Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
File: zy_MDEv1TV6ct_obsf4anZRhA5A.mft (raw, json)
Hash identifier: NYDb8fLIfGqCocMDZAfkWAlD0DSPcXTg//dxvrIMJt0=
Subject key identifier: C0:DF:72:BC:44:98:63:E1:EF:06:4A:FF:9E:81:66:C9:F3:0C:7E:85
Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Certificate serial: 019CADC77B709FA38ADCCC2381311E201B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
Manifest number: D0
Signing time: Mon 02 Mar 2026 09:00:57 +0000
Manifest this update: Mon 02 Mar 2026 09:00:57 +0000
Manifest next update: Tue 03 Mar 2026 09:00:57 +0000
Files and hashes: 1: TFVe-dXGuNawzmnfdegYq6flUl8.roa (hash: vQbZ+TX1ZBjYH0NW4eiYLXLkpBqwSOxwA5OLO5L2sYg=)
2: zy_MDEv1TV6ct_obsf4anZRhA5A.crl (hash: mxulXR6oSMYV0NfiFigK00+bC5G+NXGPbTQuKbAR0LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:7b:70:9f:a3:8a:dc:cc:23:81:31:1e:20:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Validity
Not Before: Mar 2 09:00:57 2026 GMT
Not After : Mar 3 09:00:57 2026 GMT
Subject: CN=c0df72bc449863e1ef064aff9e8166c9f30c7e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:8a:e9:0c:b1:d0:5c:6a:b7:71:0a:3b:24:
35:d7:f3:c6:12:5f:c6:92:c2:36:44:c1:dc:f7:4c:
48:88:86:8c:61:83:bc:77:e4:e6:56:19:41:3a:f8:
7a:77:ea:1a:f2:2e:d9:0c:09:bd:19:2a:0a:3e:1c:
73:88:04:b7:86:09:d6:f2:d4:c0:09:fa:de:26:86:
50:b7:42:f5:ff:b5:e1:3c:61:c8:8f:a9:35:fa:8e:
b9:57:f1:9a:d4:79:5a:98:33:3a:a9:fc:aa:b6:08:
35:21:71:e6:71:bc:65:5b:d5:1c:55:44:c3:0e:25:
3d:96:48:5e:b4:f8:4e:ac:f5:9e:93:07:f2:08:af:
2e:3d:1d:81:29:4a:c2:cd:3c:1c:24:77:6a:11:3d:
04:18:d0:50:b6:b7:39:d8:32:ae:04:14:52:64:cc:
be:cb:5e:00:c2:6a:79:99:ab:eb:3f:4f:6c:96:51:
1b:35:dd:d5:e2:e7:ac:49:c2:65:d2:cf:7a:aa:b1:
99:83:a0:e5:5c:79:42:ff:2a:76:26:db:27:db:f3:
b8:ea:93:3e:0d:0a:b3:31:f6:40:85:0e:e0:e5:fd:
da:2f:a4:ef:4e:e7:06:86:52:7a:12:67:c2:ab:4d:
cb:2f:d2:9d:12:91:83:3c:69:6d:ef:ef:92:5d:c6:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:72:BC:44:98:63:E1:EF:06:4A:FF:9E:81:66:C9:F3:0C:7E:85
X509v3 Authority Key Identifier:
keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:07:8c:b5:36:df:0a:84:fe:b0:2d:05:e7:d4:60:b2:e6:a8:
3c:4a:44:f7:4c:db:ae:d3:71:0d:4b:6c:ef:e3:2e:7f:72:9f:
05:b8:82:90:5c:3a:98:5d:e4:e4:c9:98:90:83:f0:17:16:aa:
77:e6:9b:b7:ef:5b:12:b3:3f:19:9f:ab:22:bf:42:c3:3d:a7:
51:0b:2a:2c:a1:69:23:60:59:fb:79:4d:21:23:5a:d1:53:c1:
48:61:9e:db:f5:d3:b5:5f:2e:c1:dd:33:5e:59:0d:fa:e8:3e:
65:d5:34:47:78:96:cc:7a:05:da:b0:31:78:b6:07:8c:2e:c7:
0c:4b:23:60:cf:c8:ca:86:cb:42:06:b0:a9:90:33:18:79:9c:
94:fa:de:68:3a:ae:ab:c0:32:2e:57:55:42:ce:9f:4e:7d:61:
da:28:ba:51:cb:b5:55:05:79:cb:b6:82:61:91:8f:cf:59:fa:
fe:80:fb:2b:40:72:97:01:e8:bb:0d:8b:f1:d2:70:1d:6c:b4:
6b:bc:1d:7c:05:fc:17:6c:72:c4:63:4a:0e:85:37:c1:7b:bb:
c5:78:de:18:64:87:33:56:89:1a:fa:09:01:c1:a4:8f:23:67:
a7:c6:aa:6f:0a:06:16:62:f6:c7:4a:80:33:44:36:14:96:10:
48:de:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:47 2026 by rpki-client