Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: SMV6bmpRw/FOhZsRACT1M4uD+G3UJ0brviZEpo5mCJU=
Subject key identifier: C8:46:C2:F9:E5:9B:06:C2:5D:90:E4:2C:C3:E8:A1:87:B3:67:4D:0F
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 01A18A527BE7DFB2CF1E85D6868536C11CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 1ACD
Signing time: Fri 30 Oct 2026 01:00:23 +0000
Manifest this update: Fri 30 Oct 2026 01:00:23 +0000
Manifest next update: Sat 31 Oct 2026 01:00:23 +0000
Files and hashes: 1: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (hash: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: KdXBQglmr9iYxmzToUI8ZpBXIeZrJEZJ451XE6F4GRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:52:7b:e7:df:b2:cf:1e:85:d6:86:85:36:c1:1c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Oct 30 01:00:23 2026 GMT
Not After : Oct 31 01:00:23 2026 GMT
Subject: CN=c846c2f9e59b06c25d90e42cc3e8a187b3674d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:ef:e9:bc:eb:ce:d0:66:1c:01:e1:3f:3a:
b2:a8:47:0b:50:db:34:25:d6:99:7b:01:a6:d8:85:
a2:3a:36:b9:4e:18:a6:be:7e:51:35:93:60:06:03:
ec:02:80:e0:37:bb:ff:51:df:80:01:8b:cd:2a:d8:
71:95:37:9a:01:28:4c:73:bf:b3:13:df:7f:24:10:
9a:25:23:16:6c:64:54:3f:10:43:5b:c7:d2:9f:3f:
05:58:27:bb:7e:89:50:90:d4:b0:20:9a:c8:a8:5c:
cd:58:76:30:ef:7b:da:ec:36:10:01:36:7f:52:ec:
55:51:30:af:94:54:8a:94:92:42:c3:ae:fc:ef:a2:
57:6a:13:7f:ba:92:57:50:75:4e:01:a4:17:c8:ae:
ee:36:73:93:2a:b9:17:26:57:c6:af:03:bb:14:b9:
8b:36:52:5f:ea:8d:7f:71:66:f8:6e:7d:c1:39:a4:
95:26:53:4c:15:15:8d:76:8c:35:4d:07:1e:c2:bb:
76:a1:93:59:c6:b5:68:5c:37:6b:7e:82:ed:aa:3b:
f8:3a:10:8e:67:e3:3f:61:da:fe:dc:97:59:70:d1:
e2:3d:bf:cc:c2:b2:dc:84:02:e4:30:92:bf:0a:b9:
69:d0:32:d5:eb:7f:53:a3:3b:d7:dc:9e:75:5a:6a:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:C2:F9:E5:9B:06:C2:5D:90:E4:2C:C3:E8:A1:87:B3:67:4D:0F
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:03:29:4d:b1:63:ed:ba:e1:71:81:a6:4e:49:4c:f6:13:76:
3b:1c:89:b1:bf:e3:cf:09:99:96:04:ee:3d:70:ce:52:87:6e:
63:de:63:cb:9e:6f:a6:80:7f:74:2e:c4:db:46:8a:a3:f3:87:
d2:7c:00:00:05:6b:4b:28:3a:19:cc:05:79:e3:40:12:9e:28:
c0:b0:95:86:eb:35:11:6b:c4:f3:c6:fc:a9:46:6f:1d:93:2c:
7a:f7:bc:80:54:b8:ad:3a:17:1e:ef:db:19:08:cb:02:b3:d4:
8f:02:e0:a2:20:92:1e:6d:bb:5a:83:46:ce:9c:b7:be:28:27:
3c:cc:ac:08:28:88:ba:be:63:5a:4a:ab:27:a7:0b:8e:07:d7:
f8:25:03:98:99:4d:c2:5e:a2:cd:e4:21:48:48:6b:24:df:b8:
e3:db:fe:c9:ef:66:a8:e8:59:5c:ae:57:b2:16:7e:da:c1:aa:
fe:66:75:6d:90:57:25:47:2d:0e:04:83:55:5d:e3:74:cb:7a:
da:d7:f9:19:0d:6b:0a:d6:c2:c9:3f:1f:f3:88:36:cd:45:2e:
e3:bd:54:67:d6:e1:e3:37:ff:18:06:e8:0d:ca:5c:eb:2f:17:
8f:5f:b0:74:0f:d8:fc:dc:07:d7:91:9e:12:45:f7:98:77:c9:
cb:fb:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:35:16 2026 by rpki-client