Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: udPes8EUbM13iuHe3VKSxtsX1ArzkY0W7A3P/j0ICXA=
Subject key identifier: 17:08:5F:FB:EF:C7:F7:F9:75:61:E3:02:7B:0A:67:9E:BE:7D:8C:82
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019CA90EE053086463720FC6FC97732744BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0C65
Signing time: Sun 01 Mar 2026 11:00:50 +0000
Manifest this update: Sun 01 Mar 2026 11:00:50 +0000
Manifest next update: Mon 02 Mar 2026 11:00:50 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: NaZDgKUcvniCmyCQpovHKBrxNKgdo7Pw/3xhVjTaw3E=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: IcfiGiHhm-UnVbVbGBC_RtFqnfM.roa (hash: FGxn4dZpz1k+FXowXOdQoq7CmlfSlmu0geRbED6pnGQ=)
4: MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa (hash: 5UScMx33ea6UI1n+yqJ+oTPgZkvCg216H08oUJCNoCY=)
5: d_rxJJRdc6lxglOZm6MPcxsRKVk.roa (hash: 09cxzd1TQUa9YcSDbUPMORsaaMIR6hUWI/wpDIjuvuY=)
6: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
7: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:e0:53:08:64:63:72:0f:c6:fc:97:73:27:44:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Mar 1 11:00:50 2026 GMT
Not After : Mar 2 11:00:50 2026 GMT
Subject: CN=17085ffbefc7f7f97561e3027b0a679ebe7d8c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:e8:10:e9:7b:78:34:de:10:4d:55:5c:22:
6f:cd:73:ea:cd:bb:d2:98:bf:c9:68:d3:54:12:fd:
57:2c:f5:b4:b0:ee:1d:9d:fb:f9:8a:c6:9a:a9:cc:
61:ec:83:c2:87:db:6b:3d:57:14:ab:cb:8e:72:70:
2d:50:5d:52:c0:99:2b:40:f3:23:d1:3d:bb:18:83:
ef:20:df:b0:36:ed:a2:de:b6:57:46:ad:3a:6d:f9:
64:5c:44:cf:dc:bf:e0:a1:9e:e1:9f:b9:4e:de:1f:
a1:81:a8:0f:63:6f:7d:cb:0a:ff:50:ce:e1:30:a2:
04:5f:dd:ab:52:3d:2e:01:7b:00:c9:c6:be:70:b3:
22:fa:c7:1b:9f:69:15:46:28:af:67:4e:6d:5e:a7:
a6:50:04:90:a2:ad:f5:40:42:11:99:d8:e9:51:84:
55:3a:40:1e:40:3f:73:9e:d5:66:c8:e1:7a:94:0b:
66:1f:ce:5c:c6:81:1a:07:c6:d5:f7:84:a6:f2:cf:
29:a5:78:da:88:4c:6d:b7:24:c9:a1:7a:70:c5:c7:
e9:29:93:fb:fd:9f:cb:49:66:b8:76:55:c1:82:90:
63:4b:9b:dc:c0:70:78:d2:31:24:75:7d:00:9c:7f:
05:13:14:ba:95:b8:de:a3:a3:d8:cb:2f:86:c5:fd:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:08:5F:FB:EF:C7:F7:F9:75:61:E3:02:7B:0A:67:9E:BE:7D:8C:82
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b7:d4:e3:0b:e4:a5:fa:3e:f0:fc:5b:ed:f2:ef:e8:f5:74:
13:b6:fa:68:dd:91:00:26:23:ce:5a:30:67:e6:7d:89:26:26:
31:ff:47:42:34:e6:32:90:f3:45:f4:e6:80:69:5c:85:41:b3:
2b:da:66:e4:1c:8f:1c:47:9c:f6:eb:a6:0e:39:33:fa:b1:d5:
a3:87:26:58:57:54:46:63:7b:d5:14:b4:e4:1b:65:cf:73:1c:
df:7d:02:93:3e:9a:38:c6:64:ad:fc:a9:8d:5e:a0:ed:26:a0:
e0:b5:d5:c7:c5:8b:62:0b:2d:d5:e4:7c:99:a9:28:6a:bd:bd:
14:3e:a2:ab:e9:7c:8c:a2:ec:1d:4e:a7:26:bf:f9:b0:95:78:
bb:fd:4a:2a:3e:65:0d:33:23:6a:97:6e:9c:5a:45:ef:4f:aa:
dc:6b:ab:18:14:5e:2d:55:b9:d0:ec:c2:a3:ff:bd:39:52:8b:
ec:d0:6f:76:a3:e8:5d:20:d4:87:05:9e:24:b9:54:31:37:00:
91:f2:7d:7d:db:66:fb:45:2c:fd:ce:76:01:6d:d9:5e:a1:aa:
90:92:b0:68:72:51:31:f4:db:42:4f:ea:1e:e4:3c:5d:2d:fa:
73:0b:e5:ec:65:4d:80:b5:e2:cc:c9:53:62:e6:73:b7:84:b2:
f1:e4:ae:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:38 2026 by rpki-client