Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: pm47pmyWfQ4ZUriwAUEhZDvGAIMlW+GuyKf2ieJV0+w=
Subject key identifier: C4:6F:E4:30:69:09:4A:6E:C6:93:70:A0:ED:87:ED:D1:F0:DE:4D:6E
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 01A1065CC72E96F7E0D289288B11DB6EAC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 0AFB
Signing time: Sun 04 Oct 2026 10:01:45 +0000
Manifest this update: Sun 04 Oct 2026 10:01:45 +0000
Manifest next update: Mon 05 Oct 2026 10:01:45 +0000
Files and hashes: 1: EeAR-0FuIgpREXK4CZj7bbiR324.roa (hash: nK35rOT9ZlV+vNlZLQE4MxQolHHOslBBZTHEZhrQ+LA=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: 5q/0rjk1LLFw0tjDYKFdXwXMXjfGqJ3jYermEtkqWc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:c7:2e:96:f7:e0:d2:89:28:8b:11:db:6e:ac:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Oct 4 10:01:45 2026 GMT
Not After : Oct 5 10:01:45 2026 GMT
Subject: CN=c46fe43069094a6ec69370a0ed87edd1f0de4d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:8d:06:1f:75:0a:77:cf:ed:e6:ce:42:99:
42:dd:c4:df:dd:84:10:d6:c1:e7:79:92:62:ce:9e:
d9:4f:3a:70:7b:c9:97:ad:67:23:99:a1:1f:5e:e8:
ef:5c:ce:80:4e:73:b9:e3:71:95:48:6d:37:c7:5d:
05:92:1a:2a:25:e3:bb:b6:34:4d:5f:10:cb:ed:c0:
a8:7f:cf:b8:95:77:d2:bc:49:9f:b6:86:f9:3f:dd:
92:3a:9b:c9:81:2c:df:e3:39:70:9d:25:a6:e8:69:
02:8a:66:aa:08:a7:2f:a6:62:4b:e9:8a:ce:88:70:
2b:b3:64:a4:3d:a1:53:12:98:c8:a5:bf:03:bb:63:
16:2b:dc:4c:cd:da:60:ed:ca:17:62:98:42:7c:25:
cb:04:d3:06:82:d7:dc:78:0d:8d:e1:2b:47:47:4a:
35:5b:ed:6d:c9:d9:75:bc:a7:89:e8:a5:80:ff:bc:
c2:28:e3:46:0a:c1:60:01:ec:24:37:39:34:61:4a:
8a:d2:32:a9:96:8b:b5:ce:c2:28:a7:85:76:34:cb:
40:e3:ae:c3:15:7d:9f:9b:84:25:43:2b:92:5d:74:
66:b8:c7:b2:f6:76:56:56:ec:75:e8:a5:8c:44:c8:
f4:15:c4:17:8b:5d:82:dc:0e:18:0e:57:04:a5:42:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6F:E4:30:69:09:4A:6E:C6:93:70:A0:ED:87:ED:D1:F0:DE:4D:6E
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1d:9b:f3:dc:3c:65:60:f7:a4:a1:a6:6a:d1:9b:49:03:36:
9e:76:58:c3:40:33:35:41:76:6b:b0:e1:65:b5:ba:c0:84:74:
2f:93:32:68:ca:d0:56:e3:17:0b:07:24:c1:9d:ba:10:6a:af:
a4:57:f2:0a:17:6f:59:a9:63:28:01:5e:a5:c0:a7:c6:91:92:
55:14:92:67:89:c1:7d:67:cd:92:27:09:ff:87:95:67:03:8c:
11:7d:a8:c5:65:9c:3f:a6:5e:c6:dc:41:fd:d8:86:18:49:fb:
7c:24:05:5c:60:67:ec:16:20:a3:d6:61:50:c8:e5:3c:0c:50:
e1:c5:2c:5c:de:19:96:2f:9c:2c:71:32:4e:1f:a4:ec:3b:7f:
9b:9a:1d:cc:dd:b0:36:3c:99:d5:24:01:b6:fb:30:b8:7e:be:
a6:c1:e6:c6:c8:51:71:b7:48:0e:b6:e1:ba:91:30:7f:2b:26:
49:bc:dd:4c:44:a6:ec:85:36:00:b2:5e:ea:86:a8:29:97:af:
0b:18:d0:b0:08:8c:c7:b1:63:e0:3d:89:48:c8:8c:b5:7c:4f:
ca:17:ea:63:0b:9a:0d:5c:7e:07:fd:1a:5c:76:b1:b5:ba:39:
44:a2:79:5a:51:78:70:b2:b9:7c:12:d0:51:29:b8:8a:b6:00:
aa:85:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:55 2026 by rpki-client