Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: 0LIZn+FGC/w9PTXJpuXzjDJ6q0rSuzHk8vTrkCfsoYk=
Subject key identifier: 67:30:24:F4:01:0F:DD:37:00:BD:FF:C9:59:FF:C5:B8:D2:B2:B7:E4
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 01A0F97C40B10275C061769B72BDF9C5417F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 22:01:04 +0000
Manifest this update: Thu 01 Oct 2026 22:01:04 +0000
Manifest next update: Fri 02 Oct 2026 22:01:04 +0000
Files and hashes: 1: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (hash: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: kcK6vqVpCpV97D+K9z0et/JLEZMVpBLRk8rtUSvXyvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:7c:40:b1:02:75:c0:61:76:9b:72:bd:f9:c5:41:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Oct 1 22:01:04 2026 GMT
Not After : Oct 2 22:01:04 2026 GMT
Subject: CN=673024f4010fdd3700bdffc959ffc5b8d2b2b7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:5c:13:d4:1a:a8:3d:0f:13:74:e2:99:68:
05:ef:e0:a5:7c:e6:7d:1d:a1:16:dc:6b:d4:57:1b:
37:c8:03:92:91:bd:62:fe:f5:06:c5:61:c7:f8:fc:
dd:aa:d3:4d:d2:0a:e1:59:84:47:00:38:57:42:55:
7f:a7:87:e5:69:73:6f:86:17:73:a7:a7:61:3d:c0:
25:26:eb:a6:42:e3:2d:5f:32:74:2d:23:a8:07:46:
99:54:60:6c:08:1b:3c:4e:79:2b:8f:a4:c6:49:e1:
5c:58:2d:6c:80:79:4e:71:d3:01:4e:ea:b7:94:c0:
c8:73:64:2e:44:18:b1:92:25:40:e3:ea:de:62:fe:
18:04:51:3a:3f:86:39:2b:d1:6e:86:59:34:92:30:
27:9f:7f:c2:67:62:61:19:74:5e:54:d8:e6:e1:b6:
c0:4b:59:03:e7:66:61:17:d1:80:ec:bf:d1:08:ef:
b2:10:46:e1:ee:39:83:f6:90:45:cc:7c:92:02:e2:
99:32:15:29:c0:35:f8:d3:43:29:07:a5:89:a8:e4:
ec:54:0b:6f:4f:31:a5:58:28:75:c7:62:c1:12:a3:
96:de:f4:81:81:1a:68:ad:cb:08:d4:ca:9d:28:39:
94:16:ea:96:a6:94:9b:5a:a6:c0:91:11:ea:5e:48:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:30:24:F4:01:0F:DD:37:00:BD:FF:C9:59:FF:C5:B8:D2:B2:B7:E4
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fb:b5:5b:01:6d:62:6b:0c:ac:22:cb:93:d6:5b:84:c2:f4:
c4:6e:ea:3f:cb:34:4f:c7:b2:01:58:ef:d2:1d:b4:80:60:c3:
53:89:92:7d:65:88:c1:70:4b:32:17:7c:32:e3:2d:bc:6e:10:
a4:0f:0d:85:ec:4a:04:88:33:91:12:a6:23:0e:32:b7:e4:0d:
5a:79:da:c2:f8:e0:8f:5f:20:ea:ff:54:83:81:73:b8:d5:66:
d8:f2:ab:cd:73:09:d6:33:e2:cf:9b:41:93:ef:2e:d1:ce:f2:
4b:6d:ae:8c:00:31:36:d7:4b:00:a3:ba:a6:15:61:6a:b2:d4:
38:a2:a1:9b:b7:9c:6f:03:7e:e4:3e:0f:20:8a:de:6c:a7:2c:
7e:cb:d3:97:65:22:89:76:30:18:53:65:0b:a1:ad:7f:8e:ba:
0c:9c:95:61:c3:ea:96:c0:c3:c2:d5:60:09:0e:00:ba:26:92:
c5:95:10:0c:8b:cc:ab:47:14:d4:d4:84:e4:d0:ad:93:05:3a:
f4:3a:54:12:16:3c:0a:6c:dc:91:7f:a0:e7:15:2f:36:2b:7a:
c1:1b:c6:d1:9a:54:04:61:df:8d:24:3c:f0:fe:9a:c8:40:e7:
1c:1b:1f:68:ca:ef:be:49:90:5f:9e:7c:0f:f7:a4:e5:d4:50:
38:cd:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:39:23 2026 by rpki-client