Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
File: z03hI7ypCDRpQQ16g98niahsaZk.mft (raw, json)
Hash identifier: Q3SjoDbW8vJdU3GuzYlC5gsyy6v6adyTOwJAJJ72zJo=
Subject key identifier: 0F:30:9D:78:8E:60:F7:49:D2:62:DF:78:7B:19:8F:2A:80:4E:B2:50
Authority key identifier: CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
Certificate issuer: /CN=cf4de123bca9083469410d7a83df2789a86c6999
Certificate serial: 01A0BE79C3F5832E65360089F794901783DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
Manifest number: 5C
Signing time: Sun 20 Sep 2026 11:00:46 +0000
Manifest this update: Sun 20 Sep 2026 11:00:46 +0000
Manifest next update: Mon 21 Sep 2026 11:00:46 +0000
Files and hashes: 1: 3eLWx94YuvwwSRAoKOfCLRLl0zY.asa (hash: 79uscgj28wgq78Iu3Rnp/+KrsVCoQRVb4tTu7d98mgM=)
2: z03hI7ypCDRpQQ16g98niahsaZk.crl (hash: r+oIQRV1JaDPF4Jiy/sgesXU+vsfqPAjSagHPXXQnL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:c3:f5:83:2e:65:36:00:89:f7:94:90:17:83:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4de123bca9083469410d7a83df2789a86c6999
Validity
Not Before: Sep 20 11:00:46 2026 GMT
Not After : Sep 21 11:00:46 2026 GMT
Subject: CN=0f309d788e60f749d262df787b198f2a804eb250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:46:1b:92:4f:4b:ef:1b:a7:fe:54:bd:8b:
47:42:25:ee:00:4e:4a:ef:ff:39:3c:f1:2b:be:d2:
a8:cf:7b:ea:e0:46:3d:41:eb:59:fe:e4:76:2c:a3:
0c:49:16:ae:d6:89:90:94:ca:bc:be:6e:eb:68:7e:
df:f3:5d:0a:1a:a0:c4:67:6d:20:6e:73:d4:7c:dc:
bf:c6:76:75:bf:bc:bc:26:a9:4a:0d:e2:17:e2:ea:
d4:2c:bb:f1:65:cb:51:b8:b0:c3:f2:df:11:c0:0f:
cc:79:dd:2b:ba:8e:1e:1c:ed:1c:c9:27:82:54:6b:
59:cc:78:b5:83:a3:91:63:a7:c0:1c:ed:82:fa:34:
c9:8d:28:42:d8:8c:0b:23:4c:23:18:2f:06:55:d8:
26:b9:f6:ee:f5:59:32:dc:95:4d:dd:26:61:ed:75:
a9:1e:52:ba:7a:9b:f3:ff:60:75:f2:b6:56:ab:ba:
77:35:db:63:46:bb:ca:f8:e2:12:7f:3b:bc:c7:0a:
25:6d:84:d6:bf:03:0d:10:f3:c6:be:46:8d:b4:d2:
4c:32:3e:27:97:4c:51:87:fe:4c:9a:cc:97:04:84:
5e:69:e6:ff:54:58:21:6b:68:24:fa:07:28:44:0d:
4e:95:04:4e:f4:39:a3:9d:98:ae:3b:14:5c:1e:c2:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:30:9D:78:8E:60:F7:49:D2:62:DF:78:7B:19:8F:2A:80:4E:B2:50
X509v3 Authority Key Identifier:
keyid:CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1c:45:85:f6:a1:cc:9b:f7:25:83:27:76:9e:28:c8:d1:7b:
e3:9d:8b:a5:1e:35:82:e2:65:43:4c:69:0b:31:de:a5:05:d2:
38:4c:d6:25:b6:c5:c9:e4:6c:20:99:95:99:e0:9d:ed:19:79:
94:8d:9d:b1:3b:82:87:0d:17:ee:a8:17:37:d2:12:a5:8e:10:
af:6a:14:0f:30:04:d4:28:af:a8:42:0f:99:f4:f6:26:ac:33:
3a:5d:66:1e:2a:31:4f:f1:9f:41:2e:ef:d5:0a:81:5a:27:98:
df:c7:c2:b0:61:be:d5:4f:32:12:96:54:26:a6:d7:69:27:15:
34:7f:17:87:a0:ec:80:39:44:6b:53:a6:85:c3:a0:f9:74:f5:
1d:4f:b2:1b:e7:40:f6:6a:b4:b1:0f:b2:f3:34:32:ef:f6:40:
c5:5a:bd:40:c2:74:7c:9d:7e:70:88:55:ce:9a:6b:00:3a:4e:
04:a7:6e:b9:5c:d2:37:f2:69:84:ed:b1:07:39:9b:d8:a8:26:
cf:f8:81:f7:33:b4:a5:ba:40:ee:00:e8:a3:17:e2:48:4a:c6:
3c:d7:e7:64:39:02:79:d7:27:4c:a6:8d:d8:33:52:75:ec:aa:
bf:85:9f:91:2b:e3:fb:c2:6e:48:1c:69:d5:30:42:5d:0f:51:
f9:d7:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:13 2026 by rpki-client