Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
File: zy_MDEv1TV6ct_obsf4anZRhA5A.mft (raw, json)
Hash identifier: BAXZ4qqXOOseTu2H05TwWxbm96IGkzzLCtnc8PGJufU=
Subject key identifier: BE:78:0F:12:CA:BD:2E:32:7F:21:FF:22:2A:A4:81:B4:67:99:F1:50
Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Certificate serial: 019D38D2FC86433DFD3461649516E4CAA4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
Manifest number: 0118
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: TFVe-dXGuNawzmnfdegYq6flUl8.roa (hash: vQbZ+TX1ZBjYH0NW4eiYLXLkpBqwSOxwA5OLO5L2sYg=)
2: zy_MDEv1TV6ct_obsf4anZRhA5A.crl (hash: +MZ0ygtPy33qmL6702oI8nwaT/smQ+JCUhl5d2NPSQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fc:86:43:3d:fd:34:61:64:95:16:e4:ca:a4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=be780f12cabd2e327f21ff222aa481b46799f150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:e0:c8:ef:e7:46:fd:36:8e:57:46:b4:63:
36:81:47:91:8d:4f:71:30:8b:86:e2:86:48:37:19:
20:1d:04:27:d4:a3:0c:8e:b0:17:ba:86:55:88:97:
47:93:b3:fe:87:ee:0a:b1:28:cb:c4:b9:38:c0:dd:
8e:11:4c:41:fe:3a:ee:8a:ee:8e:c9:a8:02:34:f4:
42:68:2d:8b:b8:d1:5f:28:55:9a:7b:1d:26:4c:be:
42:bd:f0:70:5b:fb:14:5b:02:da:ca:15:32:f4:ea:
76:db:29:63:d4:85:8c:3f:34:ff:5d:75:a2:7b:40:
67:61:f5:5e:d7:6e:5b:34:85:53:c6:27:3c:e5:c9:
b3:5c:73:75:34:ef:76:ae:a9:b5:d4:bd:e7:13:08:
83:05:5f:f5:5d:09:34:13:4e:1a:72:cf:02:7f:ec:
89:48:1e:0f:94:21:1f:03:4f:77:40:83:da:6f:f3:
ea:8d:73:8d:8d:b7:8e:10:df:83:c9:cb:fc:a4:ef:
b9:e0:f2:d9:68:2c:16:bf:e9:4c:e9:97:5b:a7:51:
3e:0e:f9:ba:af:d5:00:05:a5:26:be:d9:55:af:1b:
e2:9f:35:29:9f:6a:e7:45:32:80:6e:99:56:3c:ab:
7e:c7:33:be:1a:de:43:3c:32:6f:4d:8e:85:b1:f2:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:0F:12:CA:BD:2E:32:7F:21:FF:22:2A:A4:81:B4:67:99:F1:50
X509v3 Authority Key Identifier:
keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:51:b7:1f:a6:c7:5d:45:c3:12:fb:b2:83:a4:19:73:a5:89:
93:47:c6:85:f3:12:4b:9c:95:76:ff:da:c2:c9:a3:e4:99:a8:
89:f9:34:1e:6f:9b:e4:20:54:dd:25:fd:97:92:a4:0c:f0:cd:
f8:4f:cf:e8:b6:c5:90:71:b7:fc:66:47:01:67:a6:70:c0:0c:
a1:b1:15:de:08:61:58:0f:8c:5c:a3:21:7f:88:27:30:b7:4b:
18:d9:db:66:99:61:fe:b9:ad:8b:24:7d:d1:88:bf:f8:f3:8d:
13:96:65:09:ea:c3:3c:8b:8d:96:75:cf:c7:80:62:3f:7f:0a:
dd:33:51:70:f7:41:7b:64:7a:c5:c5:42:92:3f:07:40:15:7d:
e9:c7:4e:3f:93:65:56:6d:29:bc:90:e7:f8:77:fb:0d:68:5d:
99:8c:24:68:b1:cc:14:73:b4:40:7d:55:66:f3:db:2b:e3:1e:
87:1f:51:5d:d6:57:6c:28:e3:b3:5a:4d:1e:4d:87:61:cb:c4:
8a:0e:db:ea:25:19:fc:37:5d:f1:ed:fd:f0:e0:fe:c1:88:ac:
00:f4:06:69:81:1e:88:df:13:2c:03:45:a8:ef:bb:ae:bc:6b:
26:27:3d:8e:2d:d1:95:4b:39:4d:0a:7e:a3:cc:2f:52:ab:c6:
73:66:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:36 2026 by rpki-client