Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: wdoRgoXD79uboSvzGbFX7/6JDS1HRJFylbbqj5TKJnY=
Subject key identifier: 48:77:68:7B:1B:95:BC:82:DB:E9:9B:AD:33:0B:1D:C4:8A:32:E3:B5
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 019D25F0EF38C9611227E0D06A798EC9BC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 0676
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: u9YBJLq1t7JkE_DkFNdRSbpZK_c.roa (hash: 5V5Kj6vkFdjgMDloiXkl7ryE2xGCQQ4Ob+s+u5uVqwM=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: qYXeivm6TUx5AD+221ZfrcJF7Fy6RiCTBAOUJaFzTak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ef:38:c9:61:12:27:e0:d0:6a:79:8e:c9:bc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=4877687b1b95bc82dbe99bad330b1dc48a32e3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:7e:7e:e4:42:4c:dc:7c:ea:6f:2b:ff:7c:
e2:49:ce:8e:25:8a:c4:11:74:50:62:d0:45:b0:19:
c2:71:54:60:7b:6f:28:68:73:bf:e8:29:d1:5d:2a:
17:6e:11:98:6d:cc:c4:d2:f4:6b:e4:c2:dd:00:c7:
66:ba:7c:0e:4a:23:62:e0:93:17:08:ed:21:95:5f:
f4:8c:53:05:4d:07:30:cb:dd:ab:16:33:14:cb:cb:
5d:e9:ec:4c:fe:b7:1a:50:b6:c3:62:d1:f1:7e:9d:
07:a6:92:36:d0:c4:75:94:a0:8e:47:26:71:9e:a7:
d8:75:e0:b0:9d:d7:89:eb:35:e7:f1:b2:26:7f:49:
19:da:da:a8:83:4d:c5:1b:d8:07:85:32:01:c2:f0:
c8:20:11:01:57:21:6f:27:dd:1b:88:d8:f8:7a:9c:
6d:f8:be:7c:4f:f4:31:9e:1b:18:95:2d:7d:c1:89:
fb:f4:a6:08:19:19:f2:c9:6e:dc:1a:ee:1d:08:57:
d7:59:56:4f:d1:02:ac:2f:85:69:9b:c1:cf:39:1c:
c5:c9:b2:e6:40:f7:17:72:45:5e:be:c3:63:2b:26:
70:d2:a2:67:b0:80:e8:a4:37:23:e5:40:c5:1b:8a:
1b:8a:94:91:79:82:fa:e3:3d:27:3a:cd:6b:ee:88:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:68:7B:1B:95:BC:82:DB:E9:9B:AD:33:0B:1D:C4:8A:32:E3:B5
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:95:e2:4b:a2:4a:07:8a:f1:ee:00:57:1c:74:b6:7c:5c:22:
be:c1:98:95:6b:44:38:fc:cb:33:9c:86:19:53:6b:49:23:c3:
3b:97:ac:45:d7:02:42:57:5d:37:32:50:2b:76:e9:1d:26:d1:
14:51:ca:aa:a1:ac:51:98:f5:76:2c:18:99:99:02:51:c8:8c:
b4:eb:b7:1f:a7:58:ac:e7:3e:0f:cf:2d:aa:9c:d6:2b:9d:47:
41:6e:8f:9c:90:d6:64:a2:7b:41:7b:17:ad:0c:5a:e9:b2:80:
c4:39:2b:7e:f1:2c:33:60:17:9e:a5:0a:d2:97:4a:4e:11:aa:
cd:0e:8b:3d:eb:bd:30:1a:d8:d5:c6:64:5c:5b:d5:b8:b5:5a:
0e:2d:42:31:5b:1b:ce:5d:63:5b:b8:1f:e1:13:eb:7a:22:4d:
4c:1d:98:2f:fb:bf:03:ef:25:3d:76:6c:f3:fa:53:20:46:00:
1f:0a:e0:0c:a6:fc:3e:b1:59:ea:2d:42:cd:89:f2:5a:58:ff:
5c:e7:14:b0:4f:14:73:7b:a3:03:18:c5:c4:1b:9b:17:ac:5e:
91:c2:22:79:f1:a0:8f:1a:84:3f:2c:58:9d:30:29:a2:7d:ca:
9b:bc:09:2a:ee:eb:0a:eb:20:cb:cb:fc:f4:0b:8a:9b:98:48:
08:24:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:19 2026 by rpki-client