Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: gLFG4ldf/Y2jzpBbVmgXXQpqcXO219fiMOHZ+Ou5g70=
Subject key identifier: 03:30:C5:E4:7C:00:21:AD:0C:4B:CC:36:00:10:17:63:F8:88:B8:FB
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 019FA26081ADB07D7DF5C4AD5CA61F578F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 09A4
Signing time: Mon 27 Jul 2026 07:01:01 +0000
Manifest this update: Mon 27 Jul 2026 07:01:01 +0000
Manifest next update: Tue 28 Jul 2026 07:01:01 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: aroZKhNIceCcCEywlzcWtSdhm/X84tBwnKEiBVsr60o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:81:ad:b0:7d:7d:f5:c4:ad:5c:a6:1f:57:8f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Jul 27 07:01:01 2026 GMT
Not After : Jul 28 07:01:01 2026 GMT
Subject: CN=0330c5e47c0021ad0c4bcc3600101763f888b8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:9e:de:b4:65:56:f0:c7:0e:de:5a:e4:dd:
ab:ab:92:0c:76:d5:d0:65:92:b3:27:69:8d:69:e8:
04:b7:9f:5b:4c:c5:7a:30:2b:82:c5:ff:b6:54:ec:
ed:46:c4:95:87:f0:3f:95:6c:bb:3e:4a:45:3d:37:
d0:25:48:77:68:6d:7f:0d:d5:85:25:de:0c:b9:08:
fa:8c:48:10:84:80:71:e8:3b:05:f0:9c:82:64:60:
d3:34:ac:fd:36:2e:b6:5f:de:88:73:ea:3f:3a:82:
67:17:89:f5:84:bb:1f:2f:8e:43:bc:23:bc:e4:7d:
17:52:90:88:39:ff:ca:0f:d6:44:ec:60:51:85:69:
8c:a3:89:c3:14:56:07:9e:b9:cc:74:60:46:67:5a:
5b:a2:c3:ec:0e:ac:0e:b6:5d:d2:e0:32:9f:66:a8:
47:06:7b:55:52:c6:e7:42:16:a0:30:f8:c9:c8:aa:
0d:b6:8d:8a:ee:79:f0:00:3a:10:1a:fb:16:81:68:
12:44:97:bd:d8:92:1d:3b:00:e0:f7:d0:89:6f:1a:
4f:6f:dd:4f:74:30:af:4e:34:f5:cb:2e:0d:a7:7e:
99:7a:3b:4d:4a:c1:1a:62:9b:c6:a8:f2:1d:0a:35:
26:cd:87:72:e0:a2:ca:5c:e0:a4:0c:6d:16:c2:2f:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:C5:E4:7C:00:21:AD:0C:4B:CC:36:00:10:17:63:F8:88:B8:FB
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:36:1b:08:0a:be:78:56:95:17:70:b5:e2:a2:a9:51:26:68:
8d:5e:10:c5:ba:ce:c2:e1:78:61:d6:a6:2d:9c:df:99:4f:06:
ff:f2:21:d3:3a:35:18:3a:40:94:4f:84:32:92:42:63:fa:1a:
dc:35:5c:8b:3e:26:4a:ac:51:ea:fc:15:37:f4:cd:fc:6e:31:
e7:5d:af:e5:be:94:a1:a6:c4:45:cc:8d:99:7d:17:ab:ae:60:
b3:eb:63:61:e6:f8:6b:63:19:80:6e:e1:71:c8:1c:75:75:f9:
77:4e:cb:c9:65:04:23:60:20:54:f4:73:22:1b:41:2a:1a:54:
5f:c8:20:1f:ec:dd:4a:19:71:6f:a4:04:16:c2:94:56:6e:92:
9c:31:80:03:de:61:7b:9b:58:a9:11:be:e9:1a:1f:64:86:2b:
23:cb:ee:f5:03:8b:89:3e:e8:21:ec:81:ac:a8:85:a1:91:5b:
a3:93:81:7c:8c:98:b3:79:fb:0e:b6:e6:d5:18:c6:0c:0f:05:
78:a4:8a:2d:f3:80:5a:6f:b1:48:11:73:94:6a:5c:df:63:62:
e5:20:78:9a:b8:7e:df:c6:81:81:25:5f:95:7a:0d:11:3f:7b:
88:28:89:80:b3:04:90:3e:67:dc:73:fa:45:ec:6a:9d:3e:7c:
2c:67:a2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYIGtsH199cStXKYfV48dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2
ODQ5NjEwHhcNMjYwNzI3MDcwMTAxWhcNMjYwNzI4MDcwMTAxWjAzMTEwLwYDVQQD
EygwMzMwYzVlNDdjMDAyMWFkMGM0YmNjMzYwMDEwMTc2M2Y4ODhiOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk+e3rRlVvDHDt5a5N2rq5IMdtXQ
ZZKzJ2mNaegEt59bTMV6MCuCxf+2VOztRsSVh/A/lWy7PkpFPTfQJUh3aG1/DdWF
Jd4MuQj6jEgQhIBx6DsF8JyCZGDTNKz9Ni62X96Ic+o/OoJnF4n1hLsfL45DvCO8
5H0XUpCIOf/KD9ZE7GBRhWmMo4nDFFYHnrnMdGBGZ1pbosPsDqwOtl3S4DKfZqhH
BntVUsbnQhagMPjJyKoNto2K7nnwADoQGvsWgWgSRJe92JIdOwDg99CJbxpPb91P
dDCvTjT1yy4Np36ZejtNSsEaYpvGqPIdCjUmzYdy4KLKXOCkDG0Wwi+aawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMwxeR8ACGtDEvMNgAQF2P4iLj7MB8GA1UdIwQY
MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct
ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl
LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzYbCAq+
eFaVF3C14qKpUSZojV4QxbrOwuF4YdamLZzfmU8G//Ih0zo1GDpAlE+EMpJCY/oa
3DVciz4mSqxR6vwVN/TN/G4x512v5b6UoabERcyNmX0Xq65gs+tjYeb4a2MZgG7h
ccgcdXX5d07LyWUEI2AgVPRzIhtBKhpUX8ggH+zdShlxb6QEFsKUVm6SnDGAA95h
e5tYqRG+6RofZIYrI8vu9QOLiT7oIeyBrKiFoZFbo5OBfIyYs3n7Drbm1RjGDA8F
eKSKLfOAWm+xSBFzlGpc32Ni5SB4mrh+38aBgSVflXoNET97iCiJgLMEkD5n3HP6
RexqnT58LGeifQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:53:07 2026 by rpki-client