Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: EAZ2XwIbWDe+A+SV6RKgAjGzQbi5jU60MDPzKvjBnYI=
Subject key identifier: 56:D8:63:6A:34:E4:35:BF:B4:19:4F:6D:05:41:C2:56:1D:1C:E1:4D
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 019D37521F12778EFFE82A78B589117E41B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 067F
Signing time: Sun 29 Mar 2026 02:00:21 +0000
Manifest this update: Sun 29 Mar 2026 02:00:21 +0000
Manifest next update: Mon 30 Mar 2026 02:00:21 +0000
Files and hashes: 1: u9YBJLq1t7JkE_DkFNdRSbpZK_c.roa (hash: 5V5Kj6vkFdjgMDloiXkl7ryE2xGCQQ4Ob+s+u5uVqwM=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: /eXdZjFGDvVI8vXxRaAEDlbcP0dy0NgxmM5jn+zKKsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:1f:12:77:8e:ff:e8:2a:78:b5:89:11:7e:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Mar 29 02:00:21 2026 GMT
Not After : Mar 30 02:00:21 2026 GMT
Subject: CN=56d8636a34e435bfb4194f6d0541c2561d1ce14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:d5:f1:ed:e3:73:b2:44:de:6e:78:97:f8:
32:20:de:21:f2:82:1a:cd:f8:0e:e0:85:24:93:ff:
19:88:2c:c4:56:73:48:34:3f:56:ab:43:77:29:9e:
27:58:79:e0:5e:a6:f4:ff:35:e9:c9:55:6e:87:2f:
cd:09:25:28:07:a7:3b:89:62:8d:d2:b2:fe:f5:26:
75:e5:a3:69:06:c2:0e:a3:f6:d8:7a:f2:3f:04:21:
89:fb:15:a5:80:18:ee:40:82:96:53:bf:57:6f:d7:
1f:22:65:62:cb:3f:d2:b5:2d:5b:e5:82:21:1b:4a:
7e:ca:a9:48:6f:6f:79:92:a5:c7:2e:43:66:8d:df:
b6:d0:e6:14:89:35:56:fc:ad:da:5d:5e:f4:6c:56:
2b:48:7e:be:0f:b6:df:f2:36:42:c7:cc:c1:41:fc:
18:e4:bd:ab:f0:5f:01:f4:f1:af:59:dd:2b:7b:46:
f3:74:81:49:9c:1b:6b:93:a1:03:28:99:ae:0a:45:
3b:7a:cf:64:88:89:7a:4f:c6:13:ac:c5:f0:43:dd:
de:5a:ef:93:51:87:7e:10:03:f6:9d:d4:c2:e8:7c:
8c:a7:96:61:5b:c8:0c:06:32:79:27:ca:7d:51:5a:
2e:6c:e6:34:ec:cc:09:d6:1a:5e:85:15:2a:74:10:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:63:6A:34:E4:35:BF:B4:19:4F:6D:05:41:C2:56:1D:1C:E1:4D
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:72:54:b3:b7:af:a8:25:89:7d:43:31:b6:86:80:94:a3:5c:
b8:54:7d:56:2e:3e:2d:48:5c:d8:f5:42:a4:0a:f2:37:a0:ad:
9c:38:9f:bf:1b:3e:4a:2f:21:18:81:c6:90:f5:96:0b:31:06:
45:89:27:e0:21:6f:03:4d:02:f4:3b:f2:01:60:48:bd:13:99:
45:ae:cd:d0:3b:7e:3a:2b:5e:15:97:36:28:b7:36:3f:b8:99:
b7:67:0a:51:5c:22:5a:a4:11:b8:92:19:c2:20:f5:3b:37:2e:
69:8e:98:43:f9:a5:b7:44:04:80:4e:87:4e:da:7c:22:f0:15:
ac:45:a3:1d:58:f0:b3:7b:6f:f0:c3:c5:d2:a4:b4:24:f8:06:
a9:ac:f7:6c:b6:01:db:0b:73:2f:49:ca:5a:cb:f6:a7:ea:f0:
8b:e5:e1:c8:d2:1e:c8:20:44:9e:80:ba:21:03:8f:6f:66:68:
02:51:b7:58:89:9e:51:11:17:f9:9e:b2:24:13:4c:11:49:5f:
e6:e0:48:37:06:38:4d:0d:29:b6:10:03:01:e6:8c:40:2c:ff:
7c:a3:5f:fc:2a:fd:a5:39:40:46:db:31:44:b9:e9:76:1b:76:
63:cf:bc:4f:44:a6:28:27:80:0f:5a:31:0d:c0:eb:18:94:4a:
a1:d5:9b:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uh8Sd47/6Cp4tYkRfkG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi
ZWQxNjYwHhcNMjYwMzI5MDIwMDIxWhcNMjYwMzMwMDIwMDIxWjAzMTEwLwYDVQQD
Eyg1NmQ4NjM2YTM0ZTQzNWJmYjQxOTRmNmQwNTQxYzI1NjFkMWNlMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLrV8e3jc7JE3m54l/gyIN4h8oIa
zfgO4IUkk/8ZiCzEVnNIND9Wq0N3KZ4nWHngXqb0/zXpyVVuhy/NCSUoB6c7iWKN
0rL+9SZ15aNpBsIOo/bYevI/BCGJ+xWlgBjuQIKWU79Xb9cfImViyz/StS1b5YIh
G0p+yqlIb295kqXHLkNmjd+20OYUiTVW/K3aXV70bFYrSH6+D7bf8jZCx8zBQfwY
5L2r8F8B9PGvWd0re0bzdIFJnBtrk6EDKJmuCkU7es9kiIl6T8YTrMXwQ93eWu+T
UYd+EAP2ndTC6HyMp5ZhW8gMBjJ5J8p9UVoubOY07MwJ1hpehRUqdBDv1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbYY2o05DW/tBlPbQVBwlYdHOFNMB8GA1UdIwQY
MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt
N2I5OTE4MjRiZDgzLzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz
LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3JUs7ev
qCWJfUMxtoaAlKNcuFR9Vi4+LUhc2PVCpAryN6CtnDifvxs+Si8hGIHGkPWWCzEG
RYkn4CFvA00C9DvyAWBIvROZRa7N0Dt+OiteFZc2KLc2P7iZt2cKUVwiWqQRuJIZ
wiD1OzcuaY6YQ/mlt0QEgE6HTtp8IvAVrEWjHVjws3tv8MPF0qS0JPgGqaz3bLYB
2wtzL0nKWsv2p+rwi+XhyNIeyCBEnoC6IQOPb2ZoAlG3WImeUREX+Z6yJBNMEUlf
5uBINwY4TQ0pthADAeaMQCz/fKNf/Cr9pTlARtsxRLnpdht2Y8+8T0SmKCeAD1ox
DcDrGJRKodWbxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:35 2026 by rpki-client