Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: 6Y9ThvZTJ1iGT4NwpOM3CFm5ANAizdqc451cpXp40RA=
Subject key identifier: 70:9A:BA:82:9D:20:58:15:65:0E:89:1F:E0:B3:F2:A5:76:F5:DF:72
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019A7225A92A5C5E223E8A6A8E39B365ED36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: CKdupBGZlhiGdm0hjrdj10Gh2PSiynfpaJteaL3mYUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a9:2a:5c:5e:22:3e:8a:6a:8e:39:b3:65:ed:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=709aba829d205815650e891fe0b3f2a576f5df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:20:be:9b:49:8f:dc:87:58:32:8c:40:f7:
1b:a1:ef:e4:f2:17:36:85:c0:79:db:19:01:95:5c:
00:90:67:b1:b1:0a:57:dd:6f:ef:a7:cd:87:d9:44:
d6:d1:b0:a7:62:af:31:2a:bf:e1:fd:08:6c:d5:75:
77:6a:be:5a:7b:50:f7:b9:ae:61:ac:95:ed:a0:1e:
4f:4f:e8:50:26:f4:65:1c:82:60:39:43:8d:46:37:
8a:10:af:c1:fa:85:a2:e3:6e:69:7f:90:8c:8f:f2:
85:76:ad:d9:cc:9f:1a:56:09:ff:e3:7a:87:e2:16:
03:f7:0d:c0:1d:ea:b9:aa:b4:a8:2f:ea:1f:9c:98:
ca:57:51:52:4c:37:a1:00:71:e3:6d:33:ce:70:25:
12:34:a0:e8:b1:58:07:e7:5b:58:42:c9:00:c6:13:
20:97:25:92:4b:2e:76:5a:6c:7a:7b:b2:e0:89:dc:
bd:ec:57:cd:87:d6:16:31:35:d4:e2:62:d9:b0:5c:
07:2a:a9:92:ac:57:3a:0f:11:8c:50:18:6e:23:78:
54:ed:7a:56:7a:97:1b:bd:d6:a8:7d:8b:5f:93:e7:
b0:52:2b:dc:d6:7b:6b:ed:6f:c7:8b:50:74:e2:63:
17:36:a2:44:05:7a:ba:38:3d:8b:5d:e0:9f:04:dd:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9A:BA:82:9D:20:58:15:65:0E:89:1F:E0:B3:F2:A5:76:F5:DF:72
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:54:97:f2:d0:c8:34:60:4d:a8:28:49:40:28:bc:dc:49:e4:
43:06:f1:be:73:47:2e:16:57:3f:55:1d:81:61:f0:c3:26:bc:
82:a2:bf:ae:a6:7c:ea:9b:1d:83:33:18:bd:40:e2:dc:fd:6f:
4a:c5:0f:b8:06:ae:30:14:f1:d7:54:64:ff:1a:52:0c:c4:f4:
c0:26:54:aa:53:75:af:d6:96:72:d7:88:af:a4:83:46:8d:2e:
ee:85:24:95:5a:bf:4e:0d:e1:18:8e:11:58:5b:7d:8d:f6:06:
ba:15:8a:90:50:a3:f7:9f:db:1a:05:35:c1:d5:c0:ca:fe:7b:
97:ff:cb:75:77:56:19:aa:f8:87:b4:4b:b8:d7:78:e2:ad:73:
c2:d3:4c:99:c0:19:56:fb:69:fb:0c:45:db:c6:0d:fe:e2:63:
d6:7d:f0:5e:e2:74:a6:e6:db:44:19:49:51:d7:91:0c:f3:1d:
6b:03:00:ca:58:28:1e:ba:cb:77:36:74:0b:e3:bc:41:2a:ea:
04:54:7d:39:cc:ce:31:72:27:cf:df:30:d6:bb:a5:bb:02:53:
01:da:11:ce:ef:44:02:51:5d:2c:50:93:0d:20:01:08:df:bf:
d0:cc:61:fc:c9:8a:66:92:95:7d:99:aa:f3:e4:b5:6b:23:fe:
91:60:3f:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJakqXF4iPopqjjmzZe02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy
ZDU5ODYwHhcNMjUxMTExMDkwMTAyWhcNMjUxMTEyMDkwMTAyWjAzMTEwLwYDVQQD
Eyg3MDlhYmE4MjlkMjA1ODE1NjUwZTg5MWZlMGIzZjJhNTc2ZjVkZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH0gvptJj9yHWDKMQPcboe/k8hc2
hcB52xkBlVwAkGexsQpX3W/vp82H2UTW0bCnYq8xKr/h/Qhs1XV3ar5ae1D3ua5h
rJXtoB5PT+hQJvRlHIJgOUONRjeKEK/B+oWi425pf5CMj/KFdq3ZzJ8aVgn/43qH
4hYD9w3AHeq5qrSoL+ofnJjKV1FSTDehAHHjbTPOcCUSNKDosVgH51tYQskAxhMg
lyWSSy52Wmx6e7Lgidy97FfNh9YWMTXU4mLZsFwHKqmSrFc6DxGMUBhuI3hU7XpW
epcbvdaofYtfk+ewUivc1ntr7W/Hi1B04mMXNqJEBXq6OD2LXeCfBN2gMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCauoKdIFgVZQ6JH+Cz8qV29d9yMB8GA1UdIwQY
MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt
NmJjODM5NDY1NmI3LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3
LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFSX8tDI
NGBNqChJQCi83EnkQwbxvnNHLhZXP1UdgWHwwya8gqK/rqZ86psdgzMYvUDi3P1v
SsUPuAauMBTx11Rk/xpSDMT0wCZUqlN1r9aWcteIr6SDRo0u7oUklVq/Tg3hGI4R
WFt9jfYGuhWKkFCj95/bGgU1wdXAyv57l//LdXdWGar4h7RLuNd44q1zwtNMmcAZ
Vvtp+wxF28YN/uJj1n3wXuJ0pubbRBlJUdeRDPMdawMAylgoHrrLdzZ0C+O8QSrq
BFR9OczOMXInz98w1ruluwJTAdoRzu9EAlFdLFCTDSABCN+/0Mxh/MmKZpKVfZmq
8+S1ayP+kWA/zw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:13 2025 by rpki-client