Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: ZOhWWHWy4m9N4wD+REye0n2We36MG+PypewGka3dErA=
Subject key identifier: 6A:D7:93:39:F4:73:09:23:B0:2A:4D:51:5A:CF:B5:06:51:49:C9:96
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019CA9463EE6186CE97B34D7419D58448E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0B07
Signing time: Sun 01 Mar 2026 12:01:18 +0000
Manifest this update: Sun 01 Mar 2026 12:01:18 +0000
Manifest next update: Mon 02 Mar 2026 12:01:18 +0000
Files and hashes: 1: 84ShoK67lkAzxpq5fgwmHF7-Mug.asa (hash: M4b3tLPWFgypK3mWPPB8dw2tRn1bXCTWo2xZXTLHO8o=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: NvDrhAZbiaDeCNAzrNxEO7HoOJ1BIz9XrrBAw5a19cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:3e:e6:18:6c:e9:7b:34:d7:41:9d:58:44:8e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Mar 1 12:01:18 2026 GMT
Not After : Mar 2 12:01:18 2026 GMT
Subject: CN=6ad79339f4730923b02a4d515acfb5065149c996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:8d:af:74:26:96:f6:cf:9a:dd:8d:a5:c6:
07:eb:9d:43:b3:4f:f6:19:52:fa:c1:c2:92:1b:a8:
59:ed:b0:c6:d0:8a:dd:a1:e4:45:49:d1:b0:81:fe:
0e:df:a1:35:9d:81:68:35:4c:8a:e9:0c:f4:a0:76:
17:82:43:33:df:a4:6f:af:ee:6a:5d:64:42:60:5e:
c3:4a:1c:16:f8:46:18:2c:8f:bd:61:0c:d0:a7:d0:
3c:54:f9:4f:3b:64:d2:36:78:81:de:6a:7c:20:5b:
b7:bb:af:f6:e0:d0:26:2d:d4:e3:3b:a7:b1:9f:f6:
2c:3d:e9:08:0c:cc:60:88:12:21:74:d9:ac:40:54:
49:49:5d:53:72:ac:da:af:66:23:47:40:b7:e4:c7:
de:56:64:f2:f2:19:44:48:74:e1:e2:49:bd:ee:da:
36:a3:3d:8c:cd:dd:fd:73:d2:89:ae:ff:4f:1b:3e:
70:16:9b:83:e9:8a:8d:4c:fb:81:e1:d2:26:94:4a:
0a:a5:13:b9:66:b4:f9:d2:16:82:54:a9:91:68:f1:
25:cd:ed:4f:be:65:d8:4b:46:c3:02:7e:4d:cf:dd:
d5:5e:6f:5c:81:b6:c7:b5:9f:e9:2f:c1:91:51:46:
50:9a:e3:21:cd:e0:0f:b8:a9:16:61:07:da:22:8c:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:93:39:F4:73:09:23:B0:2A:4D:51:5A:CF:B5:06:51:49:C9:96
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ae:d6:a6:bf:42:1a:c6:8e:f2:ba:56:39:55:8b:a3:38:53:
ed:19:90:61:68:b2:a6:f6:75:5a:c6:12:27:b5:23:fc:ee:71:
49:20:c2:5b:5d:02:66:e8:89:4d:d1:a8:91:e5:48:8e:ee:7e:
a4:af:1f:ac:7c:c5:e2:97:7b:57:8b:03:6c:10:f5:3f:75:e1:
e0:28:6e:87:26:f6:ab:bc:46:05:3b:a7:32:e4:18:e2:82:5a:
c0:c4:f6:71:fc:6b:82:05:10:66:46:d7:b7:39:ea:d3:22:98:
1c:e0:af:41:be:a2:d6:e2:7d:ab:e4:e5:2a:f8:0c:1c:0f:7a:
ec:14:47:80:25:66:e9:40:6c:60:08:b7:96:f2:69:ad:3e:c0:
bc:53:89:16:42:d8:c0:a5:39:ff:df:a5:a7:bf:79:08:72:3f:
32:f4:ac:2b:de:ed:0d:ff:04:12:b8:45:5c:88:15:15:ce:27:
7d:16:ae:21:c4:55:65:1f:e5:63:ea:09:8f:c1:c1:e0:3c:11:
8c:d6:f9:6c:df:3f:a0:ec:7e:f5:50:bc:d2:74:f7:15:ff:45:
3e:df:67:b6:1e:7b:8f:cc:d2:47:19:2a:8b:4d:83:b4:00:6f:
3f:ee:16:3d:4a:79:10:d8:e6:5c:4d:42:24:c5:46:1c:c2:de:
24:d8:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:31 2026 by rpki-client