Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: eOHtq2wuSI3qgEr13/fsZ5DTroNb9WiyDTWdfFAFsyY=
Subject key identifier: 13:6A:3D:AD:62:1F:5E:C0:7D:D7:5F:4B:2A:4A:E8:D0:25:9E:25:84
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01A1062588D6EFE87A7990CCD0733928CFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1A8C
Signing time: Sun 04 Oct 2026 09:01:25 +0000
Manifest this update: Sun 04 Oct 2026 09:01:25 +0000
Manifest next update: Mon 05 Oct 2026 09:01:25 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: XNiifYxWTdsm1Hr/ybXnqqun6dR52/u6Vky6nU5PYDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:88:d6:ef:e8:7a:79:90:cc:d0:73:39:28:cf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Oct 4 09:01:25 2026 GMT
Not After : Oct 5 09:01:25 2026 GMT
Subject: CN=136a3dad621f5ec07dd75f4b2a4ae8d0259e2584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:c7:71:a7:14:74:d2:92:84:ee:2e:a2:57:
e8:04:6e:a2:1f:2a:44:56:91:79:2a:2c:3e:a9:df:
d0:e4:86:52:e3:72:c4:ce:81:8a:0a:09:96:f3:60:
de:1a:29:fd:33:3a:bd:34:b5:ff:34:5f:37:d0:6b:
42:10:7c:32:cf:c5:a1:35:45:d3:40:f0:6a:38:9a:
6e:10:3b:98:e4:49:16:89:cf:cb:e3:77:18:39:d6:
62:68:48:b4:ef:6a:1c:df:50:76:fb:e0:17:28:b4:
cd:ed:94:97:bc:04:6a:e9:62:80:e0:80:7e:14:ea:
22:fd:6a:b9:d5:ab:97:c2:fc:cd:79:59:d7:31:ce:
71:85:5b:76:41:6e:c4:72:0e:3c:8f:66:6f:3e:37:
a5:89:b2:62:bd:df:ee:5e:65:6e:87:28:63:b5:47:
1f:ae:ea:0b:7a:32:92:d7:e4:a6:97:ec:6f:85:3e:
4d:49:ca:64:ec:d8:14:3e:4f:9e:9b:15:0a:0e:5a:
c5:ef:f3:dc:ce:c2:f6:a3:0e:63:97:fb:75:ce:f3:
f8:f0:f2:69:02:0f:04:4e:47:2f:ab:3a:2e:67:66:
38:e7:77:81:bf:f0:2c:cf:3d:8b:5d:65:3a:a1:4e:
55:be:ee:2f:0b:31:f6:c1:1c:8f:44:fe:38:78:52:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:3D:AD:62:1F:5E:C0:7D:D7:5F:4B:2A:4A:E8:D0:25:9E:25:84
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:35:58:6b:72:94:95:83:31:a3:02:60:2c:b9:d1:5e:00:89:
ed:c2:ea:23:0c:78:26:b7:2b:e4:ef:75:b9:61:88:c5:a5:08:
32:e6:48:9d:c6:f7:45:cc:6f:cf:5c:00:2b:74:32:f9:11:3a:
5c:5d:b9:af:d7:4b:ef:5f:b2:f8:b1:48:97:56:d2:8e:31:9e:
9c:07:d9:a0:db:5b:a3:bf:e0:ae:a2:cd:e3:55:54:88:8e:9e:
e1:a6:e2:dc:b0:6e:b0:dd:a5:3d:73:50:75:5d:44:a6:ee:dc:
09:fb:b4:1c:5b:b6:9d:cd:9d:b5:d9:bb:ac:ab:69:28:46:40:
1d:ce:b1:4c:00:0b:54:1b:9f:91:27:90:13:b7:7d:37:53:16:
f6:5c:47:f4:84:ec:2f:bb:62:37:dc:d2:26:b5:15:f4:ff:21:
15:09:e7:87:36:4c:f1:f9:da:53:36:06:a7:69:ef:21:58:8f:
f8:f4:bc:53:45:ba:5a:59:85:d6:9d:d8:ad:c1:f3:0b:17:08:
93:90:5e:98:49:8c:a1:8a:f8:27:a0:4d:70:3e:0b:28:cf:2e:
18:14:07:ef:5d:2c:ae:49:e6:c6:e4:e8:4b:12:e8:2c:a9:3b:
1d:41:30:34:bf:4e:90:92:80:0b:0a:3f:f6:39:23:49:33:6e:
0e:5e:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:39:38 2026 by rpki-client