Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: tDh2hVSF1kBetJUEKCwalXUF5Xn+BloGWG5HKnTsGhw=
Subject key identifier: 73:F1:00:AA:59:C4:B4:43:B3:A5:EF:70:4E:9D:15:87:B0:F0:8F:A8
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 01A08C0D37C405FA6D49AA9C7F22834DD969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 0A1D
Signing time: Thu 10 Sep 2026 16:01:11 +0000
Manifest this update: Thu 10 Sep 2026 16:01:11 +0000
Manifest next update: Fri 11 Sep 2026 16:01:11 +0000
Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: QknZpJPzsh61laCOmYif1l8kd30f/d/oL66EwVZ2EIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:37:c4:05:fa:6d:49:aa:9c:7f:22:83:4d:d9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Sep 10 16:01:11 2026 GMT
Not After : Sep 11 16:01:11 2026 GMT
Subject: CN=73f100aa59c4b443b3a5ef704e9d1587b0f08fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:43:43:80:7a:71:1a:16:fa:9f:95:fa:1c:
37:22:96:48:7e:3c:3d:ee:c9:d1:48:3f:3f:24:96:
34:a7:7a:18:e0:92:e0:9d:a2:ec:70:70:bf:5e:aa:
f6:4b:98:68:a3:47:7f:c8:37:9e:bd:91:8c:9a:91:
68:96:58:05:7e:5d:04:d3:07:b8:6b:69:bd:58:19:
61:7f:02:c5:a6:bf:31:1b:f0:c2:cc:3b:3b:71:40:
9a:d1:e1:e5:75:97:a0:eb:42:e3:79:dc:63:7d:5b:
9b:63:f5:c1:b8:79:18:b5:fb:59:04:0a:ae:c9:3c:
0f:fb:40:4f:18:45:d0:9e:10:f1:0f:d2:29:09:83:
df:aa:0f:4f:f6:04:70:8a:66:e8:26:13:10:79:93:
64:44:81:df:14:e6:cd:61:6f:1c:80:02:81:04:de:
c3:bf:fe:a1:06:e1:ec:2a:da:94:4b:64:6e:c8:5d:
6b:78:4c:dd:93:27:c1:15:f7:35:8d:a3:38:f3:48:
e5:f5:51:a1:72:f0:b2:17:ca:1a:f1:96:47:72:90:
7e:51:05:54:e9:89:29:48:c5:e5:90:aa:56:1c:b3:
09:33:36:03:23:2a:6b:12:14:15:f8:fb:cd:0f:fa:
70:5f:1f:2d:e0:f4:35:59:8e:8d:8e:3d:0c:29:5a:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:00:AA:59:C4:B4:43:B3:A5:EF:70:4E:9D:15:87:B0:F0:8F:A8
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:8e:eb:b4:72:f2:78:82:e3:7a:19:c9:c4:44:af:0a:e5:
41:78:4b:02:e8:87:76:4d:8d:a6:de:fc:87:81:f8:fd:34:0a:
73:9c:d7:51:1c:47:81:cd:25:6d:f0:97:2f:78:91:08:5e:e7:
b8:4f:b0:6d:67:57:05:43:a3:33:e0:69:7b:65:b8:e1:fd:7b:
71:46:52:da:f2:48:98:06:db:a1:d4:2d:11:72:53:ef:c2:3d:
f7:a6:a2:65:7c:40:54:96:fc:37:82:93:ae:87:8d:3e:4f:11:
7c:47:78:03:5d:d2:7a:ef:69:9d:15:e5:a8:d6:3c:c7:6a:16:
c2:a8:53:e5:eb:e2:0a:95:90:d4:15:0c:43:c0:46:7d:61:d4:
b1:2e:0f:d2:aa:76:75:a3:93:dd:92:ed:4b:59:19:88:08:bd:
38:7a:97:11:d0:6f:c7:34:04:01:6a:f4:23:b1:7f:b3:17:69:
2f:2f:6e:ae:76:37:6d:8b:57:32:c7:50:61:20:a8:14:90:69:
21:a3:46:6c:99:ad:07:03:4f:de:41:8b:db:b3:1e:cc:b0:a6:
9d:05:3e:db:1e:11:c3:46:c0:dd:24:f1:88:68:07:29:5f:16:
6e:72:52:04:59:b3:50:d5:c3:71:61:94:9e:10:3e:91:a2:a5:
bf:e8:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:37:56 2026 by rpki-client