Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: QdDgTjWz0l3zQymakYY8kP60O9w4ikTANuNVDCWrMSQ=
Subject key identifier: 58:CD:5A:B5:72:BE:43:8A:83:CF:E6:DD:6A:EB:02:C1:8C:FA:94:47
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 01A182D0B2A85686400A9B2C7394949DD3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 13CC
Signing time: Wed 28 Oct 2026 14:01:17 +0000
Manifest this update: Wed 28 Oct 2026 14:01:17 +0000
Manifest next update: Thu 29 Oct 2026 14:01:17 +0000
Files and hashes: 1: 2hflLbfqAWKpFyYGnXBTWiWqwxs.roa (hash: lI9Xhzw78sH7hBtTcjJSosgoG/UbF5gG44NR4ynAOeo=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: oGqb4y8JpSJ1Df4U3fi9r74FZb+yU/TZ52Xos9r1rpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:b2:a8:56:86:40:0a:9b:2c:73:94:94:9d:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Oct 28 14:01:17 2026 GMT
Not After : Oct 29 14:01:17 2026 GMT
Subject: CN=58cd5ab572be438a83cfe6dd6aeb02c18cfa9447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:94:a2:e8:20:86:c1:1b:3a:72:2d:26:22:58:
8a:42:03:34:cc:ed:f7:b7:dd:4e:ed:0e:50:77:d9:
33:20:33:94:91:18:b9:a3:b0:53:89:12:8a:9b:05:
e0:9a:53:4e:10:07:8f:19:82:53:58:0b:9c:42:59:
11:c5:4a:89:5a:a6:94:3b:1a:ef:fd:fa:d8:4d:07:
15:07:56:12:10:31:73:8e:2b:eb:98:8c:80:4c:d1:
f8:24:db:e3:83:ce:68:16:b3:8f:c3:f6:fc:1f:4d:
53:c2:b9:af:8c:e9:de:69:27:5a:b1:b9:90:47:f4:
13:07:bb:29:c4:57:88:5f:5e:15:44:42:57:ec:a7:
e9:66:69:20:76:bf:5e:79:d9:cf:a7:29:52:52:bc:
58:44:1a:7e:d0:6f:d2:88:b7:96:0a:cc:ed:36:2b:
c1:db:6c:da:69:6d:fd:dc:8e:73:32:e9:58:9e:59:
9f:69:8b:ea:d8:c5:ed:0a:49:62:66:6c:18:d1:0a:
28:61:dc:04:a2:06:4c:e9:75:c4:ec:79:09:80:9e:
14:4a:4f:fa:f6:50:92:f6:ed:87:05:79:93:24:a0:
4c:b8:46:28:11:f7:f8:3d:5a:27:f8:26:25:77:f8:
28:4b:f3:fa:e8:bd:0d:8b:87:a1:42:cf:c2:f7:81:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CD:5A:B5:72:BE:43:8A:83:CF:E6:DD:6A:EB:02:C1:8C:FA:94:47
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:24:0b:7d:42:ba:df:c3:af:21:0c:a7:ba:70:c6:dc:e3:59:
ed:73:b9:c3:07:a6:e3:7d:64:94:7f:22:64:6b:14:3b:09:b7:
19:36:b1:e1:bd:71:aa:6b:a4:d3:19:e8:76:79:99:6b:15:f3:
16:d6:dd:ac:2f:6e:38:14:a8:d8:da:ae:b6:23:c3:a2:85:22:
e0:a9:7d:66:e8:a8:b5:32:59:a8:75:8e:ef:73:42:38:69:94:
2f:7e:18:19:92:37:f4:98:2a:c2:eb:3b:f7:90:f8:fd:0d:53:
0f:96:e9:0a:ae:f6:40:fb:8b:f5:c6:5c:66:67:9d:78:d4:a8:
7d:c3:91:89:83:f0:31:8f:63:35:7c:26:85:5c:ac:66:ee:51:
00:03:26:5c:58:0d:68:3f:81:08:12:e8:f7:8e:48:f1:62:24:
67:0f:6e:24:fe:63:a8:af:38:4d:f9:cb:32:e4:38:49:48:9b:
91:83:dd:b2:e5:e1:a0:94:ab:cc:82:02:a5:9d:ee:eb:60:bd:
93:66:9b:64:e2:9f:25:b8:e6:52:d8:ec:c6:6b:f5:d9:bc:e6:
f5:f7:04:50:b4:ae:5e:23:30:4c:ce:1e:30:68:2c:ab:51:6a:
2f:67:22:df:55:b6:d7:15:16:a2:f0:81:70:0f:6c:de:39:4b:
0a:cf:1a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:48:29 2026 by rpki-client