Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: P+dPRQuGPO5TbCSVQ2y13ViL742KLNUI8VDjKG4fWuo=
Subject key identifier: 28:B7:04:02:F2:3F:30:92:1C:EA:1C:F9:75:4A:D0:30:1C:AC:07:0C
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019D2772BCA681BB31DA62675F3D9B10BEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: qCLPtpxlHrsSdzEER5308ugbYwfQIKk6iTehcR6xxV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bc:a6:81:bb:31:da:62:67:5f:3d:9b:10:be:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=28b70402f23f30921cea1cf9754ad0301cac070c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:e6:25:d1:e6:d9:2a:39:74:ac:e7:fa:16:
64:5f:cc:e4:e4:89:04:4d:a1:a8:8f:b7:11:16:46:
3a:a0:df:55:e5:06:d9:28:d0:d1:e9:f6:ff:5a:3c:
5d:5e:49:52:91:f8:7e:1b:19:b4:1f:4f:cb:f6:57:
a8:69:ee:da:af:5d:92:80:eb:eb:fb:eb:ae:63:e4:
89:b8:59:22:0e:ef:b3:bf:be:7b:f4:1c:bd:8f:e5:
16:be:e7:f2:ad:81:c3:c1:a1:65:7e:ae:02:ea:0d:
39:60:9f:b1:aa:a3:87:d5:07:f5:fd:04:7b:08:c5:
7d:f5:ea:3e:60:6b:ce:30:4a:a8:57:9b:11:1c:9e:
ea:0c:bf:25:26:a7:c5:53:23:bc:87:5e:a8:32:34:
b0:dc:b2:4d:0a:20:82:3a:c0:17:77:9e:16:ea:be:
7c:3d:b6:2d:b8:11:40:a0:2a:e8:db:53:70:dd:6f:
1a:40:d1:f0:df:3d:14:51:cd:fa:6f:d7:8b:7b:19:
66:32:19:a9:98:7f:3f:e8:9b:8a:e2:cb:40:7b:fc:
a6:4a:34:87:49:46:4e:a7:64:7a:63:6c:ad:eb:ce:
93:6a:ab:f4:af:0e:6f:c4:d1:72:99:6d:df:7e:e5:
67:b3:fc:44:83:13:7d:bf:07:68:47:cc:36:9e:57:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:04:02:F2:3F:30:92:1C:EA:1C:F9:75:4A:D0:30:1C:AC:07:0C
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9c:06:14:6f:c6:6b:d0:98:94:57:01:bf:dd:54:66:35:f0:
1b:25:2f:3c:0f:ee:1a:51:16:49:b2:ce:51:36:68:d2:99:d9:
26:24:58:1e:e8:85:ad:db:ce:47:1e:d9:14:6a:a9:bd:26:ee:
b4:ee:02:73:9e:4a:07:0e:87:5d:c2:87:d2:59:86:91:4e:d7:
8b:78:19:d7:c1:bc:9c:40:8e:9e:98:3f:b8:7a:89:d7:6e:a2:
53:80:40:55:e1:53:df:b0:c0:2f:e6:79:95:31:ce:9e:de:fb:
cc:eb:6f:82:ac:2e:b1:71:e6:48:6c:8b:e3:99:ab:af:22:31:
78:31:44:88:a7:67:bc:ae:37:2b:f6:74:2a:da:32:25:cd:ee:
e7:e1:86:7e:37:c7:97:b7:a9:d3:3d:e2:b6:25:32:46:ba:8d:
e2:7a:71:6c:50:94:d4:f8:18:99:0b:50:f8:1a:9b:a0:85:3e:
6d:40:21:48:ea:97:14:e0:b8:58:b6:aa:be:54:a3:6f:42:a1:
cf:49:4d:91:1b:05:b3:23:80:2b:1a:bc:7d:29:cd:f4:18:3d:
b2:4e:14:5c:43:1e:41:90:86:02:2a:50:1b:78:64:9c:bd:d1:
ef:ba:f0:3c:1f:c2:36:e4:78:67:01:db:0d:1d:91:9a:ef:8d:
b0:4b:34:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrymgbsx2mJnXz2bEL70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy
ZDU5ODYwHhcNMjYwMzI2MDAwMjAzWhcNMjYwMzI3MDAwMjAzWjAzMTEwLwYDVQQD
EygyOGI3MDQwMmYyM2YzMDkyMWNlYTFjZjk3NTRhZDAzMDFjYWMwNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMPmJdHm2So5dKzn+hZkX8zk5IkE
TaGoj7cRFkY6oN9V5QbZKNDR6fb/WjxdXklSkfh+Gxm0H0/L9leoae7ar12SgOvr
++uuY+SJuFkiDu+zv7579By9j+UWvufyrYHDwaFlfq4C6g05YJ+xqqOH1Qf1/QR7
CMV99eo+YGvOMEqoV5sRHJ7qDL8lJqfFUyO8h16oMjSw3LJNCiCCOsAXd54W6r58
PbYtuBFAoCro21Nw3W8aQNHw3z0UUc36b9eLexlmMhmpmH8/6JuK4stAe/ymSjSH
SUZOp2R6Y2yt686Taqv0rw5vxNFymW3ffuVns/xEgxN9vwdoR8w2nlc/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi3BALyPzCSHOoc+XVK0DAcrAcMMB8GA1UdIwQY
MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt
NmJjODM5NDY1NmI3LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3
LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZwGFG/G
a9CYlFcBv91UZjXwGyUvPA/uGlEWSbLOUTZo0pnZJiRYHuiFrdvORx7ZFGqpvSbu
tO4Cc55KBw6HXcKH0lmGkU7Xi3gZ18G8nECOnpg/uHqJ126iU4BAVeFT37DAL+Z5
lTHOnt77zOtvgqwusXHmSGyL45mrryIxeDFEiKdnvK43K/Z0KtoyJc3u5+GGfjfH
l7ep0z3itiUyRrqN4npxbFCU1PgYmQtQ+BqboIU+bUAhSOqXFOC4WLaqvlSjb0Kh
z0lNkRsFsyOAKxq8fSnN9Bg9sk4UXEMeQZCGAipQG3hknL3R77rwPB/CNuR4ZwHb
DR2Rmu+NsEs0Ew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:38 2026 by rpki-client