Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: nXl6MZzyYRgkdypTNI4IEsmW7lJYwqWUQXdxX2tmIG4=
Subject key identifier: 39:AB:2B:77:66:F9:A9:8E:E8:CF:16:C8:91:99:55:CB:5A:59:AC:60
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 019CADFDF621EB8B9EAECD8DB7DB4BFC73CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0D02
Signing time: Mon 02 Mar 2026 10:00:27 +0000
Manifest this update: Mon 02 Mar 2026 10:00:27 +0000
Manifest next update: Tue 03 Mar 2026 10:00:27 +0000
Files and hashes: 1: 0k8JSiXuI9yOlNc8R8ZC7myFR1s.roa (hash: hkDwNbOr9T8egEZmcAGrpawWPuV3eUejQ8UO6ApjR78=)
2: X2hmI0ITvkol3ThHFEh2esp_nlo.roa (hash: 5A42CZM5REZ7GUpO8TgAL25VLRWEXA8JbRN9OjEDwOA=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: A52tCCm5ScYf83HWYzO5svoab5V+4qISjaQJC25TgSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:f6:21:eb:8b:9e:ae:cd:8d:b7:db:4b:fc:73:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Mar 2 10:00:27 2026 GMT
Not After : Mar 3 10:00:27 2026 GMT
Subject: CN=39ab2b7766f9a98ee8cf16c8919955cb5a59ac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:0f:83:d8:2c:14:5a:1b:19:bb:6e:c6:5e:
89:ec:86:ff:da:ac:9d:0a:20:db:24:0b:ea:83:62:
24:4f:44:76:73:52:0c:60:32:bb:1f:81:75:49:d0:
5a:4c:2a:06:cf:19:56:e2:09:48:83:2f:8b:cb:af:
1d:a5:d7:fa:d3:f9:15:7b:cc:e6:7b:40:65:99:b4:
e2:82:e8:8d:d4:b4:31:8e:ec:75:51:25:a4:e3:bf:
bb:e2:07:20:d7:1c:18:74:9e:73:fb:70:51:76:3e:
5b:50:e5:73:d8:49:74:4e:eb:ef:f5:48:3f:37:ca:
05:54:52:da:77:7b:ba:31:1a:98:79:15:c5:18:5a:
03:7a:56:65:b3:59:f1:88:aa:e9:88:95:74:e7:1a:
83:d8:26:a0:42:77:b2:6f:35:57:a9:48:a6:5e:45:
28:33:98:9b:c6:67:03:ff:7c:54:ce:32:d4:d4:9c:
c6:34:81:0a:96:95:f8:31:34:38:fa:a2:40:c5:41:
67:7a:22:e3:d7:81:03:cf:d7:a6:ae:48:dd:07:6c:
02:1e:ec:76:85:57:fa:6e:c1:0c:75:7c:e7:28:ab:
17:e7:91:8e:da:26:5a:e1:5a:f5:e2:71:64:10:df:
37:f5:90:10:fe:86:15:8a:e4:3d:c5:64:ed:cf:f2:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AB:2B:77:66:F9:A9:8E:E8:CF:16:C8:91:99:55:CB:5A:59:AC:60
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ad:18:f7:05:ef:92:9b:48:69:59:43:7c:aa:d2:2c:ee:04:
61:16:5b:ee:c4:70:c9:50:39:19:a1:16:22:a4:ac:3e:d8:2c:
25:1b:66:9e:e6:5b:d5:be:6f:67:5e:99:83:b6:96:99:b8:fc:
04:a2:a8:7f:64:1d:a3:81:25:5c:a9:7b:4c:f0:4f:81:d8:fd:
7b:e5:4c:79:d8:70:07:c7:20:bc:92:a9:b1:a5:29:23:f7:cb:
01:14:13:61:18:59:9b:67:74:52:f7:41:9b:af:bc:4a:be:3a:
95:87:df:5c:56:b2:df:c3:25:a8:8e:17:e3:9c:83:31:f8:82:
ca:c2:08:21:c7:04:bd:9b:b5:d9:4b:4a:25:78:9a:f5:e6:ee:
b3:5d:fd:05:50:62:bc:b2:80:07:db:22:f6:97:0f:30:3f:8f:
e5:5a:8f:2e:d0:d9:92:16:68:a5:70:fa:f3:31:d8:61:89:5a:
9a:fc:ec:7b:42:9f:b6:70:3e:42:03:46:73:2a:7b:c3:0b:16:
8a:88:27:46:68:15:e8:0d:f5:6c:be:68:63:42:50:fa:7e:8c:
7a:d8:43:a3:78:26:15:ff:04:78:3f:8c:3c:aa:92:b3:6e:b5:
37:51:2f:bd:15:4c:59:55:fe:5f:40:c6:a4:79:fa:dd:ea:97:
88:88:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:25 2026 by rpki-client