Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: NPWcM1QYHUtJyd6feOiZVd7A2ajW2EGZv/s9D1at8GI=
Subject key identifier: B7:4F:C8:F1:FD:8D:9B:66:27:56:3A:19:1D:8E:AE:5F:70:EB:FD:96
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 019D9B8810C81D9ED981F29FDEC2BD0338D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0D7D
Signing time: Fri 17 Apr 2026 13:01:18 +0000
Manifest this update: Fri 17 Apr 2026 13:01:18 +0000
Manifest next update: Sat 18 Apr 2026 13:01:18 +0000
Files and hashes: 1: 0k8JSiXuI9yOlNc8R8ZC7myFR1s.roa (hash: hkDwNbOr9T8egEZmcAGrpawWPuV3eUejQ8UO6ApjR78=)
2: X2hmI0ITvkol3ThHFEh2esp_nlo.roa (hash: 5A42CZM5REZ7GUpO8TgAL25VLRWEXA8JbRN9OjEDwOA=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: E8FStgGrR5JDjDLMq5r2LhMdjClDYIZnaYqzxd3Vc1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:10:c8:1d:9e:d9:81:f2:9f:de:c2:bd:03:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Apr 17 13:01:18 2026 GMT
Not After : Apr 18 13:01:18 2026 GMT
Subject: CN=b74fc8f1fd8d9b6627563a191d8eae5f70ebfd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:5f:d2:da:03:cf:e0:0d:5e:09:5a:97:f0:
83:10:05:58:30:7b:3e:3e:5e:dc:2b:f8:cf:67:32:
3b:40:69:5e:83:cc:44:8a:dc:25:67:d0:97:3d:c6:
f8:ed:9c:bf:9a:a8:0e:7b:28:d0:cb:47:8b:79:23:
8f:a7:9f:23:bc:c5:b8:15:58:dd:51:b3:6e:d1:42:
73:00:80:db:56:04:c9:df:dd:93:0f:6b:76:a3:83:
0d:37:38:eb:31:58:51:75:20:df:85:16:30:f6:0a:
07:62:98:f4:58:2d:ca:de:62:05:3e:9f:09:de:cd:
1f:37:fc:c4:4c:d2:15:5b:35:3f:04:41:fb:27:b2:
14:a9:6d:91:72:00:f3:44:9c:66:01:92:28:44:bc:
4b:88:a4:04:75:e3:b3:b9:87:fb:e0:46:b5:5a:d9:
5d:26:e1:e7:3d:e6:90:a5:84:49:3e:32:76:d8:83:
a9:07:45:43:13:a5:a6:bb:66:85:ec:b9:74:9f:89:
3a:ff:34:aa:63:d5:67:42:38:6d:e2:8d:85:14:bd:
35:cf:18:ef:e7:44:27:3f:ec:dc:3f:49:b5:8c:eb:
7c:e2:57:99:65:d4:ae:16:19:df:9d:87:74:b7:cf:
a3:47:82:d1:7f:05:0a:11:ad:22:2c:6d:dc:29:73:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:C8:F1:FD:8D:9B:66:27:56:3A:19:1D:8E:AE:5F:70:EB:FD:96
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:20:33:41:50:05:9e:8a:33:7a:89:87:87:ad:1f:e0:9b:08:
33:9c:4d:b9:10:31:91:ea:f1:e4:01:93:de:25:e7:1e:3f:c6:
fa:22:88:14:3b:c5:fc:4b:30:22:ef:8e:4f:90:a5:e4:b8:7d:
ee:9f:a2:a1:90:1d:8d:9d:56:f8:65:3b:a1:8b:69:aa:6a:04:
36:d0:fc:99:82:0c:22:2c:e5:81:db:02:4f:1c:95:c5:bd:4b:
89:b7:50:f2:3b:f7:46:37:18:3f:78:c7:e3:64:94:b3:17:be:
00:43:bb:80:45:d2:66:d6:bf:64:cc:fe:8d:02:5f:16:5e:00:
f5:ce:46:75:1d:26:0f:6a:02:63:f1:68:8b:05:11:ce:8b:19:
59:cd:7c:88:46:fa:ed:bd:b3:61:24:d8:d0:41:fc:e3:fe:d6:
55:5a:a8:d9:00:35:6b:b1:42:06:a7:a5:64:40:9b:ca:d3:ab:
c5:9a:ea:a4:bc:95:37:ac:94:0d:56:e1:a0:2c:52:b7:e8:bb:
f6:cc:ac:bf:58:28:6b:9e:8f:67:5f:2b:05:f4:a7:ce:fd:ea:
4b:1a:b0:35:23:21:b5:4e:42:84:05:4e:f8:b6:e0:b7:47:2d:
52:33:25:f5:4a:b3:bc:d8:16:c3:92:66:45:9e:c7:ee:28:87:
84:72:d3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:54 2026 by rpki-client