Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: 1T9XYHd1W571oo7VnGDLbkeW8l7gDoywH5NDo0A3czI=
Subject key identifier: C9:71:9C:7F:10:D3:66:07:97:95:97:A8:F7:05:BE:6B:3F:66:E1:BE
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 01A1784C47644359315070E85676CE97914B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 0B36
Signing time: Mon 26 Oct 2026 13:00:27 +0000
Manifest this update: Mon 26 Oct 2026 13:00:27 +0000
Manifest next update: Tue 27 Oct 2026 13:00:27 +0000
Files and hashes: 1: EeAR-0FuIgpREXK4CZj7bbiR324.roa (hash: nK35rOT9ZlV+vNlZLQE4MxQolHHOslBBZTHEZhrQ+LA=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: pf6pYu1JQkz2ruZ0/O2vcikLmivZNX1Ah4h+VzpcL1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:47:64:43:59:31:50:70:e8:56:76:ce:97:91:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Oct 26 13:00:27 2026 GMT
Not After : Oct 27 13:00:27 2026 GMT
Subject: CN=c9719c7f10d36607979597a8f705be6b3f66e1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:86:84:e4:ec:fb:ce:b2:ae:0f:14:c4:35:
64:5e:c5:70:f0:19:c2:86:76:bf:eb:cb:f8:cd:05:
56:38:3c:b8:64:15:b4:aa:80:59:00:c8:f4:e6:b7:
a6:b1:f8:0f:ac:ab:3b:9f:bb:63:22:ce:01:4b:70:
65:02:ae:98:8a:ac:16:46:98:e3:c8:ee:2d:2d:52:
14:ee:83:8f:c5:2b:47:0d:31:bb:52:62:92:1e:fc:
62:4a:62:e1:e2:d5:3f:98:04:19:9d:5e:55:20:8c:
96:2f:c9:8f:70:a3:a7:22:7d:c9:35:d9:1f:65:7e:
a2:eb:b9:7b:1f:b3:6c:dc:35:89:48:46:e9:85:0d:
56:8d:22:fd:af:41:c7:98:1a:2f:21:c9:cf:ec:ed:
05:3f:10:9e:20:01:77:ab:6d:6b:31:1a:75:d3:9a:
9a:e2:d1:bb:64:8d:15:a4:7f:64:80:bc:55:30:b3:
62:bf:03:a7:98:11:e9:bb:06:15:16:78:88:6e:73:
85:b9:9f:31:58:a8:67:cb:f8:4d:2e:57:9a:08:87:
e9:f9:52:f6:b1:f1:91:04:16:34:13:23:56:12:27:
c2:05:e1:29:ab:b4:0a:ce:9f:3a:d8:75:a3:b2:68:
9e:91:8d:bb:55:66:4d:2a:c8:59:f5:bf:06:40:0b:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:71:9C:7F:10:D3:66:07:97:95:97:A8:F7:05:BE:6B:3F:66:E1:BE
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9f:8c:ce:d3:11:73:d1:1a:1c:46:71:7d:0d:46:95:60:b9:
0d:ef:05:c1:1b:18:86:9a:39:f0:d4:7b:d5:71:8f:c7:54:53:
4b:31:e7:fa:2b:69:02:42:bc:5f:80:cf:71:d9:fa:e6:02:4e:
15:ef:c6:71:f3:9e:ed:e2:a7:d2:bd:2a:7f:ac:da:91:6f:6f:
3d:89:7f:a6:b9:5d:27:92:9a:9e:d5:bd:95:99:3f:e0:df:a2:
e6:40:63:f9:e9:34:c6:f0:ea:6c:b5:4e:df:6b:10:a7:0e:54:
c4:b5:7e:6c:18:83:69:48:54:c6:06:21:a9:7e:be:1b:2c:b6:
e0:8f:05:cb:72:bd:9a:ee:02:1b:81:65:30:2f:ea:12:d4:4e:
25:15:e8:7f:a3:ef:26:f8:2f:41:a6:32:af:53:c4:a7:4e:a2:
e6:43:ce:bf:73:16:73:69:87:43:f7:31:10:43:72:7f:5e:47:
82:fa:e5:a0:87:3d:fa:a2:17:72:5e:12:29:5a:df:81:9c:8d:
e2:20:4e:ee:a7:2e:9c:9a:10:05:0d:14:3c:bc:70:83:bf:35:
5d:09:ef:a5:09:dd:09:34:8c:d6:d2:1d:ab:db:d0:fe:d9:e8:
ea:86:99:cd:27:f2:b1:63:33:f4:fb:45:1b:b1:c1:b0:1a:42:
44:8d:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:56:50 2026 by rpki-client