Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: fwLZIbQEgq1asR2woGIjvR8l4lm8RBqS/mjq+2tVfj8=
Subject key identifier: 1F:B4:6E:4B:C0:BD:49:BD:D3:30:6F:4B:77:66:85:1F:77:45:BF:A4
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 019D2996DFFA54F19C65099DCE34FC5322CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0D42
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 0k8JSiXuI9yOlNc8R8ZC7myFR1s.roa (hash: hkDwNbOr9T8egEZmcAGrpawWPuV3eUejQ8UO6ApjR78=)
2: X2hmI0ITvkol3ThHFEh2esp_nlo.roa (hash: 5A42CZM5REZ7GUpO8TgAL25VLRWEXA8JbRN9OjEDwOA=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: KqljzmXKWy0KvxyzM63qkhQRqMgyjpPGyPBr2mBcK7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:df:fa:54:f1:9c:65:09:9d:ce:34:fc:53:22:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=1fb46e4bc0bd49bdd3306f4b7766851f7745bfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:95:19:ab:1a:72:d7:50:30:33:58:bd:a6:
11:c2:06:01:11:b2:50:1f:d1:0d:27:2c:8c:31:ce:
15:c7:17:90:00:ad:ec:53:d9:b7:f4:af:84:c8:f6:
09:48:b7:4f:b4:80:b5:aa:ad:c4:20:6a:94:aa:7b:
26:64:07:8c:bd:19:57:7e:68:07:be:cd:f0:fd:8a:
5e:0a:5b:1b:c9:ec:9e:63:fb:56:49:ba:41:d5:26:
b5:02:b2:5e:2f:14:ee:ef:6b:3f:0b:3a:e7:a4:d4:
02:90:0d:19:8a:24:8a:9f:91:26:ff:f0:f9:10:a3:
ab:fe:56:f5:0f:b5:e0:22:77:87:ac:cd:c0:65:2c:
5c:8d:30:a2:43:da:4b:ba:a0:73:3f:66:37:72:92:
3e:9d:5d:7d:6e:2b:38:01:3a:d9:19:09:c7:de:f5:
ba:4a:b6:fc:e8:b5:4c:ed:90:65:2a:df:05:2a:eb:
3f:7a:90:9e:86:4f:5d:7f:02:51:95:cd:b6:55:cf:
08:74:80:62:4a:24:65:ad:d2:bc:69:2a:2f:b3:d2:
11:04:d5:87:6d:30:50:eb:2d:b9:58:b0:a5:5d:e6:
2d:e3:fd:85:93:3b:a1:e4:c1:92:4d:8b:c5:23:97:
a1:1f:a3:47:b4:8b:06:f2:e8:c5:3b:20:43:89:3a:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:6E:4B:C0:BD:49:BD:D3:30:6F:4B:77:66:85:1F:77:45:BF:A4
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f6:bc:c5:fb:fd:9f:94:b7:d7:a3:7b:99:5e:b5:8b:4f:10:
fd:96:d1:4b:87:59:fe:db:ba:d9:d6:84:fe:38:77:88:61:ba:
eb:5a:ff:5f:65:03:2d:70:ed:ba:ab:b0:5c:0f:3b:3d:46:55:
1e:2b:80:f7:d7:9b:dd:72:8d:d2:cb:06:df:22:b1:53:27:9a:
af:fc:1d:e8:45:31:bb:61:2e:07:19:64:e1:d8:58:81:16:0f:
2e:19:ec:8f:be:90:ee:e5:ce:bd:9e:c3:01:35:8e:14:bc:cc:
8d:92:09:40:00:3e:ee:16:c9:00:f8:ad:3e:31:8d:73:eb:ff:
ec:70:d9:8d:0b:3d:87:c0:60:9b:28:18:8f:21:5b:a1:08:9c:
2d:47:52:c9:60:aa:3a:97:63:f9:d6:28:68:95:d4:7d:ca:c1:
9c:e7:39:44:39:c0:5c:7a:5a:b8:92:bf:b3:4e:1a:98:8d:32:
7f:6d:02:bd:bc:fa:fd:38:8b:f1:36:2e:5e:32:16:d8:f1:1f:
f9:f5:64:1f:8a:90:9d:ed:35:77:8c:7f:04:4a:24:8b:67:35:
20:29:55:d5:a5:cd:3c:c5:84:17:a7:cf:8c:5c:86:75:c6:c2:
e7:c4:5b:c2:31:ca:a4:37:02:17:22:73:24:4c:df:96:66:45:
51:7b:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:04:21 2026 by rpki-client