Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: F3K9qRwGU7BLOFrVMBH5iGnlLQwwSdovLEltIqqI6Ug=
Subject key identifier: A6:8C:03:F3:2E:20:CB:86:2B:D1:17:4E:18:5E:2E:11:A8:80:CC:70
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 019D9AE3A34B69CDFD3ACEFA4DCA0E82E0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 0897
Signing time: Fri 17 Apr 2026 10:01:42 +0000
Manifest this update: Fri 17 Apr 2026 10:01:42 +0000
Manifest next update: Sat 18 Apr 2026 10:01:42 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: csJOnX5ihFmP7HI+JmhYla1DBuU8bAgaVB/0YBcsR3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:a3:4b:69:cd:fd:3a:ce:fa:4d:ca:0e:82:e0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Apr 17 10:01:42 2026 GMT
Not After : Apr 18 10:01:42 2026 GMT
Subject: CN=a68c03f32e20cb862bd1174e185e2e11a880cc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:51:e2:d4:e9:2a:5b:04:dc:62:28:2c:1d:
c3:39:3e:ed:f8:77:2e:53:ef:7d:41:90:f2:f5:78:
03:67:54:bc:e5:7c:02:cf:ca:3c:d9:91:5d:ed:b5:
d6:cf:dd:c3:be:06:86:97:64:e2:cf:35:f5:31:a4:
ab:30:fd:d7:84:0b:dc:e5:d1:01:0c:f2:95:ba:c7:
62:10:61:53:d9:99:3b:36:60:64:6e:22:06:6e:d2:
18:83:c5:54:ed:25:7a:89:84:bb:84:1a:fa:e1:69:
27:7b:c4:4e:c1:d2:c7:58:d6:e1:0a:de:b5:37:fa:
32:a3:a2:11:ad:d5:2f:06:9f:31:e9:18:ef:5b:2f:
b1:fd:ff:48:a2:ab:b0:02:6b:0c:6d:f0:4d:98:e2:
f3:de:58:03:f2:ab:98:58:2b:78:90:52:23:94:df:
40:cb:63:e8:c2:df:ce:7e:57:81:a9:8d:63:d2:43:
9d:5b:b4:bc:61:a1:05:9c:7b:42:37:a1:cb:21:1b:
15:ff:15:38:7b:d6:6c:59:fd:1e:2f:74:e4:48:8d:
9d:48:bd:90:da:53:68:b2:f4:2c:f7:64:2b:8c:09:
fb:28:6a:0b:c5:f6:a2:56:83:38:62:b6:76:85:bf:
40:11:cf:7f:d9:da:43:27:64:d1:b2:2b:5e:4d:df:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8C:03:F3:2E:20:CB:86:2B:D1:17:4E:18:5E:2E:11:A8:80:CC:70
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:af:ed:74:c6:2e:a8:b7:5e:03:27:1d:e9:a3:5c:26:a2:13:
16:c7:cb:7c:f1:1f:3b:9c:9d:cb:9f:4b:1e:d2:fc:7f:6a:e0:
92:58:61:c9:c6:81:bb:43:db:8a:9d:be:fb:62:72:a3:79:26:
12:fe:ab:fe:a6:bc:64:97:ef:92:63:c3:2d:8b:05:6b:68:5d:
80:7a:7a:45:aa:77:67:d5:b0:93:b2:f0:c1:54:b6:e0:60:38:
9c:60:5d:24:ae:3e:6b:fc:4a:ba:eb:6b:f6:92:57:3d:8b:c8:
9b:7d:0e:04:1b:16:ed:6b:1b:ec:a5:84:18:7c:40:39:0b:76:
71:25:09:a4:eb:96:77:ef:df:06:73:d1:fa:a2:47:77:e9:16:
7c:6c:80:02:28:ff:b8:20:b3:3c:30:db:98:49:f6:b9:88:1f:
2f:d5:68:30:bd:2a:32:81:9b:6a:36:ee:b3:89:ef:2f:7e:55:
ec:e0:30:7e:ca:4f:47:57:56:bb:76:c4:65:67:8a:39:52:cc:
1e:de:bb:01:cd:55:94:80:20:3d:3d:77:d9:93:f3:46:8f:4d:
07:85:8c:bb:f3:9b:4a:d0:49:8e:7b:f4:95:5a:e4:a4:11:2a:
26:ea:ab:77:ce:71:2f:ea:28:a4:9d:15:6c:75:11:55:1c:24:
cf:d5:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:41:22 2026 by rpki-client