Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: nRYdtsT6Z1LWU/tumlxifMupWHMivlUrv3zJ4Em25/0=
Subject key identifier: 15:FA:F3:2A:BF:90:1E:28:ED:BC:A6:D3:95:2E:73:F5:8B:E0:86:EC
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 019F9392405FBE711271E3A6BE0722383A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 0A3B
Signing time: Fri 24 Jul 2026 10:01:03 +0000
Manifest this update: Fri 24 Jul 2026 10:01:03 +0000
Manifest next update: Sat 25 Jul 2026 10:01:03 +0000
Files and hashes: 1: EeAR-0FuIgpREXK4CZj7bbiR324.roa (hash: nK35rOT9ZlV+vNlZLQE4MxQolHHOslBBZTHEZhrQ+LA=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: oemYqQbu6P+dYx6aDvkZndBE8aAYyqxRwfGPlc79rhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:40:5f:be:71:12:71:e3:a6:be:07:22:38:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Jul 24 10:01:03 2026 GMT
Not After : Jul 25 10:01:03 2026 GMT
Subject: CN=15faf32abf901e28edbca6d3952e73f58be086ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:f5:0c:c4:63:4a:a1:ae:8a:92:d3:65:1e:
16:73:d6:aa:98:6b:87:be:ca:bc:3a:7b:03:0f:7d:
cf:9b:45:1f:dd:43:66:b9:f2:14:04:e7:59:a7:6d:
aa:c8:2d:6b:a5:33:96:aa:4d:cb:95:56:47:2e:e3:
bc:ef:e2:d4:d8:f0:fd:1c:c7:df:6f:33:91:e1:47:
1a:2e:35:08:3a:ed:c0:69:8d:f7:05:4f:9f:7a:35:
64:48:26:51:88:3e:78:c2:4e:60:17:c6:dc:5f:af:
d4:8a:7d:64:33:a6:2b:e1:f8:02:d0:d9:6f:12:ba:
f8:ef:75:42:03:21:18:28:40:3e:a8:18:8e:fe:0e:
fa:44:76:99:1a:a9:4e:7c:14:46:3e:92:96:f2:c8:
26:2c:76:c6:0b:fe:26:19:64:7d:c5:d7:a5:d2:10:
a0:57:52:2c:92:34:8f:c7:f3:bd:31:62:7b:1f:eb:
93:a3:9a:55:22:5e:df:06:f3:41:f4:05:74:45:41:
5d:2d:1b:8d:bb:b3:4f:e0:25:60:24:16:51:25:cc:
76:2f:7b:13:77:50:91:03:6a:e3:f4:24:db:5f:54:
40:6b:ec:33:3b:a9:ae:82:2e:d4:80:ed:50:50:a7:
09:0a:12:9d:87:05:28:54:82:a2:d2:c1:5c:ca:83:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:F3:2A:BF:90:1E:28:ED:BC:A6:D3:95:2E:73:F5:8B:E0:86:EC
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:67:65:0a:c3:89:bf:f8:70:46:67:da:81:bc:4f:df:d2:9d:
8a:38:64:7b:64:eb:7f:83:14:04:5e:de:6f:8c:18:5e:2b:5e:
42:96:86:2d:48:7f:65:6f:1f:b3:9e:0e:77:a1:74:0d:5c:be:
24:7f:9c:6c:2f:29:8f:de:d1:7c:c4:7d:6b:47:b5:e0:ab:60:
05:11:df:fe:f8:61:60:a7:05:6f:9b:17:95:db:65:d3:3b:d5:
8d:9b:1a:80:8c:34:26:84:48:ba:e5:dd:f0:43:6e:f7:6c:76:
d3:cb:2e:09:a7:05:47:c2:d2:95:35:e2:33:19:aa:c3:64:a6:
bb:4b:67:4a:72:e9:11:70:0e:0b:c3:7b:45:a4:c0:35:5d:bc:
b3:34:ae:43:4b:fd:8c:94:22:a1:19:ed:3a:55:a2:41:38:ce:
6b:ff:f8:db:b4:4c:cb:50:cc:56:f1:7d:c1:4e:d9:89:67:18:
93:c3:d3:d0:24:67:89:c5:35:47:89:b6:a0:39:dc:d9:c5:4b:
56:70:8e:d9:63:f5:30:d8:f2:e9:ad:e4:d1:8f:57:40:45:99:
7d:2a:84:26:81:2b:4d:25:fd:da:c3:23:b5:80:02:ce:8a:fa:
b0:c8:26:67:e9:06:c8:3b:ec:b2:d7:d9:05:aa:89:61:77:ff:
20:47:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:30 2026 by rpki-client