Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: 4Bch0oXYXgoizHr21Ja3HLmFw3YqAzCAkLCtQ9DlvQE=
Subject key identifier: 3B:D1:7F:A0:D9:CC:13:4B:D6:EC:41:22:23:E2:26:7C:41:53:3B:33
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019FA906E2278884E3ED7BB36EEAAECF32CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0C95
Signing time: Tue 28 Jul 2026 14:00:28 +0000
Manifest this update: Tue 28 Jul 2026 14:00:28 +0000
Manifest next update: Wed 29 Jul 2026 14:00:28 +0000
Files and hashes: 1: aqNwN3-ll9HshPzliK9tAQGxaVo.asa (hash: gjrMmHCii/++x249mqnTyN00ERQyQPVEew9ThELl64I=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: 2FbSSnFIVls1u7QZpvUjuhxrBAQujIybrq4i308GM1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:e2:27:88:84:e3:ed:7b:b3:6e:ea:ae:cf:32:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Jul 28 14:00:28 2026 GMT
Not After : Jul 29 14:00:28 2026 GMT
Subject: CN=3bd17fa0d9cc134bd6ec412223e2267c41533b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:8d:be:e1:54:a6:4e:a1:de:f1:e2:e4:bf:
aa:42:9a:eb:80:c6:da:36:f6:3d:2d:c8:9c:1f:ba:
6a:be:c9:25:eb:8a:f3:a2:ea:ce:cc:5a:a0:af:0f:
f4:6d:eb:32:87:0d:6f:7d:5b:b2:b5:df:5a:4d:98:
d0:a2:ed:de:f1:a4:d8:17:e9:27:c7:78:0c:4b:18:
f8:1d:84:22:ed:e8:39:aa:48:37:44:73:55:3f:f3:
ea:78:9d:61:2f:84:27:56:70:40:46:6c:de:8a:fb:
49:a9:9a:d2:a5:04:6c:f3:1c:ea:61:03:75:e8:06:
87:5a:61:94:16:fd:68:05:c6:b5:c1:a6:70:5f:a6:
9c:6f:ab:02:e2:94:9e:2f:02:05:c1:d2:7b:51:ae:
d2:82:ec:18:c9:a5:87:78:38:de:44:2c:b7:16:b6:
6a:ce:80:5b:65:4f:7c:85:f9:1a:ab:11:18:c7:cf:
58:4f:46:7d:9f:aa:66:9c:7e:a2:2a:98:ff:f3:1f:
4c:ee:f9:ad:75:54:02:ad:89:b0:60:d0:18:3e:4c:
88:10:b9:4e:bb:ad:ea:93:9b:85:9a:3c:81:51:63:
6a:17:3c:5d:da:fa:58:48:81:da:2b:4e:0b:02:8e:
87:59:44:db:f7:cc:6e:27:f9:a8:99:18:fe:df:56:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D1:7F:A0:D9:CC:13:4B:D6:EC:41:22:23:E2:26:7C:41:53:3B:33
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:82:db:7c:64:2f:b9:21:d6:7d:10:77:85:48:e5:eb:7f:3e:
53:df:19:6f:8a:fe:57:7d:56:33:06:fe:2a:05:19:ec:1c:57:
9b:75:4d:2a:29:42:0c:27:c7:6b:fd:88:7a:59:ba:1c:92:6c:
24:eb:68:d4:b0:c7:07:70:dc:98:79:33:02:54:92:b8:25:9e:
77:53:d2:65:7c:a1:f8:0d:a6:67:5d:86:99:4b:7c:2c:ad:41:
53:99:94:c8:ec:32:54:d6:bb:02:ac:d9:e1:81:4a:29:15:88:
c7:a9:25:fd:64:24:58:cb:c9:c9:a7:91:ae:b1:ed:48:07:98:
01:77:75:f6:c2:7d:07:fa:6d:16:a1:d5:fd:ac:30:4a:38:b6:
74:f2:6e:b1:98:c5:2d:e6:cc:fe:86:bc:5b:bd:40:83:ff:cd:
d7:42:e9:e6:de:97:03:41:f5:21:2e:f0:3d:6d:77:43:12:b3:
af:c7:97:01:73:39:99:2c:fa:bf:ba:cc:55:56:12:ca:e0:ea:
b3:6e:b4:42:00:47:f5:05:6e:26:0f:c9:f4:82:0c:04:67:56:
b8:b5:49:88:5b:cb:7e:92:1d:4d:33:3f:0a:2c:bd:de:48:58:
91:86:ba:f7:54:b9:71:36:62:e0:b4:a7:fd:f9:0f:9b:76:b9:
38:2a:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:14 2026 by rpki-client