Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: +8nCMYzr0Yw6aVf170XmFQfbI4nTaZIGasb5HY11Ik0=
Subject key identifier: BC:DF:68:C2:2A:01:13:AF:51:2F:44:1E:10:E5:7E:C4:BF:65:EA:8D
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 019F1BD6313AB9C87A5B8CA076B2DC599494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 09FD
Signing time: Wed 01 Jul 2026 04:00:49 +0000
Manifest this update: Wed 01 Jul 2026 04:00:49 +0000
Manifest next update: Thu 02 Jul 2026 04:00:49 +0000
Files and hashes: 1: EeAR-0FuIgpREXK4CZj7bbiR324.roa (hash: nK35rOT9ZlV+vNlZLQE4MxQolHHOslBBZTHEZhrQ+LA=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: hl+7hO1YyF9qesqQUXZEqiXeYZZuTSf41tiNRNXqsMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:d6:31:3a:b9:c8:7a:5b:8c:a0:76:b2:dc:59:94:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Jul 1 04:00:49 2026 GMT
Not After : Jul 2 04:00:49 2026 GMT
Subject: CN=bcdf68c22a0113af512f441e10e57ec4bf65ea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:dc:ef:68:49:a2:47:f6:0c:94:e5:fe:1c:
f3:cf:0f:2d:8b:0f:f0:ff:ad:43:7c:aa:92:d2:54:
e8:58:a6:59:e9:63:a0:50:81:1b:84:9e:7a:5d:1a:
e2:5c:19:3d:74:12:c9:a8:0e:3e:4a:98:b0:df:d9:
a6:09:c6:f3:80:85:a7:bf:2c:08:10:83:b5:14:6f:
79:6c:a9:d3:aa:a5:eb:58:be:80:f2:61:15:f3:2a:
1b:3f:1c:fc:ef:27:a1:22:49:46:6f:3e:36:9c:f8:
be:e0:ae:ce:4e:76:08:05:41:26:aa:f9:c4:87:0d:
53:6c:8d:75:d6:3a:a5:69:f7:e8:39:24:d1:0c:d6:
76:a5:2c:fe:87:39:ff:6d:6b:3b:20:af:5d:f6:be:
54:8e:3b:c9:66:ea:f6:a4:f9:93:09:c7:90:db:0b:
04:cc:2d:1b:d0:40:77:af:ea:06:f6:0b:2f:6a:56:
51:22:5b:9c:9f:b7:4d:4e:b4:b9:bf:be:9e:39:f1:
26:c4:12:ef:4f:0d:ea:98:77:74:be:ec:5e:44:a2:
41:aa:18:87:c8:69:df:24:78:15:ff:84:e7:58:c8:
64:a8:32:50:bb:c5:aa:17:58:9b:b6:3a:cc:cb:55:
b8:e8:36:16:8d:9c:0a:37:ac:b8:47:76:4e:e7:d1:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DF:68:C2:2A:01:13:AF:51:2F:44:1E:10:E5:7E:C4:BF:65:EA:8D
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:a1:b7:c3:b7:e1:a2:80:a8:9b:41:fb:8a:24:db:4f:0a:
46:1d:54:e9:00:37:4e:48:5c:75:1f:17:87:b0:86:b0:fa:05:
20:ea:50:c3:31:5e:51:21:c5:db:39:5c:c2:7b:ba:07:be:0d:
0f:20:cc:e4:7c:fd:e1:1b:1c:66:04:9b:79:1d:1b:6f:b0:10:
95:10:24:ad:58:b6:b4:17:1f:3f:56:bc:db:09:8e:34:75:5b:
74:3f:0e:a9:29:99:ec:12:d4:1d:e7:35:37:01:43:93:3f:55:
93:31:4b:32:f9:dc:64:0e:e2:06:ba:37:5d:b9:e0:4f:97:ec:
6d:d6:13:38:94:25:40:34:d8:da:5a:dd:81:7e:a2:b1:34:c6:
a2:50:db:eb:ab:de:9e:71:19:33:46:ff:f5:f5:1f:6c:71:8f:
29:ae:ce:37:3e:65:ab:4d:6f:b4:fe:10:f8:6c:dc:1b:7c:d5:
ad:89:9f:07:6a:2d:e8:a7:34:a7:3d:7f:97:f3:31:0a:21:2f:
4f:3f:97:5b:07:c0:ec:34:1f:b5:ad:68:ba:0b:45:45:b1:a9:
ad:a1:f4:fc:9f:9a:26:06:a6:ba:01:0b:fc:b8:1a:ff:82:d8:
f7:c8:fc:72:2f:0f:e3:45:b5:06:99:1f:75:3d:f4:7c:5b:14:
06:b9:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:01:02 2026 by rpki-client