Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: hlg5x+VZuqxKimxnmOPd46vq2NH5QnOq7kHEHp2Y0Fg=
Subject key identifier: 0A:95:1B:91:4C:46:23:1D:A9:05:B3:64:9B:48:2A:7B:A3:16:33:0D
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019D98BDCA1DA15F7EEE8B8F75AA5B8E349D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0CE2
Signing time: Fri 17 Apr 2026 00:01:07 +0000
Manifest this update: Fri 17 Apr 2026 00:01:07 +0000
Manifest next update: Sat 18 Apr 2026 00:01:07 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: QR1dDka5D9jaSJudnUtIgMsPVg78RwUE2yXN2UBOUUI=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa (hash: 5UScMx33ea6UI1n+yqJ+oTPgZkvCg216H08oUJCNoCY=)
4: d_rxJJRdc6lxglOZm6MPcxsRKVk.roa (hash: 09cxzd1TQUa9YcSDbUPMORsaaMIR6hUWI/wpDIjuvuY=)
5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
6: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ca:1d:a1:5f:7e:ee:8b:8f:75:aa:5b:8e:34:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Apr 17 00:01:07 2026 GMT
Not After : Apr 18 00:01:07 2026 GMT
Subject: CN=0a951b914c46231da905b3649b482a7ba316330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:7c:5c:81:0e:5b:dc:1a:d7:49:28:27:21:
7f:01:dd:5d:82:c0:be:9a:77:6e:cb:b4:0c:c9:33:
a2:a8:9c:92:d5:88:73:bc:ef:64:d1:cb:d1:94:7a:
68:a2:d5:6b:d9:39:18:3c:ae:1f:fd:e8:1b:0f:74:
66:5d:34:98:e0:26:e0:09:86:9b:92:b3:b1:16:ec:
f5:0d:8e:19:48:83:5c:25:3a:cb:c9:db:a6:12:d5:
91:7e:88:b4:2c:3e:5f:c7:7c:c0:dd:79:43:38:eb:
cf:09:7d:e6:06:d1:61:48:59:58:cc:4e:e6:a2:8d:
b8:18:e1:fe:98:e2:45:19:35:bf:cb:f0:e0:fb:43:
02:b1:b9:58:50:e9:ff:40:c1:b5:51:59:37:33:4e:
ee:4f:05:d7:d5:98:dc:a5:e7:c0:9d:52:66:e9:e9:
9d:11:2d:92:f5:d4:53:23:cd:31:c4:a2:3d:ec:c1:
e9:93:52:2f:44:0c:94:56:a6:88:8f:5d:66:d9:5e:
35:4c:5e:c6:ee:ab:e2:18:9c:c3:3e:21:48:e8:7b:
48:bb:37:b4:06:e5:cf:e8:c5:79:53:2c:4d:36:42:
fa:dd:cc:fe:8f:de:b2:b7:82:35:56:b2:e0:87:94:
35:45:07:ac:84:ed:21:38:dd:3c:d0:2f:e0:4e:5a:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:1B:91:4C:46:23:1D:A9:05:B3:64:9B:48:2A:7B:A3:16:33:0D
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:96:17:36:45:da:f9:00:34:ef:8d:cd:c3:72:1f:e2:3e:98:
02:55:bc:a3:51:58:17:88:a2:6a:02:4b:cc:d3:56:a5:59:7f:
36:92:6c:15:b6:45:33:3e:e6:9b:64:42:7b:3c:65:63:33:1d:
c8:1d:b0:a8:44:f2:e9:50:60:e2:cf:64:e6:49:b4:48:d6:c7:
b2:18:a9:b2:da:3a:c5:b6:cc:5a:92:ad:0e:ef:46:a9:be:c2:
5e:4d:3a:f1:a2:be:c2:c2:3f:f7:59:fc:eb:bb:e9:44:2e:ee:
2c:69:39:ca:98:a0:58:b3:89:42:64:67:f3:55:e0:e2:1f:99:
1a:fa:a1:3b:49:1e:86:06:98:0f:52:58:cc:b7:c8:3b:bd:a0:
fc:94:a6:b5:af:eb:03:1c:db:a5:05:43:47:28:fa:51:be:2d:
fe:17:70:db:7d:34:4a:fb:db:c1:f3:4b:ad:7f:0b:00:40:91:
31:f1:06:45:e4:53:12:6a:12:0c:ba:44:59:a3:97:46:4f:c9:
db:5b:94:fb:a3:65:a6:33:2d:48:61:fd:10:e7:e3:86:54:77:
52:17:1c:aa:2a:ba:56:c2:ef:c0:eb:62:78:bd:8b:ad:6f:67:
e5:b8:20:4a:4f:bc:f2:32:c0:8c:34:a2:87:e2:f2:90:08:ee:
95:db:6d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvcodoV9+7ouPdapbjjSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwNDE3MDAwMTA3WhcNMjYwNDE4MDAwMTA3WjAzMTEwLwYDVQQD
EygwYTk1MWI5MTRjNDYyMzFkYTkwNWIzNjQ5YjQ4MmE3YmEzMTYzMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLx8XIEOW9wa10koJyF/Ad1dgsC+
mnduy7QMyTOiqJyS1YhzvO9k0cvRlHpootVr2TkYPK4f/egbD3RmXTSY4CbgCYab
krOxFuz1DY4ZSINcJTrLydumEtWRfoi0LD5fx3zA3XlDOOvPCX3mBtFhSFlYzE7m
oo24GOH+mOJFGTW/y/Dg+0MCsblYUOn/QMG1UVk3M07uTwXX1ZjcpefAnVJm6emd
ES2S9dRTI80xxKI97MHpk1IvRAyUVqaIj11m2V41TF7G7qviGJzDPiFI6HtIuze0
BuXP6MV5UyxNNkL63cz+j96yt4I1VrLgh5Q1RQeshO0hON080C/gTlrdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqVG5FMRiMdqQWzZJtIKnujFjMNMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5YXNkXa
+QA0743Nw3If4j6YAlW8o1FYF4iiagJLzNNWpVl/NpJsFbZFMz7mm2RCezxlYzMd
yB2wqETy6VBg4s9k5km0SNbHshipsto6xbbMWpKtDu9Gqb7CXk068aK+wsI/91n8
67vpRC7uLGk5ypigWLOJQmRn81Xg4h+ZGvqhO0kehgaYD1JYzLfIO72g/JSmta/r
AxzbpQVDRyj6Ub4t/hdw2300SvvbwfNLrX8LAECRMfEGReRTEmoSDLpEWaOXRk/J
21uU+6NlpjMtSGH9EOfjhlR3Uhccqiq6VsLvwOtieL2LrW9n5bggSk+88jLAjDSi
h+LykAjuldtt7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:01 2026 by rpki-client