Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: On3fe47ZTdLooRLAx68fwxvZ1QhpT12lsQIFTg1pZsw=
Subject key identifier: 19:71:BA:9A:9B:5E:61:C1:18:DC:CD:59:D2:9E:4F:1B:0A:65:6B:22
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019CABD9034A16AAC9F03164A4C8EEA5C44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: WOkUdUsu3/8v7c8omIJXHCyVgSfvjew8m1vHB1u/ZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:03:4a:16:aa:c9:f0:31:64:a4:c8:ee:a5:c4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=1971ba9a9b5e61c118dccd59d29e4f1b0a656b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:75:01:eb:3e:b9:41:73:19:e9:c8:53:44:
98:ac:0d:0d:ea:9c:69:7e:53:95:03:41:55:ac:ee:
ea:6f:8e:77:c3:9e:72:4b:94:8e:fd:56:e7:6c:4b:
10:41:ef:39:09:a4:53:a6:6c:b9:4e:3a:c7:b8:bf:
a9:d6:cb:17:94:3e:9a:4a:82:c5:9b:f0:ae:d9:77:
67:f3:f4:19:5f:c0:23:06:9c:08:84:7b:4b:97:1c:
9c:d5:7c:a3:c8:e4:24:5f:ed:5b:95:4e:ef:ff:30:
a2:0e:3f:09:e6:9b:be:75:a6:13:57:14:d1:87:29:
07:53:82:5c:24:44:46:e6:f6:87:0e:5b:5f:78:5e:
d1:ff:f1:b9:14:27:b6:54:07:81:3e:f7:9e:c0:71:
dc:2a:d1:ca:2a:aa:1a:e2:e7:89:04:52:16:5e:06:
63:a0:1c:dc:14:bb:c1:71:5f:29:c6:0f:90:c4:ef:
81:59:95:b0:4e:88:e5:b8:fa:c2:bb:5e:2b:9e:a3:
f3:8c:a4:f9:80:9f:92:b1:c1:b1:51:da:12:5b:1a:
09:3c:1c:b6:a5:4b:4a:02:51:79:90:f1:8f:79:3f:
db:c0:a1:33:13:3f:81:de:01:b8:c9:1e:7d:ab:22:
2a:84:c5:b3:4b:e6:36:56:02:8f:4f:1e:fe:8c:ce:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:71:BA:9A:9B:5E:61:C1:18:DC:CD:59:D2:9E:4F:1B:0A:65:6B:22
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ec:02:d2:d6:99:b2:04:62:eb:41:1d:61:9d:2d:f2:f3:40:
ce:97:5a:cb:0d:10:74:63:4d:62:7d:4e:06:04:d9:7d:c0:4a:
85:a9:f8:93:a7:4d:a8:ab:ec:f9:16:dd:b1:ad:ee:4f:fe:34:
57:02:fc:c5:76:e8:5f:f2:08:c3:99:f1:70:10:ba:29:2b:b9:
3a:6a:0f:5d:13:30:22:40:09:53:73:f6:4f:50:e4:2c:1d:76:
b0:fb:83:a5:60:04:53:86:fd:fa:d3:3b:58:a0:df:f1:4e:43:
3a:a0:ea:f3:a7:bd:79:5f:e7:b7:b6:0a:39:40:0f:12:34:95:
16:92:bd:a2:b3:c5:c1:17:94:45:d1:b3:75:45:62:c6:0d:c8:
5c:3b:26:b2:a7:fb:61:f5:6a:cf:2c:27:29:56:f0:cc:e3:30:
9f:df:2d:3e:2f:5e:21:c1:c9:02:3f:8d:25:21:11:25:24:d5:
57:d1:93:e4:ca:8c:77:cf:68:04:b0:00:1e:c4:d4:17:59:f6:
25:6d:76:63:c0:c4:53:8b:3a:b1:43:14:82:27:4c:61:4c:89:
98:e7:30:a1:18:3a:b3:8a:d8:05:72:0b:a2:6c:3d:25:5b:12:
db:77:59:d3:cc:c9:3b:7a:7e:50:58:f8:b6:79:38:0c:ed:8e:
65:4b:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:49 2026 by rpki-client