Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: 2a4BAjGy6dSlYAgFhl/THzp9N5T3X08PO6fv69oKIZU=
Subject key identifier: 31:56:4F:3D:8E:9E:DA:DA:1E:11:04:23:60:DF:3A:77:06:84:D6:26
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019FAE6408988670C7FC7B9B7FD83B5C4D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 15:00:19 +0000
Manifest this update: Wed 29 Jul 2026 15:00:19 +0000
Manifest next update: Thu 30 Jul 2026 15:00:19 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: MObxR2FFRsk7priA6y+lcXLSyeUOxLHIRT5BNYmUrj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:08:98:86:70:c7:fc:7b:9b:7f:d8:3b:5c:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jul 29 15:00:19 2026 GMT
Not After : Jul 30 15:00:19 2026 GMT
Subject: CN=31564f3d8e9edada1e11042360df3a770684d626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:92:b4:cc:e8:1c:02:06:da:91:0f:58:fa:
6e:96:8b:bc:06:1f:da:6c:67:98:74:81:9e:51:26:
1e:07:a3:44:75:31:c9:5d:8d:6a:16:45:e1:c0:70:
89:28:5b:15:39:0d:41:22:c7:5e:03:7c:af:be:b0:
e2:d6:9e:ea:5b:88:73:4d:e2:4c:92:bb:5e:4a:76:
38:70:9c:90:66:64:b4:28:e7:9b:b3:a9:f9:d5:26:
d3:42:fb:ff:cd:78:71:a6:9f:4c:6f:34:03:85:2c:
3d:44:b0:70:43:a1:49:99:a7:4a:84:9c:5f:5a:1b:
a6:01:01:5d:cc:eb:b1:75:58:75:35:46:e4:11:0c:
62:04:04:83:50:cf:5b:71:64:d4:d0:aa:ba:86:5e:
e9:f7:8b:6e:9a:40:26:d1:6d:b6:fb:18:22:7b:61:
b9:d1:81:29:7e:86:32:82:4a:98:3e:65:a4:4c:38:
98:4e:0f:f4:d2:8c:90:88:f6:d9:04:c1:e5:33:4d:
1a:83:5e:22:5e:29:18:c6:66:18:e8:48:cb:f7:33:
12:bf:86:b1:2d:41:20:dc:2d:4d:3f:dc:1e:c3:80:
e3:3e:2e:90:c3:c7:1b:ed:3c:78:36:c4:1a:82:6d:
65:09:48:37:57:65:26:d2:14:12:38:f2:55:c6:61:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:56:4F:3D:8E:9E:DA:DA:1E:11:04:23:60:DF:3A:77:06:84:D6:26
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:85:5b:c0:dd:f4:9c:76:48:06:27:e4:94:1f:c0:2d:a2:7c:
b8:20:43:c0:ac:a3:ff:2f:56:2f:87:55:0e:94:11:14:a5:ea:
62:f0:a3:76:2b:d7:6c:27:b3:b9:4a:10:2e:34:2e:e3:a3:d5:
ed:b4:f5:7b:69:d5:47:83:f2:19:18:d1:90:f5:5c:2e:90:73:
59:e3:34:75:9f:33:79:16:9a:19:0f:88:f1:8a:fe:ca:97:0a:
70:09:63:8c:ed:7a:c8:b0:fa:ca:f5:b2:9c:3c:3d:5c:2b:cd:
12:ba:ed:8b:b4:d1:c9:26:b0:0b:fe:1f:7e:f0:9e:ea:f1:da:
91:d8:0c:bf:5d:0d:f3:20:f5:d3:4f:b7:86:69:af:9a:73:ae:
51:8e:c7:b2:b4:5b:9d:48:9b:dc:08:0c:fa:6d:05:a3:e4:45:
bb:27:1b:46:77:ed:0e:2a:da:14:ad:cf:5d:53:51:2a:ea:ed:
5d:43:d2:1c:ce:c5:b8:76:21:1f:59:4f:2d:de:c2:93:07:53:
e0:7b:b6:4e:00:d8:40:ae:5a:a9:d1:25:55:dd:58:cd:1c:9f:
03:65:d3:82:37:62:32:92:58:79:63:95:04:ea:77:02:c1:86:
8b:ff:74:ce:07:a4:e9:ba:dd:6c:1e:6f:b9:c5:d3:e9:6a:41:
85:b6:8a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:57:06 2026 by rpki-client