
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: md4A7a8ln5uUTMZ0PnhPYSCTsLUZSK6HKbNHxV4fx8s=
Subject key identifier: 09:3B:4A:F2:37:97:4B:27:0E:6A:7B:BC:EB:B8:65:66:27:1B:5C:4B
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019EC0DB9F663625F5F66DE77FF5F12601ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0D84
Signing time: Sat 13 Jun 2026 12:01:19 +0000
Manifest this update: Sat 13 Jun 2026 12:01:19 +0000
Manifest next update: Sun 14 Jun 2026 12:01:19 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: p8ISzIL4K341TbT0nZuqufClPOJstyfbeCOKHWg7j4k=)
2: EOj3AgYdcchPeXzFo3MmkUnpC5c.roa (hash: UJxOCXl/zk57bLmMvjQmQo6So76eGqObXBhqM5bOFjU=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: OZaDQ0hXuyPtXw0MMtiK4i0Z5Cc.roa (hash: NUQ/hLaY/s6wtpegscjb37Ii8FsiiXqqFFzr8BzeZgs=)
5: PXUEThXrMGouCYgr_yi3-daiDvE.roa (hash: iv3ZI6ycGYw3gyGWXsZNQzdt8OIK73JOyd7SS9lf5Dk=)
6: StKopN7mKY_G686fwWfLGQIs1ZE.roa (hash: Lt0qVcoh5gF6hn1K+QcayMd775gMjWFzF0XYTOVMzcE=)
7: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
8: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
9: m2aCEWRSbYINPhfk7dIfOHcCZMQ.roa (hash: zF+FldUbeFBdo73eCEVXfBTgillyEx/Bek9AHg5vsQM=)
10: mMhcTAUsEq-DNycXZbZCJR0srtQ.roa (hash: IfB3ppygA/MuKvduBRn6Oad+w/QpUoS9p6uwhj/GpXM=)
11: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
12: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:9f:66:36:25:f5:f6:6d:e7:7f:f5:f1:26:01:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 13 12:01:19 2026 GMT
Not After : Jun 14 12:01:19 2026 GMT
Subject: CN=093b4af237974b270e6a7bbcebb86566271b5c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:4d:1a:21:a4:85:59:94:04:08:09:63:2b:
8c:97:24:6e:7b:a0:34:1c:19:c3:09:c6:a0:ec:07:
8c:1b:38:65:dd:19:a0:6d:d1:19:6c:a3:c3:90:b4:
a1:8e:dc:97:e6:9e:85:ec:53:83:75:ad:35:a5:f0:
b5:41:3d:69:95:75:58:9b:ab:1e:a2:a6:d6:f3:fe:
32:7a:3f:ed:a2:cc:ae:f7:ea:63:ad:3c:2a:eb:dd:
23:01:02:a7:f4:bf:e3:10:f2:77:31:4d:15:cf:0c:
81:41:05:c6:81:e0:ea:0b:fe:bb:bf:8a:d4:3e:14:
18:31:67:8f:fc:26:4e:2b:11:45:e6:90:24:56:f3:
41:0a:e7:5c:7f:d1:d0:2b:c4:27:1d:00:98:fe:be:
35:73:7e:dc:22:06:9e:84:7c:66:a9:07:5e:a2:93:
86:70:f5:43:9d:56:5a:53:92:32:14:b1:bd:cb:1a:
39:72:c0:25:30:5a:5c:68:bf:ae:8e:bd:4a:bc:c9:
54:36:55:a3:d7:19:44:7f:d8:e1:de:78:df:36:b5:
e0:e2:7b:c3:d8:22:51:e8:7f:d1:38:ff:0d:39:9d:
28:e5:b8:00:48:df:38:28:b6:64:69:a4:58:86:b6:
f7:a1:09:83:be:ca:e8:50:f1:e0:81:7c:9a:f3:27:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3B:4A:F2:37:97:4B:27:0E:6A:7B:BC:EB:B8:65:66:27:1B:5C:4B
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ea:ff:49:98:8e:9e:29:68:69:d8:9b:d4:9b:de:d4:a8:41:
8e:7f:ff:f5:ba:e8:5f:70:a6:a7:8e:7b:9d:97:1a:a7:ef:40:
bc:42:23:0c:ae:b0:7e:8e:d0:fe:34:1e:33:be:42:81:e9:5e:
c2:2a:41:78:ef:a8:53:fe:4a:fc:5e:22:a8:7d:a3:ba:9a:12:
19:f6:48:38:5f:19:ec:e3:cb:05:b6:9f:bb:a5:48:bd:d5:e2:
6f:54:51:99:ba:98:7a:1f:5f:f0:ec:91:82:69:a7:37:7a:cd:
16:06:00:5e:6c:3b:40:07:48:6c:34:c2:ef:8b:17:14:55:b4:
d8:a4:30:57:44:29:c5:cc:08:1e:6d:3d:08:dd:97:8a:51:2f:
f0:ac:26:ce:c3:b9:07:db:44:59:74:9e:82:3a:d6:5c:96:f4:
94:c2:c4:79:7f:fa:53:81:a9:ba:76:04:90:10:90:21:36:9c:
e4:33:0f:4f:cc:c1:e9:4c:b2:64:6f:22:6a:ad:14:2b:9c:06:
1e:36:c9:11:5b:0a:af:9d:3a:88:45:0b:77:d7:ee:58:01:c9:
da:a8:b7:f8:77:54:b8:66:6b:dc:d6:0e:64:f5:bf:9f:17:d1:
05:39:f0:c6:e4:70:00:e9:f3:73:d5:e1:9f:d3:53:ac:91:b1:
d5:e6:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:09 2026 by rpki-client