Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: /P1T0LgRlAE8KcejceCe1u0fUEMAr2nPbQnMUtuBEQA=
Subject key identifier: 40:61:64:29:AA:B1:D0:92:57:04:9E:19:A6:4D:9A:27:9E:C1:67:86
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019F9549307811E6D10C539D3BC29E65C830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 18:00:29 +0000
Manifest this update: Fri 24 Jul 2026 18:00:29 +0000
Manifest next update: Sat 25 Jul 2026 18:00:29 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: hfkYhSrQQ5uif5c4KUmB8Xs6sZjVXmuaw7sQ29BR6Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:30:78:11:e6:d1:0c:53:9d:3b:c2:9e:65:c8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jul 24 18:00:29 2026 GMT
Not After : Jul 25 18:00:29 2026 GMT
Subject: CN=40616429aab1d09257049e19a64d9a279ec16786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:af:f4:6e:07:ea:1c:71:aa:4c:fc:c2:a7:
63:ad:68:3b:11:9e:32:c5:51:e3:c6:98:c4:25:3b:
52:78:14:e1:b2:7b:54:dc:38:8f:34:6c:fa:ad:2a:
6b:72:43:c7:a0:4c:7f:e0:6a:c2:33:c9:e7:87:e0:
d5:17:1b:a5:d3:29:9f:4a:c6:53:9a:de:b5:38:a7:
74:82:ac:6e:dd:0a:32:d6:e3:12:47:d0:7c:ab:98:
c9:ef:31:15:90:cf:6b:07:88:7d:9e:39:58:5a:02:
ed:67:40:4c:77:58:bb:11:b1:8b:c6:f9:63:34:79:
91:c4:0e:9f:1e:5c:60:f2:ab:ac:68:4b:63:4c:b3:
72:67:92:17:10:c9:79:fe:8a:64:62:ea:5c:64:d1:
d0:04:8f:3b:f0:ef:e2:8d:04:22:1d:ed:92:6f:83:
3a:9b:88:06:84:53:e9:f9:bc:2d:f4:84:4f:f2:4f:
c6:04:21:91:32:02:4a:ce:04:26:15:d8:ea:fc:07:
a8:33:9e:a8:6b:e7:ba:34:fc:1e:69:51:75:cc:ff:
51:17:8c:5a:13:11:d5:42:d1:c1:a7:cc:c9:21:99:
fd:b3:d4:b7:42:96:da:65:43:58:e0:83:b7:25:f6:
4b:94:d4:53:5f:4e:ad:13:f6:c4:2c:2e:0f:d3:77:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:64:29:AA:B1:D0:92:57:04:9E:19:A6:4D:9A:27:9E:C1:67:86
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5b:49:1b:b0:19:b9:b4:3d:58:71:18:25:f4:64:e9:41:97:
53:c5:1e:79:84:8a:cc:c8:22:a1:6a:c7:4e:69:17:e3:88:35:
cd:55:8c:b3:7f:1d:0c:32:a1:b7:d4:c7:a8:25:ae:91:b7:a6:
81:44:bc:97:7f:38:87:2f:50:16:00:0b:19:f8:e8:16:65:fd:
d0:fd:6f:38:7a:0e:00:97:9a:22:b4:41:e5:9f:ed:ce:75:bb:
70:e4:39:e4:fe:a0:f3:d2:e0:9a:37:d6:62:76:c0:80:fd:fc:
94:b1:ab:06:54:9e:f7:4a:39:11:92:48:38:8d:ce:c3:ee:d4:
21:11:e4:28:27:ad:30:4f:a4:fa:ac:9b:be:2f:83:89:96:cb:
6e:1d:bb:c0:e4:03:19:fe:a5:0d:27:3c:9e:ce:f6:7a:2e:93:
eb:d0:29:44:eb:43:f6:3d:5c:cb:ca:5c:df:54:96:9b:7d:70:
c9:3d:eb:00:7e:d0:02:e9:df:61:88:74:a0:10:d2:8d:5e:a5:
22:c4:bf:03:d3:a6:0e:25:97:0a:62:eb:28:13:b1:6e:3d:12:
ed:1f:8d:98:c1:82:89:0b:1f:d5:f0:e5:00:d6:da:79:49:af:
9c:40:f2:1a:5c:5c:ed:fd:92:43:10:36:f5:02:78:3f:5e:09:
ef:ba:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:39 2026 by rpki-client