Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: OQvjqkurX9OvdpZlVTdjPd3P663UoCNfaDdkC8ZumpY=
Subject key identifier: 7F:DC:F9:0E:E0:15:17:D7:52:6E:60:BD:AE:3D:C7:31:CB:A9:30:0B
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 01A0C7EABA50B5D7512B687FAC2D05FB4362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0D2D
Signing time: Tue 22 Sep 2026 07:00:44 +0000
Manifest this update: Tue 22 Sep 2026 07:00:44 +0000
Manifest next update: Wed 23 Sep 2026 07:00:44 +0000
Files and hashes: 1: Fqi5GgJzBuBU-O3Svwls2oA58e0.asa (hash: aVFzS1UCWhMVB1SwHJ+JRLsU/2I8DVI5pdRtjMd5wcs=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: v8gM0vC99xPgbQ1lUERYnuUk/e6v0MRw7yadQqfLhUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:ba:50:b5:d7:51:2b:68:7f:ac:2d:05:fb:43:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Sep 22 07:00:44 2026 GMT
Not After : Sep 23 07:00:44 2026 GMT
Subject: CN=7fdcf90ee01517d7526e60bdae3dc731cba9300b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f9:cb:9d:a6:11:2e:1a:33:90:dd:da:a1:26:
b8:3a:d3:cc:6c:11:d8:72:fd:18:56:30:48:84:6d:
85:71:1e:50:70:da:20:e4:e9:b2:5f:43:e2:d2:4b:
c4:a8:b8:39:f4:8d:f8:8c:dc:30:b8:52:3a:30:3e:
cd:5b:cf:1e:a7:0c:fe:7b:e6:c7:c1:78:8e:c8:22:
a8:f1:2f:94:44:90:71:d7:95:ef:6b:9a:05:40:e0:
22:8e:9d:76:90:38:6d:55:1a:31:c9:05:50:f0:34:
32:e0:86:c8:1f:ba:66:d4:1e:43:04:cd:a5:b3:77:
ea:d9:a8:d3:d2:5c:5c:9c:d6:1b:e8:8d:5d:64:34:
f7:6c:88:9a:7a:7f:a5:82:c6:b5:b7:fa:ea:07:95:
bc:c3:3a:41:11:b3:bb:e6:cf:97:69:80:52:b2:82:
3b:ba:e0:33:55:81:25:84:8f:88:1a:13:ce:52:cb:
fd:da:50:55:18:20:1f:d1:56:9e:fa:b8:25:11:9a:
0c:a6:aa:0f:97:2a:89:65:9e:60:d4:26:69:e8:ce:
eb:24:eb:c5:1e:9e:a1:14:eb:6b:d2:80:12:44:08:
62:24:31:44:5e:8e:fc:e9:3d:85:06:e6:9a:36:ec:
7e:5c:d8:c4:63:17:bf:86:6f:08:94:68:4c:8a:f6:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:F9:0E:E0:15:17:D7:52:6E:60:BD:AE:3D:C7:31:CB:A9:30:0B
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:18:55:e6:ff:45:63:db:35:84:3e:dc:b4:04:ac:f3:32:82:
ed:c7:61:de:70:f0:cc:e7:84:ac:45:fe:b2:21:bb:70:d6:84:
36:04:90:e0:5c:94:e6:70:7d:fd:09:b3:90:b3:a5:20:b3:fa:
8f:6a:80:8c:f5:e4:92:ef:f4:cc:c8:52:e3:b4:9d:e2:3f:2f:
05:a0:e1:d4:19:b9:7c:41:bc:05:e0:fe:c4:9f:d0:04:45:86:
7d:b0:f4:1c:54:ce:6e:07:4d:d1:e7:4f:4f:3a:e1:38:01:13:
00:9b:ff:8d:5c:f1:23:6c:dc:9f:7d:4e:7d:21:a2:7c:92:8a:
ae:5e:ef:ca:39:fa:ac:82:0a:72:80:be:88:18:27:3f:ac:53:
0f:7a:51:17:56:f4:9c:f4:41:18:47:3a:c3:bc:51:72:6e:2d:
b3:34:1d:a7:1f:4a:d2:a9:2d:47:dd:fd:5e:dd:ff:42:ec:f4:
6d:5e:2a:10:fb:cf:61:55:f3:c4:ad:f9:d1:61:f4:8c:01:a1:
29:8c:b8:98:39:9c:45:f5:01:e7:53:2a:4b:08:25:80:e1:55:
d1:6a:68:bd:f2:3e:5c:04:16:52:17:a1:e9:c1:45:96:bd:24:
bc:3b:a7:a0:b2:19:d3:77:82:83:f0:bc:db:11:5e:5d:96:d1:
8e:bc:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:55:24 2026 by rpki-client