Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: +Mx19ONcUAL+JA5/pHUFBA/irkpUg2ey+K7CbEWB9E8=
Subject key identifier: 79:11:4A:95:F3:5D:6D:96:CB:09:49:4A:7C:39:98:D3:A2:73:A6:F8
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01A08C7AC4C2D125DA682F22C8E5BC87C636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 18:00:51 +0000
Manifest this update: Thu 10 Sep 2026 18:00:51 +0000
Manifest next update: Fri 11 Sep 2026 18:00:51 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: wOZLrfV8tA6TMD4wc7wQTIZJsviPRVD0TkcuqJsgx6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:c4:c2:d1:25:da:68:2f:22:c8:e5:bc:87:c6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Sep 10 18:00:51 2026 GMT
Not After : Sep 11 18:00:51 2026 GMT
Subject: CN=79114a95f35d6d96cb09494a7c3998d3a273a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:e6:c2:74:40:d0:f0:88:04:82:10:c3:47:
e9:1e:24:41:47:d6:cc:dd:45:f0:df:d4:8e:1e:4e:
4f:49:0e:b6:91:fe:ef:c6:46:fb:5d:f9:d4:23:1b:
3d:d7:61:b1:7c:01:9c:9d:9d:cb:ea:02:42:b0:1d:
54:e4:cf:a7:e2:a6:f8:cf:8a:b7:96:ce:c6:e7:a7:
9c:7e:cd:7d:44:97:55:65:2c:a2:01:5e:25:09:c3:
83:5c:74:60:9c:b0:2a:65:87:a7:78:35:eb:19:59:
19:a7:41:1a:a2:2d:ed:ae:e6:58:08:28:b1:a4:ec:
5c:6a:62:fe:b9:ae:80:67:eb:9d:e5:11:ba:3c:64:
e5:48:61:30:ee:3e:1e:6b:31:13:ce:92:53:95:8b:
57:87:d3:f6:f6:7b:cb:2e:7a:90:36:8b:a2:ce:dc:
01:68:11:2e:17:db:e2:80:6d:2a:3a:f4:85:4f:8b:
e4:0e:47:9b:ac:39:14:48:e4:10:3f:d2:27:bf:8d:
c3:87:52:fb:c7:fa:2d:b2:14:ad:86:d8:41:3a:11:
97:24:b8:6a:a3:b1:33:64:f9:49:9b:1d:10:7c:8a:
6f:58:71:6c:3d:ea:a6:9c:12:0e:ab:73:4a:fe:c3:
52:e6:06:92:a2:e8:5d:2f:68:90:fe:04:cf:8a:3f:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:4A:95:F3:5D:6D:96:CB:09:49:4A:7C:39:98:D3:A2:73:A6:F8
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:fc:81:16:cf:ae:42:e4:8c:21:cb:0c:66:05:0b:be:6e:
1d:ba:ba:44:b3:23:94:1f:2c:81:58:42:f5:36:8e:4a:57:32:
c2:ee:18:7d:6e:65:50:be:59:8c:85:b7:b9:a2:40:78:65:14:
8b:87:12:2a:31:a3:6b:b3:63:cd:e1:ab:88:d9:ba:b2:0a:dc:
2d:8e:82:ee:28:5c:a0:45:19:49:fa:35:02:36:5c:82:0a:f1:
c1:42:07:f7:62:2a:12:54:01:c3:63:86:d9:ac:23:c8:60:34:
a9:ce:c9:22:e7:57:5d:a6:02:9f:3a:60:63:75:cd:33:d1:aa:
33:c2:01:fa:48:73:cd:0c:8d:c9:6c:ec:b8:66:ca:df:c4:41:
f3:7a:12:9b:2b:90:15:7a:32:b3:bf:49:70:4d:3d:cf:ec:a3:
fc:17:11:f1:60:d9:e9:31:46:b8:58:c3:08:fd:8e:cf:87:af:
c0:85:fb:25:36:16:62:c2:7f:84:78:5d:ef:34:84:4c:53:50:
57:b4:18:4c:74:3d:37:b2:d0:66:fc:b9:13:93:74:94:5d:ec:
03:29:62:05:e6:8e:75:4a:4e:7b:34:07:20:4f:70:c7:f8:a7:
20:90:42:e2:20:44:d4:fc:f3:87:d3:54:ac:dd:e9:25:83:dc:
5e:e5:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:52:04 2026 by rpki-client