Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: D5inbZSvnSCh+iu7NgFca2iSMbeyhWY3QFmdMlA5c0A=
Subject key identifier: 8F:66:11:58:F6:47:F6:07:78:89:2F:7E:84:61:D4:96:B7:DB:00:3C
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 01A12542B239AEFCB05F81E16E0C0F0BE4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 0B0B
Signing time: Sat 10 Oct 2026 10:01:30 +0000
Manifest this update: Sat 10 Oct 2026 10:01:30 +0000
Manifest next update: Sun 11 Oct 2026 10:01:30 +0000
Files and hashes: 1: EeAR-0FuIgpREXK4CZj7bbiR324.roa (hash: nK35rOT9ZlV+vNlZLQE4MxQolHHOslBBZTHEZhrQ+LA=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: +mCDfUulgxjz5ez6YAv6kJzP8QmHD1NP3ZBVrunncgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:b2:39:ae:fc:b0:5f:81:e1:6e:0c:0f:0b:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Oct 10 10:01:30 2026 GMT
Not After : Oct 11 10:01:30 2026 GMT
Subject: CN=8f661158f647f60778892f7e8461d496b7db003c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:b3:a6:ba:fd:75:8f:84:9c:97:a8:ea:c4:
b0:cf:32:88:3d:a9:ca:73:6c:b6:2a:88:2b:56:84:
db:27:be:ef:1e:56:b4:30:7b:27:ab:32:17:01:9b:
6a:e1:30:87:f3:63:c8:5d:f5:40:6b:24:fe:dd:53:
3d:f7:26:2b:21:3b:f2:4d:81:04:55:91:49:f7:89:
ae:7b:8b:4d:e7:60:1d:3b:b0:e1:a9:74:09:33:d0:
75:28:1c:c2:19:42:f6:ca:3a:ec:b8:fe:ae:f3:8d:
c7:82:75:b5:19:33:ae:39:00:ba:00:b7:3d:b6:8c:
f4:ed:c4:a9:84:82:57:a3:28:30:c2:c6:65:3e:bf:
35:f5:1d:3c:ff:15:80:df:e3:63:c1:8d:4e:ed:23:
d6:3a:67:df:65:85:bb:a6:92:ed:2f:22:3c:b0:2d:
ad:f7:4b:87:e8:db:5b:37:bd:31:63:56:43:61:da:
e3:e0:f2:df:da:e0:47:20:42:ea:ef:55:e1:c6:31:
18:0a:a5:e8:58:60:fb:7f:d9:c5:97:5f:f0:a0:ab:
01:56:80:98:5d:92:e3:e5:63:c4:8d:4c:e3:39:86:
6d:3a:9c:75:c6:d8:73:ad:87:b3:8e:f9:80:3a:3c:
9f:0d:e5:04:b2:d2:60:0a:64:61:32:c4:9d:76:30:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:66:11:58:F6:47:F6:07:78:89:2F:7E:84:61:D4:96:B7:DB:00:3C
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3e:02:f0:b3:04:6d:69:f6:29:36:c5:53:ac:24:d9:00:e0:
82:96:09:93:55:e3:82:56:07:87:cc:62:6b:f9:41:01:bd:f5:
c3:fc:3d:7a:32:1c:87:33:22:c0:06:fc:e1:84:8b:1b:6c:22:
dc:73:23:ce:f7:7a:64:6d:97:04:8b:f5:35:55:5b:cb:5a:99:
eb:76:74:11:b4:0c:d3:26:5d:ed:77:d7:68:44:5c:a1:40:58:
c8:b5:10:1d:5b:53:6d:92:69:5a:e8:61:b3:19:e1:8b:ba:b0:
b3:f4:2d:70:14:a1:63:c0:fc:6b:32:75:13:e6:6f:64:42:f1:
1c:cf:6a:06:92:83:7d:ff:1f:f2:25:b7:45:8a:c9:48:6d:67:
85:34:84:4c:a9:36:ad:41:d8:09:1c:c3:fa:39:a7:54:c9:6f:
c8:66:2f:03:94:c3:04:52:80:bd:df:37:c0:35:e8:66:5e:4d:
54:ab:ec:39:6c:9c:25:3b:9a:0e:6b:8a:6f:af:5d:9c:78:fb:
e8:9e:69:d4:14:40:db:c5:4b:25:48:e0:62:1a:3c:6c:4b:9f:
13:a4:d2:8d:8b:a9:bc:68:cf:ad:cd:e7:f3:d9:12:d5:38:6a:
ee:51:6f:41:04:57:3d:4a:ce:b0:75:0d:2b:88:2d:04:c9:20:
f2:93:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:24:39 2026 by rpki-client