47:18:c3:0f:5b:30:60:16:b9:90:
28:1e:1f:ad:aa:f2:af:c8:c6:8a:a7:b4:28:dc:3f:
6b:96:fe:e4:98:ea:51:4d:ee:be:32:4d:9d:61:55:
b7:19:b2:d8:bf:56:16:7c:fc:6a:7c:d5:39:95:2b:
e3:53:01:15:7f:ab:dc:da:ee:02:22:5c:a2:b3:09:
4e:9e:47:ca:61:69:6e:37:c7:eb:f1:ca:8a:e6:79:
8a:d3:53:f4:8a:0c:f8:82:c1:b7:bf:32:c2:9c:0e:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:1E:FF:E0:00:71:F3:B4:A5:6F:22:BA:67:88:36:1F:4E:25:14
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f7:53:46:ae:34:3d:59:c2:9c:aa:2d:9a:6c:08:18:fe:6f:
de:12:56:7e:5a:20:22:c4:db:47:48:1b:fd:a0:57:8d:f3:bb:
8d:3c:22:ba:1d:78:84:ae:d8:6b:5f:1b:69:86:ab:a6:05:9f:
be:8b:7c:0f:4a:c4:12:71:98:5d:72:e1:aa:d3:e1:ce:65:c6:
91:b5:70:75:d2:11:ef:61:b4:b0:9e:02:54:2f:39:21:8d:e1:
e4:63:1a:2f:e1:c6:ec:36:fc:64:33:fd:6f:36:1b:7a:37:df:
e3:05:6c:49:d6:41:64:4d:36:4e:e9:45:ff:d3:0c:91:b9:e2:
21:a7:90:c1:bc:13:9a:4f:e6:57:7b:65:25:cc:5f:5a:c9:52:
5e:60:ad:e7:cb:07:4b:73:1e:c9:1d:c3:21:30:2d:19:fd:cb:
c5:33:56:5c:75:0b:73:41:40:c5:2c:67:50:56:57:a0:e5:51:
31:4f:48:7b:f2:80:63:68:bf:69:9c:4c:1f:2b:da:39:75:53:
2f:a9:2e:bf:b6:d7:ed:94:7f:e0:26:8c:b5:df:4f:71:f3:7a:
47:8a:da:5e:24:ba:fc:23:85:7b:8a:66:a5:fa:75:8e:57:0d:
3c:5b:69:d7:76:04:52:0e:f3:32:bc:4c:9b:a6:43:35:6c:a4:
f4:70:fd:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAh1XTxR58PIw0EzKPYg+oBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwODIxMDEwMDMyWhcNMjYwODIyMDEwMDMyWjAzMTEwLwYDVQQD
EygxMTQzMWVmZmUwMDA3MWYzYjRhNTZmMjJiYTY3ODgzNjFmNGUyNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK8XXV2p+HpklmiXO7KII739QMoH
o05NiJl7lNPJ9zgFLo3+XNTx2k2iNavfO/JIB+P4PRanPVEuHqrqrDnrlQcBIP/K
1d0uxz/omEyj3E23pHbPisIfrvCGjWmHJDN4YMff7ArZWYSd3GyRY612fB3xXwT9
X+DHgb72IMxafu0HOxoj69yisxOOJs4Ru+jQY489WjvJuqNG/0cYww9bMGAWuZAo
Hh+tqvKvyMaKp7Qo3D9rlv7kmOpRTe6+Mk2dYVW3GbLYv1YWfPxqfNU5lSvjUwEV
f6vc2u4CIlyiswlOnkfKYWluN8fr8cqK5nmK01P0igz4gsG3vzLCnA4pPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFDHv/gAHHztKVvIrpniDYfTiUUMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/dTRq40
PVnCnKotmmwIGP5v3hJWflogIsTbR0gb/aBXjfO7jTwiuh14hK7Ya18baYarpgWf
vot8D0rEEnGYXXLhqtPhzmXGkbVwddIR72G0sJ4CVC85IY3h5GMaL+HG7Db8ZDP9
bzYbejff4wVsSdZBZE02TulF/9MMkbniIaeQwbwTmk/mV3tlJcxfWslSXmCt58sH
S3MeyR3DITAtGf3LxTNWXHULc0FAxSxnUFZXoOVRMU9Ie/KAY2i/aZxMHyvaOXVT
L6kuv7bX7ZR/4CaMtd9PcfN6R4raXiS6/COFe4pmpfp1jlcNPFtp13YEUg7zMrxM
m6ZDNWyk9HD9XQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 05:45:09 2026 by rpki-client