Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: 2s3kusYpY0m+AND3jWGNIFETqVSEXDZFkMXL8pXiFM4=
Subject key identifier: 74:80:59:DA:12:49:AA:0F:5C:D3:DE:78:5F:A5:87:24:A8:15:F7:3A
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 01A11ED24335E5CCD0E02A1A6EDF6691CAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 0A69
Signing time: Fri 09 Oct 2026 04:00:58 +0000
Manifest this update: Fri 09 Oct 2026 04:00:58 +0000
Manifest next update: Sat 10 Oct 2026 04:00:58 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: iqBKJihSogI75Ri6nJedsbOQQDDfATeX4PJ+tJ4732Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d2:43:35:e5:cc:d0:e0:2a:1a:6e:df:66:91:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Oct 9 04:00:58 2026 GMT
Not After : Oct 10 04:00:58 2026 GMT
Subject: CN=748059da1249aa0f5cd3de785fa58724a815f73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:b3:cd:2e:ad:7d:e0:c4:f1:43:92:d3:aa:
1b:fa:b6:27:38:48:78:5a:1d:48:32:5e:40:8b:f8:
e1:35:b3:fc:c9:c2:39:6a:1e:d8:3f:78:42:37:f6:
48:6c:ca:9a:a4:42:93:c1:f7:55:95:f3:2c:fd:84:
02:9f:bf:e2:6c:f1:fe:c2:7d:67:a3:52:04:b4:36:
7a:f1:8d:e5:c9:6c:6f:df:45:90:6f:d8:2d:8b:e2:
cc:5e:ef:c2:9d:df:fe:74:ad:ae:5c:37:23:98:8f:
c4:c9:ee:89:51:77:ae:bf:84:d9:31:b9:bc:f0:c5:
73:14:f2:7b:8d:ad:b7:92:98:5a:f6:6e:7a:35:bb:
c5:a2:64:be:5e:07:82:e8:48:ae:d8:36:ce:79:17:
8f:ef:09:34:9c:cf:5b:fa:a0:ae:91:10:ff:ae:79:
8b:2d:d6:6a:5b:b4:5a:65:f2:51:c1:a1:b6:51:89:
e0:50:56:57:9f:c3:d4:52:92:95:df:9b:39:b3:b5:
54:11:1b:52:37:b2:00:dc:46:2b:f2:be:0f:76:6b:
2c:bb:85:73:d0:7d:36:c4:81:fc:7a:91:b8:1a:42:
10:62:15:c0:64:34:47:23:76:ac:8a:b9:61:7e:d3:
ea:66:83:f8:5f:16:a4:ff:fe:e6:25:dc:94:7f:46:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:59:DA:12:49:AA:0F:5C:D3:DE:78:5F:A5:87:24:A8:15:F7:3A
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5e:f0:cc:1b:cf:89:f2:fc:3f:6f:03:6f:f6:9f:ff:7a:84:
88:e6:92:4e:54:4d:a9:f3:ef:2b:0d:71:86:61:13:0a:5b:00:
7f:5c:4a:9f:d3:1d:0e:e7:b4:5f:21:c4:c2:d8:b0:00:ce:1f:
dd:28:f0:20:b6:71:21:3d:c5:17:15:cb:ae:ce:c3:7b:b8:36:
07:8a:f2:3e:d0:36:b0:ad:d0:11:06:ba:19:fa:fc:bb:32:51:
c7:e7:0e:be:12:fd:30:21:ac:ba:35:15:3b:3c:f1:7c:42:4c:
08:61:5b:ac:6c:64:7b:c0:94:dd:e3:03:07:44:c0:7c:d7:01:
07:4a:2f:ee:9e:4a:85:84:09:d0:05:3c:bf:73:2c:85:2b:30:
25:81:8e:14:af:79:b7:5a:98:ae:1b:c7:a3:3c:47:d7:17:41:
07:c9:b2:1c:b4:cb:3e:f5:1e:a1:5d:91:54:6a:72:b4:10:ef:
fc:63:6b:cc:50:1b:af:cb:95:75:9a:34:ba:9c:11:e7:85:e8:
02:63:c7:b4:2c:22:9c:af:14:91:7f:9f:b3:e8:31:60:68:48:
12:b6:a8:c3:07:8c:08:2a:fe:dd:0c:83:81:a4:82:f5:a5:c6:
8e:cb:c8:d6:1d:cc:cb:99:93:40:df:12:b3:53:18:03:a9:11:
73:f6:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:24:25 2026 by rpki-client