Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
File: z_yziNFbNCAeP5DcK7xxKahBSS0.mft (raw, json)
Hash identifier: 1cKK1ODuG4oU1K98AYmm/y2SyKuK9onz6F1kdA5BV7g=
Subject key identifier: ED:82:64:00:69:C3:20:1F:FF:95:CF:CF:9C:26:44:C5:B6:AA:C6:35
Authority key identifier: CF:FC:B3:88:D1:5B:34:20:1E:3F:90:DC:2B:BC:71:29:A8:41:49:2D
Certificate issuer: /CN=cffcb388d15b34201e3f90dc2bbc7129a841492d
Certificate serial: 01A0EDE6A39A4B0B8AEE03BFA58861BC09F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
Manifest number: 1E
Signing time: Tue 29 Sep 2026 16:01:50 +0000
Manifest this update: Tue 29 Sep 2026 16:01:50 +0000
Manifest next update: Wed 30 Sep 2026 16:01:50 +0000
Files and hashes: 1: 1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa (hash: iEXTilkRCMqep8ohagVKxx8QP/pOQ0cevjMJdBDrx64=)
2: z_yziNFbNCAeP5DcK7xxKahBSS0.crl (hash: edXdIDLo7kgTLa6dO5Uro3YvLvtNKAO6wE5MpOjYlVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:a3:9a:4b:0b:8a:ee:03:bf:a5:88:61:bc:09:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cffcb388d15b34201e3f90dc2bbc7129a841492d
Validity
Not Before: Sep 29 16:01:50 2026 GMT
Not After : Sep 30 16:01:50 2026 GMT
Subject: CN=ed82640069c3201fff95cfcf9c2644c5b6aac635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:6d:f0:34:17:3c:2f:95:83:6d:af:dd:06:
c5:52:19:05:ab:ad:ab:f0:5b:7b:54:15:79:1e:ed:
6e:bc:37:05:be:b7:40:85:c9:84:a7:c4:a2:15:ac:
b3:e8:ec:e7:0d:84:01:c9:53:ca:18:0a:15:a9:8d:
dc:44:3b:0f:ac:03:9f:31:b4:7d:28:b2:ad:ac:08:
f1:53:69:bc:2e:1c:2b:97:94:9f:ff:0f:0c:2a:f6:
6d:17:58:fb:df:30:b2:37:e6:b2:09:e4:45:f4:29:
1b:f6:c6:a3:45:6a:45:40:75:74:6d:e9:b8:5f:99:
e7:32:81:b8:ae:78:29:05:09:80:58:01:0a:32:8d:
f0:80:70:dc:f6:28:74:fd:ef:00:31:92:6d:13:e1:
77:b2:fd:96:50:e5:35:43:62:9d:4d:8c:ad:a8:b8:
e1:50:ca:e4:d1:1e:01:19:b4:dc:15:14:6d:6a:ed:
c8:b8:33:a7:d0:14:15:a8:77:bd:09:59:93:67:cd:
06:4c:4b:f9:43:61:ef:f1:57:95:76:5e:a5:28:58:
03:2e:e6:c4:71:12:80:e0:15:0f:67:0d:1f:0c:17:
6e:1a:29:7b:e5:bc:53:95:d2:5f:85:cc:32:ab:cf:
23:82:d5:84:2f:5c:f0:8f:67:af:3d:45:f7:85:d9:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:82:64:00:69:C3:20:1F:FF:95:CF:CF:9C:26:44:C5:B6:AA:C6:35
X509v3 Authority Key Identifier:
keyid:CF:FC:B3:88:D1:5B:34:20:1E:3F:90:DC:2B:BC:71:29:A8:41:49:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:60:05:c5:cd:4c:4f:4e:cf:50:49:b3:10:17:1e:16:b9:
31:28:22:a4:d1:b4:14:e6:28:30:2a:04:b0:df:36:40:25:46:
c7:0b:6f:ea:56:12:20:7d:80:4f:df:15:34:c4:94:a7:ae:52:
34:e1:49:42:b0:47:de:ca:19:eb:73:49:66:40:45:94:81:33:
d1:a2:d0:7a:14:c4:c8:00:f6:28:54:82:24:b6:19:b5:89:36:
a6:68:27:bb:5f:06:8f:30:a3:ef:ea:de:ec:45:56:97:bb:6e:
06:92:3d:78:79:36:43:bf:2f:6d:0e:b4:ce:f6:44:0a:e8:62:
00:4f:51:31:fe:b0:a9:fa:0d:c7:c8:f6:b6:90:ab:70:8e:fc:
5e:ce:5d:03:f7:82:1c:18:ca:3f:98:f9:70:ee:cf:4f:14:a5:
19:37:f4:17:24:cd:6a:a6:57:be:de:26:6d:ec:c0:99:ee:c0:
67:fa:f8:91:51:cb:62:4d:27:f1:4c:9c:94:e7:c8:27:c6:78:
31:5a:bc:fd:58:32:e4:a8:f9:8b:e1:e7:33:51:02:fb:4e:65:
8a:b1:83:0d:f7:fe:6c:ae:b5:bf:bf:cb:0a:e4:3a:7d:44:0f:
ac:0a:c8:5a:97:08:15:ba:21:71:37:71:0d:4d:de:db:b6:ba:
16:9c:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:19:07 2026 by rpki-client