Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: xaIlsypQbK0SbawkvMJk16W51aQiPyfdnqKl4ZTIiLQ=
Subject key identifier: B3:15:3A:66:84:58:7A:F2:FD:0D:F0:D9:8A:A8:19:10:C8:02:7D:0A
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 01A12879F6E46147BF99FC72062B9C4B381A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 0A6E
Signing time: Sun 11 Oct 2026 01:00:43 +0000
Manifest this update: Sun 11 Oct 2026 01:00:43 +0000
Manifest next update: Mon 12 Oct 2026 01:00:43 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: /rhPWpPwujFaA4SI5cYrwQ+MyGcXgsjUNFqAJH2NYas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:79:f6:e4:61:47:bf:99:fc:72:06:2b:9c:4b:38:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Oct 11 01:00:43 2026 GMT
Not After : Oct 12 01:00:43 2026 GMT
Subject: CN=b3153a6684587af2fd0df0d98aa81910c8027d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:bb:48:88:bd:e4:ea:f3:97:c7:92:0e:16:
e9:44:4b:e9:7f:a9:a3:10:d6:b0:95:ac:8d:06:92:
63:ab:da:d2:d6:5e:07:69:7f:20:dd:3e:be:15:68:
2f:a6:6c:b9:02:17:6e:d2:12:56:2f:a8:c6:c9:b1:
40:53:44:07:6c:2c:14:88:dd:da:93:6e:92:7d:f9:
24:16:49:b8:f9:7f:45:7c:01:53:f2:8f:52:3f:a0:
98:be:31:1e:10:b9:da:c8:97:5e:1e:68:95:2c:42:
07:53:15:e4:86:a8:1e:e6:71:31:6b:38:f7:1e:ce:
3d:42:0f:53:04:fd:63:39:75:ac:bb:de:8a:5e:61:
8e:9b:3d:79:36:60:d7:08:42:23:a6:c4:ba:dd:1d:
13:cb:ed:5d:86:7e:1e:b5:4f:ac:af:92:6b:62:4d:
73:6f:6c:af:53:cc:c2:17:b7:db:e8:ab:df:df:28:
af:02:b1:86:f7:a1:a2:9e:c0:ae:59:7e:01:99:f6:
62:ea:fe:61:65:ce:62:0b:3f:10:ea:81:68:79:c1:
d2:6e:f2:e8:8d:74:97:07:8d:43:5c:9a:1b:3c:49:
25:ab:3e:c2:c5:9f:21:5a:0a:15:92:e4:dd:6f:45:
fe:aa:88:74:74:1d:a0:08:b3:8f:c5:8d:df:be:0e:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:15:3A:66:84:58:7A:F2:FD:0D:F0:D9:8A:A8:19:10:C8:02:7D:0A
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b2:ed:d5:04:61:0c:cd:de:99:92:bc:35:0a:05:e4:2b:1b:
15:6a:93:c0:36:ed:f1:ed:85:ee:f0:ed:e8:89:6f:bc:96:c2:
00:22:53:f4:95:cb:26:16:09:c8:a1:f5:3a:5d:aa:a2:36:e7:
eb:45:2c:e8:3a:9c:8f:df:25:e4:45:e4:21:0f:94:bb:a3:68:
86:a2:93:3b:08:c4:95:7f:17:b7:cc:47:8e:c7:40:db:02:33:
f2:b1:b9:a8:e6:5e:d2:d3:14:8c:f1:55:52:18:72:37:7c:ed:
05:54:a5:aa:10:2b:93:55:c2:7a:92:1e:fd:a3:fe:f5:b4:48:
ca:b1:86:ef:ca:52:c2:57:e4:aa:2a:80:c7:66:c1:6c:8f:24:
dd:60:ef:6a:78:c7:b4:e5:d8:ca:c7:5e:30:c4:06:cc:35:48:
6e:a3:5b:b4:a5:0c:61:73:38:08:e9:c1:23:4d:1d:2e:97:ae:
3d:79:e5:6a:af:d9:fb:59:e2:bc:28:e6:7f:e4:55:81:3a:af:
28:8f:bc:1b:09:e9:ed:fa:3d:2f:6a:f8:59:e4:91:19:1f:53:
18:06:31:e2:0a:7a:70:26:f5:ff:c2:78:be:21:fe:11:8b:fa:
e8:bb:1b:d6:d1:7b:25:81:c2:cc:18:b1:c7:7f:a4:d3:1f:ac:
e1:be:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:02:24 2026 by rpki-client