Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: 68GaMvTn1GMyz1D9YyztFFNvkJVbOJ5sNQITZERCGRU=
Subject key identifier: 82:14:E4:D0:11:05:FA:FA:4B:4B:BA:90:1E:0E:83:30:A9:77:6C:DD
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019D9D3FD415F8DBB75819AC89E720191858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 21:01:39 +0000
Manifest this update: Fri 17 Apr 2026 21:01:39 +0000
Manifest next update: Sat 18 Apr 2026 21:01:39 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: 0oDFOpUlQhAqTRY7NK0uMq8p+4Gr3olewI/H6S3zY7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:d4:15:f8:db:b7:58:19:ac:89:e7:20:19:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Apr 17 21:01:39 2026 GMT
Not After : Apr 18 21:01:39 2026 GMT
Subject: CN=8214e4d01105fafa4b4bba901e0e8330a9776cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:bf:55:1d:b1:ae:f6:61:7e:ee:01:3c:51:
4e:51:3a:a8:10:50:f1:34:78:16:b0:5c:13:86:9a:
4b:81:26:68:ed:09:67:2d:e2:5b:29:cd:22:1e:d6:
92:8e:d8:db:2f:8e:a9:e6:1a:13:92:e8:09:ae:52:
10:c9:10:27:b2:fa:a0:fd:75:52:87:cc:5b:9e:06:
9e:25:36:e6:23:89:d8:df:e9:95:bb:38:78:ba:58:
d0:24:25:f9:4e:43:93:b5:7d:d5:18:94:f9:72:29:
c7:07:41:52:36:dd:f0:f0:0c:21:ec:2c:aa:fe:d7:
52:cc:da:6f:41:a5:56:b0:05:96:93:a2:9b:5d:c1:
fd:82:9d:c1:51:39:3e:72:03:e8:80:d3:72:ed:48:
7b:0e:b3:21:50:ba:71:07:88:a5:76:39:23:ed:b3:
9c:fa:2e:fc:40:2e:a4:8c:c9:58:4c:93:3c:5b:81:
61:27:db:ae:1b:f4:62:a1:0e:3b:63:a2:7b:ff:c2:
9a:dd:53:ca:95:9c:51:16:b1:ea:71:ef:8b:60:76:
5e:b7:2e:1f:2d:89:6e:4a:f5:fa:34:70:14:5e:19:
fc:bd:92:85:30:97:78:4d:e0:2a:fc:33:59:18:0d:
7e:fe:ff:06:2f:79:d6:88:a8:d1:17:d1:6c:d4:11:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:14:E4:D0:11:05:FA:FA:4B:4B:BA:90:1E:0E:83:30:A9:77:6C:DD
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:d3:85:72:ec:5f:4b:a9:d1:ca:ad:26:e0:e8:36:9b:30:
b9:62:ad:b0:36:26:c0:cc:8b:97:1a:f0:ce:e8:28:22:cc:c4:
08:8e:1e:da:06:af:b2:88:5b:59:a5:0a:4c:18:d8:fa:05:58:
4d:6b:00:6b:4a:b9:5b:8f:2b:d7:72:a9:41:29:e2:20:49:2f:
51:5a:26:2e:57:18:f5:d5:5f:83:94:0b:19:e0:e4:9c:22:10:
68:bd:74:5a:ce:dd:71:a2:d3:0d:00:6b:ff:a3:a9:03:64:57:
8a:99:66:55:0e:6d:20:56:43:80:f7:d9:58:97:52:58:a9:1f:
a0:f8:a9:8d:c9:4f:14:92:22:12:41:7d:53:1a:19:31:43:f3:
9a:86:bf:e0:f5:cf:b9:69:dd:c8:45:f2:55:69:3c:7b:9c:3b:
57:4c:df:df:20:96:4a:d4:c6:a1:5c:40:33:7f:a5:8b:89:d2:
7f:79:94:34:82:3d:dd:c0:a5:fd:73:7d:85:66:92:39:60:14:
6b:8d:a7:45:f7:5d:d3:03:f7:3c:57:a0:b5:6b:09:14:af:21:
24:43:28:2f:93:45:a2:e1:ab:ef:5a:3e:f2:f4:c4:fa:e6:9e:
d7:26:1b:d1:59:18:9d:21:d9:94:94:4d:c9:f4:99:65:45:cc:
cc:2e:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:15 2026 by rpki-client