Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: 58Q5rilZ+2iDETpOr8MgVZREaV22o7EALrJM49UAaPg=
Subject key identifier: A9:11:99:64:75:56:EB:96:6E:97:B9:AD:1B:C4:E4:7D:2C:7A:9C:DA
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 01A01CAF6B23ABC27DAB90F7279A73FF0401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 0A82
Signing time: Thu 20 Aug 2026 01:00:53 +0000
Manifest this update: Thu 20 Aug 2026 01:00:53 +0000
Manifest next update: Fri 21 Aug 2026 01:00:53 +0000
Files and hashes: 1: EeAR-0FuIgpREXK4CZj7bbiR324.roa (hash: nK35rOT9ZlV+vNlZLQE4MxQolHHOslBBZTHEZhrQ+LA=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: YkXIMVfF8TIiDpXz9YJIECUqs9QlvBuh+QNRXwMzRqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:af:6b:23:ab:c2:7d:ab:90:f7:27:9a:73:ff:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Aug 20 01:00:53 2026 GMT
Not After : Aug 21 01:00:53 2026 GMT
Subject: CN=a91199647556eb966e97b9ad1bc4e47d2c7a9cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:ed:f5:4e:82:75:c5:d6:47:aa:a8:57:42:
e6:83:61:dd:d6:59:84:8e:1e:ca:ef:98:21:09:3d:
75:0e:0d:c9:98:bf:72:cb:05:c9:4e:ef:03:22:0c:
b6:fa:be:57:df:ff:b5:06:52:8e:5f:29:83:62:5b:
11:1d:4c:a7:f7:9f:41:bb:8e:8b:0e:5f:1a:10:a1:
db:96:24:ab:1e:44:77:87:46:e6:85:37:74:19:b1:
09:f7:30:c8:57:a4:4a:2d:a5:24:d4:3d:a4:83:5c:
1e:73:86:12:2b:d7:a6:a1:0b:d3:d0:43:a9:57:92:
72:b7:4f:86:7e:01:a3:be:40:6d:20:5c:b0:23:d6:
5d:a1:07:74:e2:b4:dc:b0:6d:06:8d:09:51:51:72:
e5:1f:da:78:d9:62:79:3b:27:76:f2:77:25:7e:d1:
01:b3:24:10:a8:a5:03:78:26:31:bf:5b:b0:9e:88:
ee:f7:8b:3f:a8:03:b2:cd:fa:a8:f9:0e:89:22:ce:
2a:a4:24:cb:46:aa:fd:bc:0b:eb:00:ba:76:72:35:
9d:53:be:be:a5:7d:6a:58:9a:59:80:08:7a:2e:83:
e4:cf:25:ad:23:78:0d:69:bb:33:a8:9b:82:29:2d:
05:3c:c5:f3:7c:65:a3:26:8e:1c:c5:e3:41:bf:28:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:11:99:64:75:56:EB:96:6E:97:B9:AD:1B:C4:E4:7D:2C:7A:9C:DA
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6c:48:0f:67:59:22:b7:09:f6:39:bd:0b:59:f8:21:55:0e:
49:56:3e:b2:ff:53:48:00:da:60:a8:f2:17:6b:5b:b1:8b:c5:
51:50:54:64:16:12:11:86:04:b5:20:32:fb:36:ec:75:6b:af:
a1:c9:06:a6:6d:28:2a:5a:b9:d7:79:ee:9a:e3:6d:d9:6e:7f:
3e:6e:a7:6e:2d:db:65:f8:5d:2b:8f:2a:d8:d2:a7:a0:7e:0e:
21:6b:d6:7f:cb:d2:77:42:1b:4b:b4:06:9d:a1:ef:5d:82:37:
21:a2:43:5d:1a:07:88:17:49:2a:a8:0b:da:a0:3d:12:09:37:
a2:26:da:cb:72:46:72:3e:fa:73:8f:0b:cb:80:ee:83:71:11:
91:d7:dd:b6:9c:aa:fe:64:3f:5b:71:b8:e8:ba:d7:ec:da:b3:
f3:17:e8:0a:68:22:19:1a:74:da:d2:db:8f:0d:ab:03:5d:92:
39:bf:7c:7f:43:12:1e:78:67:5f:b0:25:a7:81:13:75:c4:79:
e3:55:a1:12:2a:10:58:e5:dc:d4:29:56:e2:ba:87:22:a2:e9:
29:de:c2:8c:c3:81:e9:cc:c1:41:86:0e:76:d5:fd:34:ec:54:
b1:ad:97:bd:51:8d:99:bd:0b:18:65:56:e8:a5:f2:3e:25:5f:
f8:31:c6:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAcr2sjq8J9q5D3J5pz/wQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjI0Yzg0YWViYTg1OWI5MGM4OTM2Y2JhNjE2N2VlNGM0
NGVjZTcwHhcNMjYwODIwMDEwMDUzWhcNMjYwODIxMDEwMDUzWjAzMTEwLwYDVQQD
EyhhOTExOTk2NDc1NTZlYjk2NmU5N2I5YWQxYmM0ZTQ3ZDJjN2E5Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCLt9U6CdcXWR6qoV0Lmg2Hd1lmE
jh7K75ghCT11Dg3JmL9yywXJTu8DIgy2+r5X3/+1BlKOXymDYlsRHUyn959Bu46L
Dl8aEKHbliSrHkR3h0bmhTd0GbEJ9zDIV6RKLaUk1D2kg1wec4YSK9emoQvT0EOp
V5Jyt0+GfgGjvkBtIFywI9ZdoQd04rTcsG0GjQlRUXLlH9p42WJ5Oyd28nclftEB
syQQqKUDeCYxv1uwnoju94s/qAOyzfqo+Q6JIs4qpCTLRqr9vAvrALp2cjWdU76+
pX1qWJpZgAh6LoPkzyWtI3gNabszqJuCKS0FPMXzfGWjJo4cxeNBvyibVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkRmWR1VuuWbpe5rRvE5H0sepzaMB8GA1UdIwQY
MBaAFM8iTISuuoWbkMiTbLphZ+5MROznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wNzE2ZGYtMzQxYi00YTA4LWE0NTEt
NTk2MjI1MDMxZWUzLzEvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wNzE2ZGYtMzQxYi00YTA4LWE0NTEtNTk2MjI1MDMxZWUz
LzEvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2xID2dZ
IrcJ9jm9C1n4IVUOSVY+sv9TSADaYKjyF2tbsYvFUVBUZBYSEYYEtSAy+zbsdWuv
ockGpm0oKlq513numuNt2W5/Pm6nbi3bZfhdK48q2NKnoH4OIWvWf8vSd0IbS7QG
naHvXYI3IaJDXRoHiBdJKqgL2qA9Egk3oibay3JGcj76c48Ly4Dug3ERkdfdtpyq
/mQ/W3G46LrX7Nqz8xfoCmgiGRp02tLbjw2rA12SOb98f0MSHnhnX7Alp4ETdcR5
41WhEioQWOXc1ClW4rqHIqLpKd7CjMOB6czBQYYOdtX9NOxUsa2XvVGNmb0LGGVW
6KXyPiVf+DHGtw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 03:10:10 2026 by rpki-client