Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: oW/uZ/LQc/+vjgatoFdwVeqQtzDlS3z/APOEqhMGc0w=
Subject key identifier: 60:42:EB:59:A1:64:CE:2F:60:04:7C:04:52:B1:85:67:7A:AA:9A:E2
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01A12CC5B7C67114739BDD50D916542FF262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 21:01:57 +0000
Manifest this update: Sun 11 Oct 2026 21:01:57 +0000
Manifest next update: Mon 12 Oct 2026 21:01:57 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: dnGa+qYKaTHer+xE4UOKyIHBAlF/pRZvr4JhW/UPYs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:b7:c6:71:14:73:9b:dd:50:d9:16:54:2f:f2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Oct 11 21:01:57 2026 GMT
Not After : Oct 12 21:01:57 2026 GMT
Subject: CN=6042eb59a164ce2f60047c0452b185677aaa9ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:0e:da:be:69:19:e7:59:9c:1b:f3:87:8e:
d3:0e:6e:01:1b:3a:a8:df:42:43:8f:da:4a:6f:4e:
7c:26:d9:ea:53:a6:b1:67:8a:2c:e8:83:07:45:db:
eb:65:60:24:24:32:9f:2c:db:38:83:77:32:47:26:
a7:a1:ca:7e:69:cc:77:d8:82:cf:7a:e9:14:ea:6a:
74:6e:d1:a0:72:34:8e:e1:86:cf:10:1a:29:3b:1e:
5d:50:cc:a0:f8:c3:a6:ba:50:1f:33:0c:c6:b5:8b:
e7:d0:1a:c1:cf:23:73:7c:c6:e6:87:09:bc:f6:ea:
a5:3a:2c:21:bc:e3:8b:7c:f6:a6:fc:56:22:85:b1:
a9:7d:37:c6:04:d1:0f:ec:a5:30:5f:e0:16:1b:81:
fc:98:1b:3f:f0:0c:69:dd:3d:f2:29:7d:00:dc:56:
dd:9e:2f:7a:c0:ee:b8:20:75:bc:f7:d5:bf:b0:67:
a9:4d:c0:d1:b4:16:41:77:41:4c:85:8f:f4:81:79:
28:cb:dc:93:19:3c:47:50:7d:eb:ad:3d:01:0f:c0:
13:b2:6c:36:16:17:48:d1:ea:6e:16:98:3a:53:80:
62:ec:67:92:0d:69:00:61:3c:44:e4:b6:75:5b:cc:
a6:68:97:22:91:ac:a8:27:00:14:14:67:9a:f5:c6:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:EB:59:A1:64:CE:2F:60:04:7C:04:52:B1:85:67:7A:AA:9A:E2
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:9f:4b:13:b6:69:33:b2:b6:e6:c4:7a:f2:98:64:dd:d9:
98:6a:41:76:81:93:ad:f5:a7:6a:dd:d6:7d:f8:bf:e6:2f:42:
66:51:8e:43:10:e4:33:e9:da:de:79:ad:25:44:fc:44:d6:f7:
c4:b9:d2:7a:cd:c8:1e:1f:39:5c:c0:bf:fb:9d:c5:01:ca:bd:
85:02:e0:4a:56:2a:12:19:bf:ea:e0:f8:93:e0:80:0b:bb:86:
7f:e2:bb:e5:73:ec:e5:55:86:68:5d:e2:93:70:d3:b8:e1:26:
b6:76:8e:d9:63:a9:5f:3f:24:a6:fc:3e:6f:d7:ae:a0:b7:ba:
fb:e0:69:d2:f3:c1:6c:1f:8b:5e:df:b2:5b:49:52:d1:7f:31:
c3:9a:12:93:0c:9e:ee:83:1e:70:31:e8:98:0a:a1:89:12:61:
dd:c6:37:8a:74:54:22:e9:c3:2d:a9:38:a2:4f:b4:ff:f8:b1:
aa:5c:a2:fc:a3:1d:c5:39:0c:7f:3a:21:18:52:4e:f1:ae:7c:
33:e5:15:a0:13:f4:cf:43:54:82:e1:1f:ba:08:ce:c8:7c:77:
6d:8c:db:bf:47:e1:51:8b:2e:0d:3c:2d:11:1e:24:74:72:7f:
07:13:9d:ef:2b:39:bf:ff:28:c7:7b:bc:31:64:c6:92:8b:d7:
55:8a:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:15:57 2026 by rpki-client