Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: lXrULIoA4YbrnuJnlJ1HEhZW0IcPrKMeGR8L4zKRGRA=
Subject key identifier: 17:F0:DE:68:36:1B:D0:B5:94:13:43:FA:8E:3E:F9:9A:31:2A:4E:7E
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01A10059FB5B1930E5353719C286C88FD822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1A89
Signing time: Sat 03 Oct 2026 06:00:59 +0000
Manifest this update: Sat 03 Oct 2026 06:00:59 +0000
Manifest next update: Sun 04 Oct 2026 06:00:59 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: MguGzAFBfGXld0GJrviyOaR1WKRxIBAhdeuDcX+yBIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:59:fb:5b:19:30:e5:35:37:19:c2:86:c8:8f:d8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Oct 3 06:00:59 2026 GMT
Not After : Oct 4 06:00:59 2026 GMT
Subject: CN=17f0de68361bd0b5941343fa8e3ef99a312a4e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:30:46:81:d6:4b:1d:2e:87:9d:88:d5:5f:
13:ab:c2:98:5b:e5:f6:6e:0b:a4:3f:59:2b:2a:b4:
96:4f:55:28:10:00:cb:c7:4c:80:f7:97:53:78:65:
ed:65:67:43:a1:46:e2:93:2a:28:06:7b:5d:5d:2a:
58:bb:79:27:b2:01:92:9c:0d:a2:bd:5e:ea:d7:56:
cf:21:f5:fe:2a:3d:72:7a:d4:24:bd:95:32:c8:1a:
19:9b:4e:74:4c:32:11:52:a7:cb:3b:73:f3:ae:e6:
28:b5:f5:ee:28:33:86:1d:a7:ed:73:86:b3:db:26:
a5:5e:56:b4:d5:f6:6b:b7:eb:36:6a:a2:3b:7b:26:
84:f6:ec:59:6c:05:a3:56:c1:a4:b4:de:37:45:ef:
c9:2c:e7:61:04:e3:21:f9:2a:c6:07:6d:d8:61:48:
f4:58:77:2c:a1:5b:7f:53:f2:b5:b0:d3:54:16:67:
76:e1:18:a7:a2:1f:c2:41:4a:da:ce:2d:a9:2a:be:
8a:01:bf:7e:3c:21:f0:22:3f:55:f3:b7:4d:ed:48:
e3:e3:6c:06:7d:39:93:29:8d:3b:06:f9:b7:9a:43:
11:b8:dd:3e:bb:db:f3:98:b8:2b:98:28:49:62:89:
3f:a9:4c:a1:e7:19:3e:b9:8d:0e:04:15:8b:de:c6:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:DE:68:36:1B:D0:B5:94:13:43:FA:8E:3E:F9:9A:31:2A:4E:7E
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c0:e5:a7:35:98:73:29:92:14:52:8e:65:4d:77:f5:db:dd:
e5:f6:e1:1c:5c:1f:bd:a2:44:9b:a2:79:d7:59:1e:1d:3c:97:
ce:7f:04:8c:b9:bc:ae:d9:d4:b6:9d:63:82:ac:a3:76:a1:9b:
bc:8d:44:99:18:2f:67:67:f5:db:41:05:3e:3e:68:c5:db:43:
f1:24:fc:0c:1a:fa:87:9a:d9:6b:29:74:0d:69:ac:18:3c:bd:
63:8d:6d:1c:eb:d8:35:65:12:80:94:ae:c3:1d:7e:df:17:ad:
25:c4:d9:4a:f2:3a:fc:e9:73:5a:4f:73:7b:e7:86:b2:5d:90:
47:95:ef:90:a7:2c:62:08:b9:2c:73:c2:ac:d3:90:3a:28:74:
c4:0f:ea:09:f1:05:55:de:08:c5:cb:19:c0:f6:db:f1:b0:9b:
d4:99:13:78:50:7e:01:e2:f2:02:8d:47:ce:55:59:43:63:e3:
75:8c:ce:b8:fd:96:6a:a5:38:5f:50:56:10:1e:48:f6:72:7c:
7b:5b:2e:23:61:d8:a7:ca:2f:ec:19:92:4c:ab:58:62:f5:f2:
fe:6d:98:e7:09:f1:ff:b4:38:c4:41:7f:c2:ac:34:79:ea:84:
81:1d:50:9e:c3:a1:8f:5e:49:54:b9:a1:e8:35:86:08:79:fa:
32:15:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:19:10 2026 by rpki-client