Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: Yd6efxLOBuzOFrb8InwiYHwZCwc0pjr6BjBJ4Uo/Z88=
Subject key identifier: B6:B2:69:ED:FC:8C:57:6A:47:2D:3D:4C:43:40:CC:4C:8B:95:81:AC
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01A19131993A5EE71F4807C827EDAED5C26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1AD4
Signing time: Sat 31 Oct 2026 09:01:49 +0000
Manifest this update: Sat 31 Oct 2026 09:01:49 +0000
Manifest next update: Sun 01 Nov 2026 09:01:49 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: L1jmkofYoh3NHEVEow7f33+ALECMazOvKzDuS9Oe5yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:31:99:3a:5e:e7:1f:48:07:c8:27:ed:ae:d5:c2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Oct 31 09:01:49 2026 GMT
Not After : Nov 1 09:01:49 2026 GMT
Subject: CN=b6b269edfc8c576a472d3d4c4340cc4c8b9581ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:36:b8:59:18:47:a0:c5:9c:dd:78:6d:64:
d8:4b:f4:96:db:5e:c6:3f:d5:d1:e0:7b:89:95:3c:
2c:2a:1f:79:24:69:70:1b:e6:d8:16:e6:de:51:2a:
02:39:0b:2b:2e:5d:b7:3b:5b:fe:70:78:34:6d:cf:
23:2f:4e:14:05:90:9b:ea:56:6b:6c:d9:ef:c2:9f:
ad:eb:46:c3:21:01:9c:29:73:8d:dd:ae:c1:06:e1:
84:f0:4b:99:95:66:a6:b7:e7:0b:8e:3d:d3:1d:b6:
0a:a5:b0:1c:65:d7:73:e8:d4:d5:00:12:96:bc:ab:
ad:72:f8:f8:ba:8b:46:bb:bb:e2:b7:62:cf:fe:82:
49:0d:7a:f3:4e:32:cd:cc:3e:78:cf:f6:55:25:dd:
6c:1c:7d:4d:83:2c:da:d6:49:99:05:6a:f1:ca:05:
8c:91:02:23:f6:b6:88:0b:8a:0d:f3:eb:ae:3d:e3:
62:33:8d:2b:b4:ac:32:e3:9a:a4:35:bd:ba:92:1d:
b1:01:cb:3b:0f:38:93:33:eb:f8:d2:e1:65:88:1a:
76:2f:45:d9:8f:a0:5d:22:e0:58:23:56:e7:e4:8f:
d0:55:ed:7f:e7:8b:fe:7a:ee:ee:7e:db:17:51:20:
b7:75:28:d5:f7:3f:6f:bf:16:06:da:43:43:4f:16:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:69:ED:FC:8C:57:6A:47:2D:3D:4C:43:40:CC:4C:8B:95:81:AC
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:49:7f:24:26:cd:13:bf:d8:49:23:91:12:80:59:69:e8:2e:
11:b5:a4:07:67:49:90:7d:b9:4b:66:be:a8:05:33:64:ff:83:
11:e7:01:7f:09:cd:59:50:82:4e:c5:57:21:a4:d6:5b:b7:0f:
56:85:a3:ee:8b:a1:b7:ef:66:e5:16:09:66:4b:24:fa:81:da:
75:1b:85:4a:72:a7:f3:52:a7:09:00:d7:3d:93:b0:27:91:15:
dc:e8:9a:24:89:c2:d8:76:a2:4f:c6:ff:aa:e6:89:65:77:ec:
d6:06:bb:44:f3:df:e2:c8:e4:e6:98:ef:26:ee:4b:f6:3b:ee:
8c:82:5e:ab:a3:7d:eb:5f:e1:33:20:ff:92:7a:df:4d:41:28:
cb:60:26:a5:b8:65:55:3f:88:a3:e5:d5:f9:ef:c0:3a:84:d6:
68:44:d5:7f:6f:b9:64:30:86:15:e8:b6:32:20:f4:61:ec:04:
e7:bc:83:a0:99:53:1b:34:8c:55:92:2e:7d:9b:04:e3:25:34:
72:ba:53:40:28:8d:f9:7e:67:95:d3:4e:8c:60:4b:53:45:10:
17:34:15:be:fd:f4:e8:6c:be:0d:fd:ba:8e:9b:14:02:a7:27:
40:78:70:f6:8d:5e:93:4a:5e:26:21:df:6e:4c:ee:a8:fe:86:
56:46:08:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:48:59 2026 by rpki-client