Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
File: zy_MDEv1TV6ct_obsf4anZRhA5A.mft (raw, json)
Hash identifier: mKyPY0gupWQM4AextkEr0yOQrAxDHstkVD7QBaJQ/g4=
Subject key identifier: 41:33:24:58:74:AF:AC:DD:BC:23:44:F6:16:A8:A5:74:19:84:C1:FE
Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Certificate serial: 019D29611DB0DAEAB540D3FB0EAB37AB747F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
Manifest number: 0110
Signing time: Thu 26 Mar 2026 09:02:03 +0000
Manifest this update: Thu 26 Mar 2026 09:02:03 +0000
Manifest next update: Fri 27 Mar 2026 09:02:03 +0000
Files and hashes: 1: TFVe-dXGuNawzmnfdegYq6flUl8.roa (hash: vQbZ+TX1ZBjYH0NW4eiYLXLkpBqwSOxwA5OLO5L2sYg=)
2: zy_MDEv1TV6ct_obsf4anZRhA5A.crl (hash: 8R/BkGZAJnBW3lTwGZa8Ll95KnwU7wG8iHZZu9YLqsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:1d:b0:da:ea:b5:40:d3:fb:0e:ab:37:ab:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Validity
Not Before: Mar 26 09:02:03 2026 GMT
Not After : Mar 27 09:02:03 2026 GMT
Subject: CN=4133245874afacddbc2344f616a8a5741984c1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:bd:0c:00:16:8b:d2:d3:6e:3d:26:8d:b1:
96:d3:ce:e0:eb:b9:bb:15:2f:5a:f6:be:bb:d7:15:
23:67:e8:12:21:2e:3f:9f:63:4d:61:17:02:7a:52:
bb:9c:2a:be:8a:58:e1:9b:1a:e0:e1:22:49:e6:e2:
c2:9d:44:74:f4:ee:bf:45:dd:0a:a4:b6:c5:b6:5d:
32:3e:30:9c:1a:61:24:72:6f:bd:87:05:0c:e9:58:
8e:81:40:2f:15:c8:b0:56:d6:05:76:0a:2d:bd:d7:
8b:90:f0:a3:62:41:9f:32:da:6b:28:16:e6:f0:86:
48:9b:c0:9b:07:16:90:31:ee:79:89:c0:37:0b:a6:
67:73:02:dc:d9:64:6a:4f:51:f1:b3:d2:db:44:fb:
88:66:9f:39:0c:1d:3c:07:7b:f2:e2:22:cd:79:b0:
53:f3:3b:7e:49:38:c4:48:01:85:33:52:49:d5:a5:
67:bd:ab:ec:75:c6:de:ed:1c:8f:ae:3a:24:5f:2d:
57:75:fd:63:20:66:b6:86:28:57:c2:53:47:e5:0f:
ba:38:83:0c:d9:9b:36:1d:a0:3e:b8:1e:34:f7:c7:
94:ee:b9:59:06:26:01:c7:ee:6a:75:c0:ab:07:17:
6f:2f:71:87:38:10:10:1b:13:bb:ef:b9:68:e2:31:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:33:24:58:74:AF:AC:DD:BC:23:44:F6:16:A8:A5:74:19:84:C1:FE
X509v3 Authority Key Identifier:
keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:6a:6f:43:54:72:6b:40:29:64:43:c1:34:fd:df:a8:bf:
c6:45:b9:95:81:08:bc:c7:3c:f8:58:fd:71:17:51:d8:8f:c0:
47:00:eb:7c:d6:00:64:c4:af:ef:5f:94:b2:ec:51:9f:13:32:
34:e8:91:0f:0e:55:22:75:53:a3:ef:9b:16:6f:91:c7:6e:91:
d7:b7:fc:38:ed:d3:e0:aa:97:d5:a2:53:7c:86:61:76:52:a5:
39:98:8b:31:c2:0b:4e:68:82:c5:7c:70:39:16:ac:2b:34:a3:
ee:34:f1:c8:2d:07:a5:78:5d:11:c5:7e:20:6c:0f:99:49:9b:
b2:79:fc:d8:48:53:b1:19:43:61:79:95:39:bd:de:e7:20:b6:
26:98:27:5f:27:0f:f4:e2:78:65:a0:6f:d6:a7:09:14:0d:e8:
68:5d:ec:b5:20:17:f2:49:d4:15:bf:48:3e:c2:da:c3:1c:3e:
ae:65:60:14:2b:6f:2e:1e:a2:ba:a3:b0:e9:7c:e4:89:f7:75:
de:16:2f:cb:a9:ef:03:c0:8e:2b:b8:0c:68:fc:06:df:56:c1:
40:64:f7:65:ad:e7:49:83:6b:da:81:c9:c3:ba:9a:74:69:e5:
58:96:3f:38:1e:07:7a:a9:ca:d1:78:f5:f3:e6:fb:8d:98:64:
6b:e4:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:10 2026 by rpki-client