Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: UJRZVw/ciT5HzrlYU6c6lScwrL707WquhsrEK8yQdOE=
Subject key identifier: 1A:03:64:A1:84:B4:26:53:DF:FF:68:F0:5D:D6:7F:75:36:B5:B2:F5
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 01A1871A79E4CD62E3E348A4272A84BA24C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 0A9F
Signing time: Thu 29 Oct 2026 10:00:21 +0000
Manifest this update: Thu 29 Oct 2026 10:00:21 +0000
Manifest next update: Fri 30 Oct 2026 10:00:21 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: PsamZOjWw+dcCkbR/iRUC97j3sz8Sx9B+mJ1d7++HIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1a:79:e4:cd:62:e3:e3:48:a4:27:2a:84:ba:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Oct 29 10:00:21 2026 GMT
Not After : Oct 30 10:00:21 2026 GMT
Subject: CN=1a0364a184b42653dfff68f05dd67f7536b5b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:70:02:40:b5:6b:ee:27:cc:30:98:80:64:
5d:ae:73:1e:7c:e4:b1:a2:5e:a8:17:14:dd:20:54:
90:ae:79:c9:4a:e0:37:c2:04:41:77:31:73:29:3d:
c2:64:67:48:14:ac:ff:2b:68:7a:b1:de:be:69:01:
ce:9a:84:e7:43:0f:d2:55:04:17:93:f2:b2:15:8f:
93:89:bc:36:90:02:7d:0a:db:9a:b6:0a:67:38:c0:
10:ae:ff:54:c4:55:7b:b0:d1:18:fb:91:7c:67:be:
c6:86:ae:84:02:ac:ac:56:16:39:89:48:0e:43:a4:
0b:66:88:16:b3:fe:58:b8:27:74:0d:88:13:36:02:
00:fd:9c:c3:4b:38:8d:91:c0:99:9f:e5:51:02:b4:
07:15:17:af:c0:73:33:b6:d9:c3:ea:39:32:0e:45:
9d:16:ea:20:f9:92:ca:65:04:a0:bd:5b:15:fe:a6:
b3:14:5d:bb:34:d1:70:42:31:6d:0c:38:78:a8:6f:
95:34:81:a0:39:fb:09:ce:84:45:0e:85:74:7c:3e:
a7:78:ad:e3:a1:51:e9:25:17:94:f4:c6:be:fe:34:
85:45:80:69:72:a1:c6:ab:43:4e:1d:21:66:94:b8:
a5:39:40:b5:eb:9e:3b:eb:a5:ee:d5:ca:37:3e:17:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:64:A1:84:B4:26:53:DF:FF:68:F0:5D:D6:7F:75:36:B5:B2:F5
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4c:0a:b1:2e:20:76:b4:2e:a2:00:3c:23:ee:44:20:ec:16:
da:5c:82:5f:3e:e1:02:3b:c9:2e:f0:83:1c:ce:a2:23:1f:af:
8c:a7:05:e0:81:fc:1d:79:70:30:35:32:74:70:8f:db:53:59:
90:b7:b0:26:90:0f:e4:a7:3d:c7:ca:8c:f8:c6:1c:96:4f:52:
48:85:57:86:e9:17:d0:6d:95:68:56:21:af:f5:b1:d6:42:73:
43:73:a6:c6:5f:e5:dc:e9:ba:23:e4:0c:ff:63:58:74:a3:19:
fd:bd:a6:ec:2a:fc:53:ac:a5:aa:ac:57:2a:bb:38:e1:47:d1:
98:7a:46:14:d8:b4:d6:43:76:90:d9:bd:06:4b:29:cf:fd:40:
08:12:90:61:b3:f7:69:3b:d1:a9:5e:04:bd:e9:0b:6c:93:3e:
c4:8f:33:ec:4f:47:85:6a:77:42:67:e4:ec:ea:40:fd:99:c9:
dd:b8:a9:69:ea:cd:70:b7:e5:78:72:8e:02:92:01:99:21:46:
db:30:74:97:3a:59:22:7e:02:ae:2a:57:78:fc:3b:82:b0:c4:
e4:60:c2:be:bf:90:3b:42:bf:20:99:57:59:dd:8c:84:8c:5e:
40:48:a5:11:80:a5:c1:e2:ac:74:2a:79:78:a1:4b:08:da:63:
e1:e6:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:54:28 2026 by rpki-client