Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: wMdJ5mEzAtXpwe0Udqws6TuUAx8WclptUQKVVHJ+D5M=
Subject key identifier: 6C:8E:C3:AC:53:CD:91:C8:09:24:C9:22:E8:6D:3F:B4:B2:2C:F7:1C
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 019F92ECBE1876D16CF28BAE4E2B0E88224E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 099C
Signing time: Fri 24 Jul 2026 07:00:16 +0000
Manifest this update: Fri 24 Jul 2026 07:00:16 +0000
Manifest next update: Sat 25 Jul 2026 07:00:16 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: QChhIMsGkciN1rtQPtqQvWn0FMXIxPwWkjQpRNCu6BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:be:18:76:d1:6c:f2:8b:ae:4e:2b:0e:88:22:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Jul 24 07:00:16 2026 GMT
Not After : Jul 25 07:00:16 2026 GMT
Subject: CN=6c8ec3ac53cd91c80924c922e86d3fb4b22cf71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:00:b4:bc:fe:7d:18:25:4a:fe:6f:d3:b2:
65:f0:be:b4:50:06:d5:05:9e:c9:55:8c:96:4d:e6:
de:a2:b1:fb:53:8d:44:ab:ca:73:1e:37:0b:25:d9:
5b:f7:1d:38:cc:de:5f:10:0c:c6:b6:db:eb:b6:b3:
66:fb:b6:7d:7c:d6:8b:19:77:45:61:fb:28:bb:f9:
28:90:65:57:0f:da:bf:9b:7e:8b:5a:30:af:0e:61:
33:f6:d6:d0:55:05:6a:27:7b:03:49:56:b0:fe:1c:
ee:ab:9a:bd:ce:fc:a7:b7:72:e3:2d:55:3b:ac:a2:
70:aa:c0:d6:be:fe:b8:15:99:96:51:7c:ac:96:66:
a1:97:4f:86:e6:d5:56:90:d1:61:d9:c1:0a:c7:59:
b8:87:ea:30:ce:df:09:43:64:00:29:01:e5:f0:4a:
4e:bf:80:94:91:88:c8:7b:1c:1c:15:30:15:09:5e:
ee:b7:50:bf:b2:c5:c5:33:84:dc:09:38:7f:69:40:
c0:1b:2f:4b:2f:92:8f:cb:e4:13:30:43:43:b1:2f:
1e:21:40:47:a1:0c:c1:e8:04:20:60:03:21:85:07:
26:b9:a5:93:d9:40:97:fb:fa:1d:fc:9d:ef:9b:a7:
9b:c7:af:7b:e6:a4:0d:83:92:d0:30:e4:cd:82:f9:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8E:C3:AC:53:CD:91:C8:09:24:C9:22:E8:6D:3F:B4:B2:2C:F7:1C
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:42:f9:71:6a:47:bf:cc:e8:d5:41:5f:4d:57:2a:e2:64:d4:
68:3a:b5:da:5a:6e:b5:d5:5a:4a:21:08:7e:42:3e:75:1a:46:
31:20:9d:2d:b5:23:dc:4d:f6:cc:24:d8:78:d9:03:11:1f:43:
d9:ae:df:5c:db:8a:77:01:fe:ef:0e:f6:b9:f9:cc:7c:e5:3c:
d0:b5:90:a8:75:1c:31:fb:00:fb:e2:86:3d:12:5a:a7:5e:c0:
89:d0:71:97:0d:e4:cf:7a:31:72:51:b2:db:e7:99:94:04:1f:
67:99:84:da:6b:ab:14:a1:1a:39:9e:3a:30:21:5e:13:4f:f6:
2a:48:bb:e0:27:0c:cd:16:09:0f:ec:0d:cc:14:e3:c5:ff:3f:
c7:b5:e6:1f:e0:5a:22:67:14:57:6f:70:24:d6:29:9f:c9:cb:
42:aa:75:d8:21:b2:9a:41:7f:6a:62:a9:ee:76:3a:28:3d:18:
a9:c8:9f:7d:0c:6e:56:a2:08:f7:80:b7:7c:23:f8:2a:78:88:
69:2a:af:c1:c3:5e:5c:b1:be:06:01:fe:bb:cb:e9:8a:5c:b6:
90:52:04:47:14:a6:20:47:27:31:71:db:80:4b:25:47:fd:9d:
aa:9c:43:02:bc:19:ed:c6:71:1b:e7:d9:49:be:ad:34:04:aa:
18:07:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:48 2026 by rpki-client