Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
File: z_yziNFbNCAeP5DcK7xxKahBSS0.mft (raw, json)
Hash identifier: mI+9dT6T2TO3WIlq067Fm/toFKzmW5BbwUEgGkLJjI4=
Subject key identifier: 86:3C:2D:16:E0:39:C2:24:30:E3:D6:67:D7:11:33:1C:EB:80:2C:07
Authority key identifier: CF:FC:B3:88:D1:5B:34:20:1E:3F:90:DC:2B:BC:71:29:A8:41:49:2D
Certificate issuer: /CN=cffcb388d15b34201e3f90dc2bbc7129a841492d
Certificate serial: 01A0FF47FC2564112B9277DE4388957EBF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
Manifest number: 27
Signing time: Sat 03 Oct 2026 01:01:42 +0000
Manifest this update: Sat 03 Oct 2026 01:01:42 +0000
Manifest next update: Sun 04 Oct 2026 01:01:42 +0000
Files and hashes: 1: 1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa (hash: iEXTilkRCMqep8ohagVKxx8QP/pOQ0cevjMJdBDrx64=)
2: z_yziNFbNCAeP5DcK7xxKahBSS0.crl (hash: Y0LDzMLu4SUu2ECYccLndXeQpVC8M5lKYtUwbjFcEjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:fc:25:64:11:2b:92:77:de:43:88:95:7e:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cffcb388d15b34201e3f90dc2bbc7129a841492d
Validity
Not Before: Oct 3 01:01:42 2026 GMT
Not After : Oct 4 01:01:42 2026 GMT
Subject: CN=863c2d16e039c22430e3d667d711331ceb802c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:65:3d:12:d5:ed:4c:f6:9a:7d:28:c8:a6:
bd:2e:c1:8b:32:11:bf:c4:8b:d2:32:69:3a:84:c3:
6c:a4:9c:fa:5f:ea:de:2a:d9:60:cd:0a:df:94:df:
1b:79:36:c4:9e:f8:b5:d4:02:5a:7d:78:bd:6b:47:
c9:9c:77:7e:4d:cc:67:9f:0c:af:cf:a1:73:63:e3:
8e:a8:65:bb:41:5c:34:7c:4b:e9:aa:4a:24:2c:25:
91:81:6b:7c:11:4d:b4:af:4b:4d:62:1e:15:d6:72:
82:ee:ba:b9:2b:79:b0:a3:43:af:40:ff:0a:af:1b:
1c:66:3c:32:82:49:c2:65:62:d2:b1:f4:e9:70:ee:
cf:1c:dc:1d:93:b9:55:fc:02:ac:8b:1f:ca:d6:5e:
c6:32:26:6c:78:94:44:90:d5:a7:42:3b:68:9a:31:
7d:16:b2:e6:2b:1a:af:fc:ae:c3:7f:b4:37:23:a6:
c7:10:b8:96:ec:14:6d:e2:18:8b:98:e6:1c:91:c9:
5b:60:42:3c:8d:c2:22:09:68:0c:16:19:cc:a9:91:
2e:55:90:cc:e9:27:69:9a:d9:1c:e9:01:79:50:d9:
ef:e2:a5:b6:df:7d:28:49:20:e7:2a:df:f3:6b:91:
fe:72:0c:03:d9:1f:26:e2:84:7c:e1:b4:0e:6d:36:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3C:2D:16:E0:39:C2:24:30:E3:D6:67:D7:11:33:1C:EB:80:2C:07
X509v3 Authority Key Identifier:
keyid:CF:FC:B3:88:D1:5B:34:20:1E:3F:90:DC:2B:BC:71:29:A8:41:49:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0d:e8:6a:12:3e:f1:81:e2:a9:2b:61:d3:ee:a0:4d:ed:de:
e4:de:26:0e:af:01:7f:b5:ed:3d:5f:5e:b7:be:c8:b6:87:6d:
cc:d9:26:06:18:86:66:16:a8:fe:c5:16:fb:14:b1:40:7a:1e:
4a:04:a0:ea:c5:c9:c4:bd:7b:17:25:b1:7c:f6:6b:2e:40:38:
6b:27:41:c5:15:63:a6:8f:ab:3b:d3:03:b5:94:f4:9b:8e:26:
0a:c9:05:84:55:76:11:e8:bd:58:9a:2a:ff:93:ac:38:38:17:
68:9e:9e:b4:8e:57:bf:ab:cc:69:b8:83:8a:00:f3:34:d4:4d:
ab:75:c1:52:9d:54:3e:12:0c:c9:fc:27:28:81:5a:85:4a:25:
84:ee:5d:ce:24:13:6e:25:c1:10:4d:cc:db:3e:1f:11:5d:10:
d7:c6:6d:d2:af:94:f7:7c:e3:7d:9f:c8:c0:b8:07:97:84:67:
ce:d4:73:e8:4e:7c:aa:48:93:b7:8c:5b:60:12:ff:62:15:f7:
5b:18:1b:e8:09:fe:96:24:3a:77:51:9e:97:1d:df:74:79:98:
dd:8d:9f:2f:b9:62:6c:22:62:fd:ca:9c:a5:f0:7f:58:11:66:
d0:c2:c4:d4:fc:cb:8d:8c:a3:0d:cb:8a:7f:bd:4d:49:07:11:
95:23:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:50:49 2026 by rpki-client