Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: 285uC3f8iCzYpPndNKxzN0/Y55muInBiVJ8Q+b4E+Q0=
Subject key identifier: 68:99:9F:88:A3:F4:BC:6F:2B:FE:A5:B0:40:AA:6B:97:9A:2F:BA:74
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019FA0DFEDD7FF17908D36899037DF9D889A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 00:00:57 +0000
Manifest this update: Mon 27 Jul 2026 00:00:57 +0000
Manifest next update: Tue 28 Jul 2026 00:00:57 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: FVmhQF7dWpU5Ut+ZfsVhxzGljbM/Mnpo4MjZW7wfUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:ed:d7:ff:17:90:8d:36:89:90:37:df:9d:88:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jul 27 00:00:57 2026 GMT
Not After : Jul 28 00:00:57 2026 GMT
Subject: CN=68999f88a3f4bc6f2bfea5b040aa6b979a2fba74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:2c:86:0d:9f:42:1e:b1:c4:a4:18:f1:2a:
4c:9c:7b:78:3c:b8:23:a4:87:cd:93:60:40:b3:e8:
3a:b7:88:b4:2b:ce:57:0a:16:23:75:22:d4:a4:58:
76:42:4f:f1:8c:e1:e6:82:f8:ae:ad:5f:2b:9c:a7:
f2:2b:a5:d0:6a:d1:3c:19:4b:a5:1a:84:f3:19:79:
9a:d0:5c:e8:ef:be:f1:c9:2d:10:69:93:ef:71:f9:
49:92:52:a5:40:d5:ff:a7:25:74:bc:99:96:03:d4:
60:ab:3e:69:27:18:8c:ec:49:fd:59:10:07:64:82:
e9:15:d1:aa:10:0e:5a:f7:92:21:04:19:b8:d2:c0:
4f:91:86:21:44:e9:a0:4f:27:f3:55:f4:56:e8:27:
f3:bd:8e:9d:c3:5d:c0:92:77:27:2d:49:5a:60:d9:
20:bd:58:33:21:5d:a2:1b:7c:8c:e4:5a:4d:c4:84:
89:61:6a:af:13:25:b8:2b:48:bb:cd:b5:88:ae:07:
66:e4:e2:42:50:91:fb:29:4c:58:74:92:d3:d7:df:
d7:d8:f8:fc:a3:64:02:53:fb:fb:a3:12:2f:37:af:
ed:16:67:e2:b8:ab:72:6a:69:cc:b7:f9:c4:50:0a:
20:01:7c:32:59:d7:b7:56:51:f2:f4:fc:5d:0d:b2:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:9F:88:A3:F4:BC:6F:2B:FE:A5:B0:40:AA:6B:97:9A:2F:BA:74
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:de:9d:8b:bf:87:48:ed:3f:ce:c8:aa:28:13:a9:38:99:72:
99:53:27:01:01:25:b7:38:2c:c6:fb:ac:a6:67:f1:f4:75:c4:
19:53:08:04:df:15:2d:f1:3e:2b:3d:76:e7:63:53:05:62:f2:
84:24:33:84:65:26:4d:ab:a5:7b:0e:53:86:fe:18:06:64:f8:
6a:45:0a:d6:28:1b:9c:55:00:ce:1b:ad:8f:85:4e:bb:26:80:
b4:f1:d6:ac:f8:ff:d5:e6:6f:b1:7f:81:8e:f2:59:38:2a:18:
52:c0:82:6a:e5:f4:ef:95:b6:bf:88:45:fc:d5:7b:84:38:52:
0e:9c:53:9d:f9:73:23:cd:06:27:74:5a:05:a2:45:b9:e5:66:
22:33:60:ac:2e:c8:3c:2e:8e:63:00:9e:d1:e6:d6:ef:b2:a6:
3b:78:4f:6a:47:3e:17:5a:41:20:57:03:67:9f:43:ca:d8:6d:
42:b0:03:9a:5b:15:b4:12:ed:1a:f3:22:dd:cb:9c:a2:ab:9b:
b0:be:54:3a:af:15:8d:80:a9:91:be:e7:bd:ef:4c:0f:81:3a:
ee:97:6e:d5:8f:89:3c:bd:60:17:48:2b:39:68:18:02:2a:87:
db:d6:e7:b0:62:e8:a5:8d:36:a7:58:35:19:f8:2d:b6:f9:28:
18:a8:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:02 2026 by rpki-client