Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: oBgbo8mDy+WaWonhC4m01pcWjoonUsyx1lajOIkNtAI=
Subject key identifier: A0:2F:55:02:C5:D3:27:50:90:2F:BE:A8:C9:2B:51:D7:04:EF:A9:C3
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 01A0EA4082ECD1F7C6C5D9E122A652BFF587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 137D
Signing time: Mon 28 Sep 2026 23:01:31 +0000
Manifest this update: Mon 28 Sep 2026 23:01:31 +0000
Manifest next update: Tue 29 Sep 2026 23:01:31 +0000
Files and hashes: 1: 2hflLbfqAWKpFyYGnXBTWiWqwxs.roa (hash: lI9Xhzw78sH7hBtTcjJSosgoG/UbF5gG44NR4ynAOeo=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: u+DeBHbOOcqZs5z1v6W2Be/llsIP80rr+mbGgzVeWwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:82:ec:d1:f7:c6:c5:d9:e1:22:a6:52:bf:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Sep 28 23:01:31 2026 GMT
Not After : Sep 29 23:01:31 2026 GMT
Subject: CN=a02f5502c5d32750902fbea8c92b51d704efa9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:13:3e:bb:fb:f9:e2:67:ae:94:1b:19:85:
85:af:e7:94:e3:74:e1:a9:ab:3e:81:3c:df:e3:da:
8b:59:a2:5e:21:27:8e:d1:df:38:bb:8d:f5:92:dd:
e3:07:ad:18:d9:83:3c:c5:dc:63:2c:8b:f3:b8:6c:
7b:9d:16:e5:53:ea:81:74:a0:ec:80:5b:ac:b7:57:
1e:67:1a:d0:3e:17:6e:94:6e:51:49:12:5c:a6:fd:
5d:ee:90:ff:e4:c2:5f:d4:3e:0a:76:4c:38:f4:38:
cc:aa:f7:03:49:1d:0b:64:b2:cb:2a:70:dd:ad:2e:
f9:33:91:bd:96:c5:b7:d1:b7:be:61:27:16:a6:e8:
6c:2b:0b:a4:de:0b:ba:f0:8a:dc:06:7b:b8:a1:fe:
7f:d4:18:21:42:12:5d:28:f1:e4:0c:a2:71:8c:25:
b9:24:4c:6f:9b:eb:28:00:4b:33:cd:b5:8d:47:b8:
42:72:10:1b:18:39:3a:c3:dd:ad:28:c0:05:4d:ef:
08:e5:88:da:d3:03:93:82:b7:e3:e9:59:1f:9a:23:
0e:87:3e:cb:70:ac:4e:bb:1b:82:1b:e7:47:33:93:
22:33:e5:07:d6:cc:5c:ed:de:04:65:f4:04:68:a3:
d6:17:1b:83:31:05:1d:49:94:7f:f4:fc:d2:a1:c3:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:55:02:C5:D3:27:50:90:2F:BE:A8:C9:2B:51:D7:04:EF:A9:C3
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d8:bb:35:b3:33:5f:35:59:66:94:fa:27:26:19:f5:b1:73:
06:6d:13:b3:9c:4d:75:a7:5b:24:47:e3:2e:e6:63:e3:f6:d4:
a7:49:0d:35:96:c6:4f:04:74:95:5b:30:5f:91:56:61:7b:68:
b2:fe:6e:11:58:f3:af:b3:c4:cb:c7:ba:b5:9d:3c:dd:bb:6f:
6b:d4:e5:5c:15:9e:97:e9:bd:2a:e9:a8:d8:fc:04:85:a4:1d:
49:fc:2d:2a:74:10:76:5c:1b:67:be:21:9c:48:c0:ff:59:7a:
b3:70:77:a1:ff:59:91:15:7d:e2:f4:53:33:83:17:3d:be:36:
7a:99:3e:c1:8e:3e:6c:31:b2:6e:ad:56:ff:b6:fa:49:ea:9b:
1e:95:93:95:10:d4:42:3e:ea:a5:d4:31:2a:55:d2:44:90:f0:
7d:51:a0:82:62:77:4a:6c:41:c3:2e:79:13:8b:50:6d:89:4b:
e5:31:82:e8:2f:55:bb:55:d5:c3:d9:ac:7b:a2:79:cf:ba:cb:
bf:8a:3c:e9:e9:1a:3b:51:66:67:e6:f6:cd:99:5c:3c:54:59:
b2:a5:0e:4f:34:2b:6c:3a:44:d0:d7:04:f1:c7:8a:fc:98:d0:
eb:70:27:98:89:aa:0a:43:67:a5:66:eb:ea:cb:df:72:0a:c6:
76:36:46:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqQILs0ffGxdnhIqZSv/WHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmVlZTc4YTAwODRkODMxZGUxYTI1MDAxODNlMTY0ODk1
MTZjY2YwHhcNMjYwOTI4MjMwMTMxWhcNMjYwOTI5MjMwMTMxWjAzMTEwLwYDVQQD
EyhhMDJmNTUwMmM1ZDMyNzUwOTAyZmJlYThjOTJiNTFkNzA0ZWZhOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GETPrv7+eJnrpQbGYWFr+eU43Th
qas+gTzf49qLWaJeISeO0d84u431kt3jB60Y2YM8xdxjLIvzuGx7nRblU+qBdKDs
gFust1ceZxrQPhdulG5RSRJcpv1d7pD/5MJf1D4Kdkw49DjMqvcDSR0LZLLLKnDd
rS75M5G9lsW30be+YScWpuhsKwuk3gu68IrcBnu4of5/1BghQhJdKPHkDKJxjCW5
JExvm+soAEszzbWNR7hCchAbGDk6w92tKMAFTe8I5Yja0wOTgrfj6VkfmiMOhz7L
cKxOuxuCG+dHM5MiM+UH1sxc7d4EZfQEaKPWFxuDMQUdSZR/9PzSocNYcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAvVQLF0ydQkC++qMkrUdcE76nDMB8GA1UdIwQY
MBaAFM8u7nigCE2DHeGiUAGD4WSJUWzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYt
NzE4YjljNDBmZDI1LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYtNzE4YjljNDBmZDI1
LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9i7NbMz
XzVZZpT6JyYZ9bFzBm0Ts5xNdadbJEfjLuZj4/bUp0kNNZbGTwR0lVswX5FWYXto
sv5uEVjzr7PEy8e6tZ083btva9TlXBWel+m9Kumo2PwEhaQdSfwtKnQQdlwbZ74h
nEjA/1l6s3B3of9ZkRV94vRTM4MXPb42epk+wY4+bDGybq1W/7b6SeqbHpWTlRDU
Qj7qpdQxKlXSRJDwfVGggmJ3SmxBwy55E4tQbYlL5TGC6C9Vu1XVw9mse6J5z7rL
v4o86ekaO1FmZ+b2zZlcPFRZsqUOTzQrbDpE0NcE8ceK/JjQ63AnmImqCkNnpWbr
6svfcgrGdjZGYA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 07:59:34 2026 by rpki-client