Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
File: zy_MDEv1TV6ct_obsf4anZRhA5A.mft (raw, json)
Hash identifier: WoJBQeRrIR44UUa26V59pLTPRdJ5Q0i5lgEe2LJ8xM0=
Subject key identifier: 8B:B9:97:7B:02:AF:12:28:AD:48:34:EA:EC:71:A2:37:1E:7A:1F:CB
Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Certificate serial: 019DA4F85AE9AC0C668F70C70D49E130EDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
Manifest number: 0150
Signing time: Sun 19 Apr 2026 09:00:32 +0000
Manifest this update: Sun 19 Apr 2026 09:00:32 +0000
Manifest next update: Mon 20 Apr 2026 09:00:32 +0000
Files and hashes: 1: TFVe-dXGuNawzmnfdegYq6flUl8.roa (hash: vQbZ+TX1ZBjYH0NW4eiYLXLkpBqwSOxwA5OLO5L2sYg=)
2: zy_MDEv1TV6ct_obsf4anZRhA5A.crl (hash: 9Ffxtr5fnp2txtFzr1qbgYusf2WPjgRijQczmG1iR+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:5a:e9:ac:0c:66:8f:70:c7:0d:49:e1:30:ed:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Validity
Not Before: Apr 19 09:00:32 2026 GMT
Not After : Apr 20 09:00:32 2026 GMT
Subject: CN=8bb9977b02af1228ad4834eaec71a2371e7a1fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:af:51:d2:81:13:87:10:97:5c:c8:2a:c8:
04:01:38:7e:14:96:65:69:0b:dc:df:bf:df:00:5c:
3c:08:08:da:87:d0:37:0b:e9:fd:d2:37:53:70:20:
17:67:fa:56:8e:89:53:dd:ae:41:fe:97:2f:35:cd:
83:2d:22:45:cd:af:61:a0:20:7f:c3:b5:a9:77:28:
10:05:b6:ea:51:16:6a:95:08:2a:11:b1:a8:ea:73:
9c:36:c2:3b:15:2c:85:75:d5:3c:f3:57:e9:ac:4b:
ae:c6:de:77:24:12:6c:74:8d:1e:3a:db:48:e4:b7:
68:14:18:57:b2:b9:5e:8e:09:ce:9a:87:71:fb:20:
e2:43:7a:7d:be:bd:34:c4:05:41:7c:21:7d:f6:e5:
63:53:db:c3:a2:00:80:8f:f2:62:b5:6c:47:6a:94:
a0:a2:10:a2:4a:bd:7a:dc:00:3d:99:6e:2b:9a:38:
85:91:bc:48:d6:a7:51:6a:32:72:d1:75:5e:80:dd:
88:fd:2b:1a:31:01:1a:98:e0:2f:9f:70:46:63:8f:
37:2e:d0:86:ee:76:87:ba:fb:6c:ab:54:64:4d:91:
a7:e6:78:f9:24:26:73:40:06:fa:87:93:3f:03:c2:
6a:2f:e8:ec:98:db:ef:b6:44:7a:63:62:58:65:03:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:97:7B:02:AF:12:28:AD:48:34:EA:EC:71:A2:37:1E:7A:1F:CB
X509v3 Authority Key Identifier:
keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:06:0a:7d:c5:f4:06:99:5a:89:7d:79:ea:34:e2:58:ea:04:
e1:96:4c:af:6c:97:c8:75:11:f8:28:7a:86:47:33:e1:17:42:
66:fd:54:ec:ba:c4:8b:e5:3c:18:9e:ed:92:75:50:ec:6b:4a:
42:3f:a5:4e:b6:2a:0c:47:98:17:79:de:51:20:0f:74:f3:6c:
6f:ed:8a:e1:c8:48:d1:3d:44:72:3c:81:56:3b:7e:17:b2:9b:
f6:3d:56:f3:84:69:b5:3d:e2:c3:66:b5:e6:ef:05:3a:6e:b3:
33:25:aa:b2:9d:2c:bf:47:b8:a9:9b:49:d4:ed:50:f0:f3:b6:
93:cc:4a:c6:be:44:90:e3:64:c4:21:4d:71:f8:3d:d6:e6:36:
25:ea:87:9f:ba:14:63:7d:c3:43:b6:5d:79:4e:19:4d:d3:b9:
72:47:41:2d:32:03:b5:7e:7f:76:cd:71:c5:af:cc:0e:e2:f5:
56:b6:db:63:28:b6:4d:7f:c3:03:24:53:53:ab:2e:58:08:ea:
45:8b:6d:3f:bd:e3:2a:90:b7:d9:71:8f:ee:1a:d0:04:a6:0e:
4b:a6:f8:79:61:ae:a3:d0:fe:5b:a5:1b:74:cf:57:15:a6:eb:
da:8d:2a:98:5e:0e:f4:a8:47:b8:d4:57:16:e4:f5:af:42:45:
a4:3a:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:33:54 2026 by rpki-client