Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: l4r9/0187MxQu8ws1QJFfS2JLx+ayhPweMK7KeM3Euk=
Subject key identifier: 17:EA:27:0A:72:D1:CD:B9:9B:9E:2F:81:39:14:48:53:96:38:6C:95
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019D3AC148C41F13B0BDBFE1F20B64D1C792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 18:00:38 +0000
Manifest this update: Sun 29 Mar 2026 18:00:38 +0000
Manifest next update: Mon 30 Mar 2026 18:00:38 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: m4s69snoC5zlpZ1lg7+Oq+WfkjKilI+16CDOoX2+C1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:48:c4:1f:13:b0:bd:bf:e1:f2:0b:64:d1:c7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Mar 29 18:00:38 2026 GMT
Not After : Mar 30 18:00:38 2026 GMT
Subject: CN=17ea270a72d1cdb99b9e2f813914485396386c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:cf:4b:d4:31:1b:f9:87:c3:7f:59:68:60:
c1:a8:55:b9:9b:2f:fa:33:9c:d6:d9:dd:50:49:b2:
58:8d:ff:68:d2:6f:d7:25:ef:26:18:a4:6d:40:4b:
b8:e2:c2:aa:0e:87:50:cb:96:58:c0:cd:68:94:21:
fc:90:4f:f2:c7:24:b1:a3:db:3a:54:64:0b:00:83:
1b:c6:80:b9:e6:db:72:0b:ce:2b:18:41:b1:01:c1:
4a:85:a7:54:a2:a9:db:fd:a8:6b:6b:ad:0a:72:77:
73:1f:c2:7d:b8:46:8a:e3:8f:0e:5e:b9:ad:1d:04:
5c:63:13:8e:93:9d:90:e9:04:34:36:e7:02:02:35:
fa:70:d5:05:2f:ac:98:98:3b:f6:ba:19:45:cf:98:
d4:47:e0:01:0f:87:43:e2:95:e0:49:06:3c:fd:53:
9d:18:2d:1c:35:0e:af:93:c1:10:21:a1:6d:a1:6c:
0c:aa:22:35:6b:16:50:7c:f2:36:00:94:a7:f7:df:
69:ce:e0:dd:0b:f7:8b:79:83:93:67:3f:50:62:17:
0e:9b:ec:3c:27:50:7b:e3:96:ca:1b:f0:26:53:2e:
b3:5b:c6:60:da:64:a3:c9:40:91:c1:0d:c4:f7:07:
7b:92:5d:2f:cc:c4:3e:9e:43:bb:91:30:97:e4:3f:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:27:0A:72:D1:CD:B9:9B:9E:2F:81:39:14:48:53:96:38:6C:95
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f4:49:0f:c7:1a:8c:e3:57:40:03:26:02:d7:3a:7d:b4:8a:
12:46:ce:63:69:d6:d1:49:81:ba:fc:53:8e:f4:6a:ed:72:31:
4a:b4:e8:06:60:d1:ed:9a:ce:de:4c:bd:37:d1:bf:bb:3d:c7:
dc:f3:ca:76:25:26:b3:9b:d5:a9:8e:98:8d:39:9d:ee:3c:d4:
9b:db:09:a7:f9:36:f5:62:99:7a:b5:a1:1a:a0:77:89:be:34:
a4:09:81:f9:09:37:5f:00:7c:6a:76:8f:e4:7e:e6:b9:ac:24:
02:b7:df:16:ea:93:33:5f:4f:8f:aa:79:99:26:2b:bc:6b:f3:
2a:84:f0:1c:c1:e8:51:ba:24:60:e7:d7:92:5c:f7:85:c0:4a:
7b:cb:e2:39:3f:43:68:01:46:f0:2a:a6:b5:44:62:06:e8:91:
43:fb:16:d7:c4:91:c2:d9:0e:5b:5f:8c:2d:ef:15:48:7c:27:
81:41:70:a7:ad:7c:32:bb:fd:64:1d:13:04:58:07:0a:fc:85:
44:0a:8d:b5:3a:40:fb:1e:51:a3:bf:b0:2f:9f:6e:d7:0e:1b:
31:34:4a:13:d4:ce:4e:81:3d:6e:65:56:ad:72:01:cc:ee:e1:
e4:13:e6:44:12:c6:69:2f:ac:23:ac:22:6c:20:16:b0:b4:0a:
eb:a3:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:42:10 2026 by rpki-client