Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: KkqxZt+C0nJeeqK5NVyGoRva1cqlAEMAA29s/z7Xrcc=
Subject key identifier: 0C:93:3C:EE:77:C7:D3:9C:71:07:A3:E6:1E:21:B7:C0:4F:60:55:1B
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 019D3A545F4519843453566AB231F77968E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 0865
Signing time: Sun 29 Mar 2026 16:01:41 +0000
Manifest this update: Sun 29 Mar 2026 16:01:41 +0000
Manifest next update: Mon 30 Mar 2026 16:01:41 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: 4kJjJ+pX7q84FIsi1kF+ZmiO9diATIjVNeEg4yLKzns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:5f:45:19:84:34:53:56:6a:b2:31:f7:79:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Mar 29 16:01:41 2026 GMT
Not After : Mar 30 16:01:41 2026 GMT
Subject: CN=0c933cee77c7d39c7107a3e61e21b7c04f60551b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:dc:42:73:92:f9:25:d7:17:ee:a6:44:e9:
b7:40:48:f8:5a:c7:2b:a1:4a:f1:40:a9:aa:b5:e0:
16:74:bd:67:6a:81:13:91:c1:13:46:9b:7d:67:a3:
05:f0:26:61:58:32:bb:58:02:25:30:4b:ba:0e:f0:
b2:8e:4a:ca:e0:ba:9b:6b:6d:52:6d:13:ca:81:c8:
fd:59:67:07:cf:87:7c:d2:cf:12:b1:f8:86:5b:4b:
16:fc:cd:f6:5b:f3:b9:ca:19:9c:f0:d7:f7:bc:13:
1e:75:1d:69:b0:70:a6:14:5b:88:5e:77:05:19:3f:
8e:ce:66:3b:00:28:99:24:fe:66:54:99:56:44:8a:
18:27:87:b3:14:7b:ee:c1:0b:35:57:0a:76:89:3e:
b5:1f:ce:d6:2a:5a:94:b2:a0:2a:eb:f9:f3:8c:69:
1e:2d:ca:97:06:a8:30:99:c6:14:06:74:ae:32:46:
ff:15:08:7e:59:36:16:ba:7e:bc:f1:6b:0f:04:bb:
f3:b3:38:54:58:b0:18:6e:42:e6:b3:96:5e:ab:3a:
bb:02:f8:dc:d3:18:c5:4e:d4:fa:f8:a3:f9:c2:58:
f7:e5:1e:60:42:4b:64:f3:26:b9:16:62:ac:55:65:
d1:ef:2b:41:90:a2:4c:b6:00:42:fb:e1:c5:30:2d:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:93:3C:EE:77:C7:D3:9C:71:07:A3:E6:1E:21:B7:C0:4F:60:55:1B
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8a:f3:87:7a:31:e3:ee:15:66:04:52:90:fd:8b:b7:1e:8d:
3f:f1:22:5d:f7:66:eb:6b:f4:58:f4:a6:a5:62:8e:62:de:6d:
60:58:7e:e3:98:c2:5c:bd:f6:25:57:27:c6:56:16:b8:98:3f:
88:3a:21:a2:70:5c:79:76:a8:41:74:01:a9:94:19:7c:89:32:
c1:83:c0:13:54:3a:0f:b2:b1:ca:8d:31:33:87:7f:7f:f4:86:
17:57:31:c9:22:bd:da:ce:9a:71:16:10:be:7c:12:c1:69:19:
76:da:be:e3:a4:58:07:9b:28:bd:92:33:70:da:64:5e:81:34:
73:e3:00:03:ad:88:df:e2:35:8a:10:b0:23:57:1c:af:8b:c0:
1a:25:bc:a3:c5:0d:6b:c0:75:7b:84:ae:b7:25:0d:c9:65:92:
c1:2c:ed:ac:5d:d5:a0:1f:d4:a2:24:27:62:ed:cc:b6:e5:af:
e3:e0:a1:32:6c:b3:72:3e:e9:e7:fa:f0:b9:58:83:cf:76:8b:
a3:67:bb:7a:85:87:9a:02:db:a9:20:a4:c0:1b:c2:1b:c3:b6:
0d:93:d3:24:07:14:0e:30:ad:92:69:66:b4:a7:af:bb:6b:7c:
41:86:31:51:83:c5:31:ea:23:f5:35:04:e7:5e:93:75:fd:4a:
23:4a:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:44 2026 by rpki-client