Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: h2kwo19IyIiZlsjVLio5koMjWf2DNHkaomlbcdaL3ag=
Subject key identifier: 71:A1:14:D5:5C:76:6A:6B:78:A4:6E:62:4D:C2:22:3A:7D:0B:DC:E8
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01A19CC734A8160AA4B1A58C88C16874D15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1ADA
Signing time: Mon 02 Nov 2026 15:01:03 +0000
Manifest this update: Mon 02 Nov 2026 15:01:03 +0000
Manifest next update: Tue 03 Nov 2026 15:01:03 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: ZdFuzSSVqyfq7DDtFa5810GkV/ACW0aHjCibqV0dP2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:c7:34:a8:16:0a:a4:b1:a5:8c:88:c1:68:74:d1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Nov 2 15:01:03 2026 GMT
Not After : Nov 3 15:01:03 2026 GMT
Subject: CN=71a114d55c766a6b78a46e624dc2223a7d0bdce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:21:b2:18:57:3c:32:33:eb:be:98:51:a5:f6:
06:bc:95:1d:49:f2:e7:86:59:87:f3:f3:13:11:23:
fd:bc:86:c0:a9:d0:1d:a4:3d:d0:f8:ae:c3:7d:69:
c8:6d:df:d3:4e:3d:7d:6a:77:c4:b9:01:49:0d:d0:
ac:ea:0e:cd:2a:f1:ec:40:80:fd:94:75:0e:ae:b8:
24:bc:3b:19:68:c6:19:65:b7:de:cf:bf:81:ee:95:
be:ca:09:0e:d6:94:ea:fe:34:f8:68:0a:97:e4:36:
f3:74:03:3e:22:b7:1a:f6:ce:65:c9:1e:a3:02:8e:
85:f0:c6:aa:eb:75:52:87:18:38:12:1b:c2:21:7f:
88:e2:f3:e2:8e:4b:5c:31:a9:ea:84:f5:0f:94:a8:
a8:b5:68:2c:a2:44:f4:2e:e3:9c:5f:8a:0f:b2:3e:
e3:27:46:a8:08:1d:37:ea:43:74:49:eb:bc:8c:d9:
a7:17:21:2c:5b:d2:a4:ff:a0:eb:38:6d:00:df:b0:
da:88:38:3c:2f:b8:6c:f1:1b:5e:fd:8f:33:34:50:
f5:0e:c7:14:30:59:38:9c:cc:5a:79:6f:38:ca:08:
e3:15:cf:66:5e:65:aa:43:f9:c7:c6:3f:dc:03:2c:
b3:de:4d:f7:87:97:23:00:bf:ca:9c:bd:ae:c3:9a:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A1:14:D5:5C:76:6A:6B:78:A4:6E:62:4D:C2:22:3A:7D:0B:DC:E8
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4e:fd:f0:81:66:5d:3e:21:d3:f5:d5:11:72:1b:9b:bc:01:
ac:94:3b:85:93:4b:32:79:ad:dd:87:d5:e3:0c:f6:67:40:f1:
16:13:df:82:04:db:c8:1e:fc:e5:99:6a:e7:dd:a3:24:85:83:
64:7c:ed:ad:58:46:07:02:6c:87:b2:51:8a:20:a2:bc:2c:99:
21:55:ef:20:24:c0:07:fb:cc:46:6c:7d:30:9a:7d:f2:97:17:
01:c6:70:e0:59:31:61:5c:06:53:7a:6f:69:7e:70:5d:6a:95:
e1:45:7c:dc:a5:8e:97:33:8d:b2:2e:66:be:04:79:e3:8a:a8:
3a:0f:64:d7:c8:0a:bc:f1:c0:ac:d5:3c:19:67:d5:10:e4:bc:
17:be:a7:5d:f4:44:73:6b:c4:c7:76:e9:52:7f:13:7a:6a:1b:
ae:f4:f5:72:30:16:fe:73:e3:ac:83:23:43:bf:f0:35:ed:53:
cd:68:63:5a:df:bb:99:67:12:fa:f8:2c:2c:42:a1:40:b9:c0:
71:cb:a9:1c:f7:ea:69:d7:5c:61:04:ec:44:7e:d9:92:ba:aa:
0d:6a:38:f7:d8:28:ca:f3:c7:69:ec:07:24:d1:3a:8d:bd:88:
90:2d:4a:8c:4a:ec:71:71:9f:29:a5:9a:fc:c7:7a:d0:d7:4f:
84:db:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:57:18 2026 by rpki-client