Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: IRBMF9VqAFp31W7YSXft9l1lqHZEoY+Yw9dVO4pWAOc=
Subject key identifier: 93:6C:2D:78:FC:07:BE:28:35:72:C5:D1:60:9C:3D:3B:E6:84:F5:94
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 019D39AF7F7660528F8702B3516EE7993CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 11F8
Signing time: Sun 29 Mar 2026 13:01:35 +0000
Manifest this update: Sun 29 Mar 2026 13:01:35 +0000
Manifest next update: Mon 30 Mar 2026 13:01:35 +0000
Files and hashes: 1: UAWfVKnuk8IYKAompixGCt2JD4o.roa (hash: 1/V3Gy+/S90DB5jCTWmbg0P9LSy46xSNLw3S2ZpV9dA=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: BU1yXiHrXjc3gamDTR2KRs/f0aAxjw3h2o7muMSjIgs=)
3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:7f:76:60:52:8f:87:02:b3:51:6e:e7:99:3c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Mar 29 13:01:35 2026 GMT
Not After : Mar 30 13:01:35 2026 GMT
Subject: CN=936c2d78fc07be283572c5d1609c3d3be684f594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:fe:64:0c:c4:d7:b6:45:91:88:2c:09:6e:
c9:99:ba:03:38:1b:08:41:51:22:a1:24:53:17:0e:
ee:41:c5:cb:bd:00:fb:b7:a6:8e:b0:e9:87:dd:a9:
8b:4b:f4:62:32:a9:7a:45:62:8a:3a:be:86:6c:a8:
d7:91:a7:eb:d9:6a:ad:51:2f:db:a9:86:ae:44:20:
1f:95:77:30:09:b5:de:38:ad:04:1a:de:8e:62:7e:
29:1c:55:27:51:a0:33:c9:76:f2:4f:f0:36:b9:70:
bb:06:ce:1e:6f:fe:dc:c7:04:e6:f0:8c:b8:86:57:
da:a9:36:1f:e3:e1:38:48:55:c5:0f:a1:3f:d8:0c:
a7:ea:bc:df:50:cd:b9:5a:1c:1c:9b:9c:83:79:0a:
68:0f:85:56:d3:da:e2:7a:ef:7a:22:83:9b:10:62:
43:0a:2c:3f:e3:e9:1e:2e:4f:b6:86:46:d6:f4:06:
30:da:0a:0d:db:aa:98:1d:07:76:69:6d:1a:1d:c3:
e6:9d:4d:77:a1:e6:c9:87:d5:4f:94:44:ad:21:1d:
09:e2:ae:d1:d8:21:42:7e:6a:15:1a:09:db:4e:bc:
96:ae:ed:db:13:3d:a2:dd:98:67:e0:14:45:5f:e1:
d0:b4:3b:64:9d:39:57:99:e2:3b:80:ca:5d:34:9f:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:2D:78:FC:07:BE:28:35:72:C5:D1:60:9C:3D:3B:E6:84:F5:94
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:83:78:33:64:18:f0:88:a2:e2:5c:a5:37:46:4e:d6:0e:
cb:27:31:f0:e7:86:b3:d4:ba:e1:17:5e:76:20:69:07:a2:bb:
ce:4f:13:86:06:a3:a9:98:28:ac:14:50:6e:6f:b5:ff:c1:a9:
7c:48:80:96:3f:0e:b6:d0:3a:98:ba:45:cd:be:4a:95:30:ad:
9a:06:16:a2:2d:74:a0:a0:d3:41:e5:e6:b2:a8:86:cf:77:11:
44:e4:91:ed:b8:ea:7c:8a:bb:41:2b:d6:ab:5c:67:79:0a:62:
ad:f8:02:96:e9:97:1f:17:eb:c9:73:b5:d1:06:c7:7f:9a:ac:
48:88:17:f4:67:a5:bc:01:aa:14:8c:82:17:d3:fb:6d:5b:ae:
fa:7f:8a:92:a5:c2:cf:da:1f:20:14:4e:ac:13:2c:88:b7:eb:
5b:79:53:c2:52:25:f2:6b:85:5c:bd:95:43:38:c6:64:d9:3e:
c7:58:4e:be:50:fa:37:01:8b:4e:47:6e:ae:01:b4:04:44:82:
c6:33:fb:89:33:4b:5d:c9:d5:ff:2a:e2:25:7a:cb:54:76:f3:
cb:b1:ed:98:a4:9c:9d:9d:55:d3:ff:49:15:5d:5f:c8:be:24:
42:a3:39:b4:76:54:52:cb:cc:96:e8:2e:d0:f5:5b:35:0a:2d:
c9:2b:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:23 2026 by rpki-client