Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: KdXXvvXJ4bpYTx2z2XJ5rgVTtSPYr8yoXsqnvr6J/xo=
Subject key identifier: 31:AD:70:40:ED:E3:3E:2A:BD:F3:53:98:3E:C2:F1:F8:50:96:C0:93
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 019CAB6AC849E11DA955422974881E830C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 081B
Signing time: Sun 01 Mar 2026 22:00:27 +0000
Manifest this update: Sun 01 Mar 2026 22:00:27 +0000
Manifest next update: Mon 02 Mar 2026 22:00:27 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: Md4SLCsJCc9IFnBiXeiOoS2FEnErY5hgUoUDMmNxOWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c8:49:e1:1d:a9:55:42:29:74:88:1e:83:0c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Mar 1 22:00:27 2026 GMT
Not After : Mar 2 22:00:27 2026 GMT
Subject: CN=31ad7040ede33e2abdf353983ec2f1f85096c093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:39:6c:d4:d9:58:86:57:ea:e8:68:c9:b3:85:
30:87:0a:72:e5:02:d2:12:29:af:91:ef:23:6f:88:
30:c4:23:53:98:58:6e:42:ab:a4:fc:16:60:d3:14:
92:8b:66:11:a8:27:75:f5:01:65:b4:3e:f7:4d:a3:
a9:51:b1:fd:3e:5e:5b:42:52:37:cf:61:03:93:2b:
3b:a1:a4:76:22:6a:df:ab:1f:2c:2f:ed:f0:a7:60:
1b:98:f8:d2:2f:31:b2:c0:ac:46:bb:f9:6a:5a:e8:
f9:33:77:ff:b7:57:01:c0:1b:76:c2:2f:9f:50:c1:
e2:b1:da:b3:2c:5d:fb:ca:43:8c:e4:fd:b3:36:31:
30:71:5a:79:b5:c4:2b:15:a2:74:f9:3e:c9:10:2b:
6e:1b:3f:a9:9c:0d:cc:43:b9:b1:aa:7f:c5:b3:13:
e5:a2:01:9b:4b:c8:73:d4:1c:27:63:8a:28:07:12:
c8:99:4f:52:d6:9c:50:cf:88:24:96:3f:35:d1:74:
dd:2d:57:96:64:f2:2b:75:e6:37:a1:f4:bc:52:7c:
3e:2c:b0:8a:d0:62:c1:74:53:24:12:99:cf:44:64:
87:1e:7a:1c:89:d9:dd:8d:f3:d7:99:c5:1e:da:30:
b7:71:87:17:3d:82:34:11:28:f4:81:bf:49:65:a2:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AD:70:40:ED:E3:3E:2A:BD:F3:53:98:3E:C2:F1:F8:50:96:C0:93
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ac:fe:c2:03:44:e7:0e:bf:76:79:a8:62:ac:8b:96:7b:a3:
3a:62:64:85:89:16:93:a1:01:f9:6a:3d:fa:a4:2e:0b:38:ab:
c0:af:ce:b4:20:b7:1e:5d:f7:60:70:38:cb:d8:72:15:10:75:
98:6c:38:e9:09:26:0c:e9:5d:0c:1c:53:8e:cc:90:e6:e0:f5:
e0:80:e1:a2:72:ba:83:40:6c:cf:63:14:7d:ba:db:b3:2c:3d:
c7:66:b9:2a:9a:f7:d5:12:8b:db:b1:b1:7c:fe:eb:f6:00:61:
5f:85:21:ef:c8:d4:8e:07:86:d1:70:86:b6:db:57:ec:8d:cc:
53:2f:06:94:b0:ef:5d:62:f5:3a:87:ff:47:e7:59:e0:6e:6e:
c1:3c:28:ff:1c:2a:08:cc:29:c2:f8:65:8f:15:a1:34:39:a8:
ed:98:d6:ea:81:b8:64:6e:b2:ea:a6:5c:58:22:bc:f0:38:65:
62:32:6d:1b:03:ca:da:01:5d:9e:1b:1f:02:4e:a6:eb:3c:0b:
e7:01:5b:0a:d6:1c:59:35:55:62:20:b8:d6:86:fe:0e:47:b7:
db:4d:33:af:37:7d:9b:b6:13:1a:75:82:75:1d:f5:29:62:55:
fb:45:f8:37:3e:27:85:3d:ca:65:12:cf:dc:be:15:8e:aa:d4:
69:37:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:43 2026 by rpki-client