Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: w1JGC8ocogWi2OvfPBc/admLZ8lxV7beinoEeizaoTo=
Subject key identifier: 05:9C:EE:4E:1D:9E:17:05:8A:3E:B7:D1:26:DC:36:6D:82:79:E0:54
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 01A0EFD44FACCC89A44316B9D3AD4C4F71C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 1A7D
Signing time: Wed 30 Sep 2026 01:01:03 +0000
Manifest this update: Wed 30 Sep 2026 01:01:03 +0000
Manifest next update: Thu 01 Oct 2026 01:01:03 +0000
Files and hashes: 1: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (hash: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: qjngaNnRsnoaTv4Pi5KMvy9MdlReTeSKz9vMwyoYZyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:4f:ac:cc:89:a4:43:16:b9:d3:ad:4c:4f:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Sep 30 01:01:03 2026 GMT
Not After : Oct 1 01:01:03 2026 GMT
Subject: CN=059cee4e1d9e17058a3eb7d126dc366d8279e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:34:5c:ef:90:67:25:5e:7c:11:f5:2c:d9:
85:66:ba:18:23:24:7f:80:61:5a:42:87:19:25:e2:
95:24:8d:33:ce:c4:bd:9b:0a:5d:d8:37:bc:af:5c:
88:28:2e:c1:68:b1:ca:dc:1d:ee:11:17:9d:ca:b7:
b3:1d:3e:3b:7c:4f:d7:80:86:12:99:28:c0:5a:e1:
7b:ec:33:9c:bd:be:f8:10:1c:fe:b1:6d:05:34:04:
cc:e3:1f:08:dc:36:26:98:b9:a8:c9:17:c5:e8:27:
e7:e8:d3:a0:39:cb:94:ae:63:73:34:1b:4c:8b:b9:
a0:1d:f3:d8:ab:20:70:ce:62:ca:92:88:7c:58:9f:
a8:5a:30:60:89:76:78:cc:c3:3b:1d:a8:c2:66:bb:
3f:ad:e0:90:0f:57:4b:91:54:de:0f:a8:64:97:5b:
b6:48:1c:1b:75:2e:24:0c:3f:21:5f:5b:05:10:9a:
05:59:6e:cb:04:9e:02:b7:4c:f1:d1:f8:44:5e:62:
fd:d6:a4:11:8a:43:16:c0:85:68:54:99:27:84:25:
8f:05:c1:2d:e8:e0:b4:23:c2:17:c7:42:3c:94:40:
cd:34:b8:51:4e:b8:99:71:ff:1e:fd:e8:d2:a7:54:
5d:fe:6b:99:0b:86:ff:59:3f:ed:0f:d5:07:db:5e:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:EE:4E:1D:9E:17:05:8A:3E:B7:D1:26:DC:36:6D:82:79:E0:54
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:14:0f:22:91:7c:0a:95:19:a2:ea:b8:20:0e:82:b0:de:f9:
d4:cc:5b:d1:17:df:86:2f:69:12:8b:7d:f0:11:d7:83:67:a5:
fd:0a:f7:58:c6:9f:66:09:9c:d4:1a:8a:3e:a9:dd:83:4a:3b:
e6:e4:d3:0f:1d:8a:7f:e9:b4:7d:1c:6a:db:92:2e:6a:f5:c2:
c7:28:45:f1:21:f0:5e:76:29:db:d2:1f:e0:fc:c4:3d:f9:f6:
6f:4b:a3:c6:11:d2:88:72:f5:d0:76:e9:ad:14:45:d7:ba:67:
62:15:f9:0b:16:a3:d6:e9:fe:b8:df:8e:5e:96:0c:53:e6:de:
0f:1e:f3:36:5e:83:a2:8b:fb:af:24:b8:cb:a3:91:82:12:a8:
e9:15:6c:5f:7f:ff:7c:95:77:0e:12:59:a3:6a:f4:12:f1:d4:
9c:ef:75:e5:0b:60:ef:6c:af:a2:e1:6a:46:2d:3a:8a:fb:61:
51:a0:14:e0:da:f7:67:52:45:48:13:75:b6:66:ff:59:91:63:
b1:6a:54:d9:06:a6:11:39:2b:57:87:fe:bf:7a:e3:20:f3:27:
2d:d3:f8:72:eb:47:c3:ed:b6:e7:24:83:be:6a:b9:d8:6d:e3:
49:28:5d:09:f8:5b:8c:5d:71:04:ae:2c:de:3a:55:e7:e3:b3:
48:68:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:47:38 2026 by rpki-client