Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: lok0mmn4eQu29ffwmcE3kYrihqX79Wsd4dOTFktp67E=
Subject key identifier: B4:EF:50:E4:1A:A3:C4:98:19:42:65:76:3F:83:BC:75:57:3E:BA:65
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 019CAC46E2249CA0A9180D0CE7B3756B09A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 0637
Signing time: Mon 02 Mar 2026 02:00:52 +0000
Manifest this update: Mon 02 Mar 2026 02:00:52 +0000
Manifest next update: Tue 03 Mar 2026 02:00:52 +0000
Files and hashes: 1: u9YBJLq1t7JkE_DkFNdRSbpZK_c.roa (hash: 5V5Kj6vkFdjgMDloiXkl7ryE2xGCQQ4Ob+s+u5uVqwM=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: eVZuSMQNKFo2pMZt9eiBlfnQWeF2Z+PTGUASjXaOl8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e2:24:9c:a0:a9:18:0d:0c:e7:b3:75:6b:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Mar 2 02:00:52 2026 GMT
Not After : Mar 3 02:00:52 2026 GMT
Subject: CN=b4ef50e41aa3c498194265763f83bc75573eba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:f7:33:5d:1a:e2:fd:79:a4:86:f3:71:27:
93:47:9f:8a:9e:6e:96:60:a5:6b:14:48:9d:8a:e6:
60:f8:ea:27:a1:68:1a:3e:42:11:3c:05:5a:64:4e:
95:70:a0:66:92:a7:09:c5:34:c5:43:db:65:7e:ea:
c6:ec:69:e4:66:4d:45:80:71:30:29:8a:30:07:1a:
e7:98:35:fb:de:78:11:bb:0f:ec:75:a2:61:0b:71:
6d:d8:82:c4:ba:c5:d0:2c:2d:c0:18:f5:a9:2e:ee:
f3:d7:48:c4:3e:0a:3e:52:cc:89:a6:90:38:a1:fd:
09:d8:49:5f:ba:c5:77:c6:b8:ea:69:f2:e5:bc:eb:
c0:07:fa:fe:61:1f:2c:33:e1:ce:66:c0:4f:40:d9:
32:9d:d6:ec:6c:32:f7:42:95:17:c0:50:4d:81:c2:
f8:47:b7:83:b1:81:d9:0e:18:a4:d0:17:dc:26:63:
b7:bd:9a:fe:45:28:4b:d3:f7:bb:a7:1c:0a:bf:3d:
50:da:7d:c7:40:b5:e7:0c:87:9c:ba:1f:6c:2e:8e:
b5:a2:3d:91:1b:27:87:57:b2:a4:20:28:bd:5f:26:
2f:e2:8f:53:a9:fe:98:d8:59:c0:39:c2:bd:39:0a:
10:c7:84:10:1e:c8:91:36:ef:1e:48:e5:9c:ca:02:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EF:50:E4:1A:A3:C4:98:19:42:65:76:3F:83:BC:75:57:3E:BA:65
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:35:be:7d:55:ca:61:78:82:ad:84:48:c2:ab:d9:3b:b5:90:
7d:c0:8d:08:bb:4e:d2:1f:c6:b0:6e:f5:cf:64:da:09:c1:57:
5d:e7:af:3d:a7:8c:92:4f:b3:ad:b3:ed:1a:3b:ab:37:52:9c:
2c:f1:7e:d5:83:f5:54:c8:d3:14:64:d3:fd:07:4a:d4:92:bf:
0c:3f:ca:4d:79:0e:2d:15:05:a3:c6:d2:69:17:b5:a3:ae:80:
3d:b5:fc:40:a0:a0:66:62:e9:e4:a1:1d:42:c9:9c:c8:6b:17:
f4:23:a4:2c:ac:b7:39:0a:4a:d1:1e:32:7b:3b:48:21:0c:0c:
e4:ec:5f:62:1a:09:d5:57:d4:ce:a7:ef:fa:fa:2d:19:61:dd:
a0:b3:20:f5:79:f7:68:29:24:f3:ad:a2:00:f6:14:47:9a:f4:
1d:68:d6:b2:52:be:3e:35:eb:7f:d8:88:e4:56:b5:5d:bd:f9:
f9:14:cd:52:58:d3:a5:a4:6d:a9:9e:af:f3:39:25:ff:ac:0a:
e8:31:5f:42:40:01:b2:d4:bb:c3:e0:6e:3c:73:fe:cd:16:ca:
25:40:01:98:6b:a2:5c:23:06:55:0a:f3:59:7e:ee:fc:f0:77:
f9:88:68:67:96:c2:0f:6c:ad:5c:0c:7b:bd:56:fc:52:04:bc:
8e:f1:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:31 2026 by rpki-client