Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: iCzVMR9IuIh/N88qodqROwQOhmquprmw4a0iye7fh48=
Subject key identifier: E1:59:87:34:19:E5:DF:7A:24:15:E4:B9:74:0A:CE:D2:B1:06:88:D4
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019EBF5A2940DCFCD27C793A107878AB1A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0C1C
Signing time: Sat 13 Jun 2026 05:00:17 +0000
Manifest this update: Sat 13 Jun 2026 05:00:17 +0000
Manifest next update: Sun 14 Jun 2026 05:00:17 +0000
Files and hashes: 1: aqNwN3-ll9HshPzliK9tAQGxaVo.asa (hash: gjrMmHCii/++x249mqnTyN00ERQyQPVEew9ThELl64I=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: 17vwlkz/d6pxRkSfVDnmoUWIbOwFA7L7iieD1KtWlJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:29:40:dc:fc:d2:7c:79:3a:10:78:78:ab:1a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Jun 13 05:00:17 2026 GMT
Not After : Jun 14 05:00:17 2026 GMT
Subject: CN=e159873419e5df7a2415e4b9740aced2b10688d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:74:f2:d5:ab:5c:a5:0d:e2:3b:88:18:29:
26:13:0f:f9:f7:f4:7a:ec:53:29:13:32:39:00:17:
29:d9:dc:8f:8c:08:ab:e5:86:fa:bd:b9:96:c7:02:
f6:2b:03:40:ba:1a:13:21:76:ef:5f:95:41:6a:42:
89:c4:c4:e0:46:28:18:7d:85:0e:c3:90:7d:dd:e5:
ee:98:4c:dd:4a:f5:70:f5:92:06:da:39:ee:4e:f3:
3d:a6:7b:0e:a2:5c:5f:22:a6:c1:88:1b:07:59:f2:
0e:bd:63:d8:cc:72:f7:bf:d6:c3:5e:7c:d7:dc:47:
e6:30:fe:28:38:5e:f7:d2:79:a4:9e:60:fa:bc:63:
81:26:2b:d0:9c:06:c6:c4:f9:b9:fc:50:ad:54:df:
a7:10:f0:db:74:95:7c:2b:42:b1:89:6b:fc:02:b6:
97:33:2e:10:36:48:a3:74:04:6b:f9:6a:ef:34:47:
dc:d2:84:9b:66:8d:7c:6c:e5:8f:ef:20:c6:2f:ac:
fe:da:d1:94:51:c7:9f:b5:ac:2b:38:6b:f1:ce:df:
d4:5d:31:0b:b5:f2:dd:ef:e4:2d:be:1a:2d:f1:1a:
fc:f7:22:db:3e:b2:cc:9a:0b:75:ff:de:8d:3e:98:
de:41:22:0f:78:d6:b7:7e:c5:44:13:a6:99:f5:2d:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:87:34:19:E5:DF:7A:24:15:E4:B9:74:0A:CE:D2:B1:06:88:D4
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:32:2e:82:02:b8:6a:88:97:68:df:b7:09:e5:4a:b7:5c:8b:
e2:e4:a7:a0:d6:a5:20:0d:a9:88:1b:b3:12:f3:ad:59:bb:03:
a1:f0:7b:fa:a8:2c:18:8a:e6:c2:97:24:4e:cb:cd:2e:89:66:
c4:63:85:f9:24:30:12:8f:3a:5d:36:de:ec:d6:8d:45:73:73:
8a:a7:74:de:17:6b:9d:07:50:13:3f:ac:c1:02:ee:66:8d:ad:
38:18:8b:fd:d6:40:aa:63:a8:60:c3:df:22:3c:2d:bf:be:ce:
4e:b7:40:74:2e:84:14:43:02:3e:39:dd:f5:15:33:3c:65:6f:
45:b6:f2:bf:f2:2c:46:ce:52:d1:34:95:e2:ce:28:77:2a:ce:
f1:a6:9b:c9:9b:c7:4b:ac:b6:4c:2b:ad:ce:fd:72:91:94:be:
2a:0b:d6:ab:7e:30:d9:a1:a4:73:ba:db:d6:6e:38:e6:db:76:
bc:37:e4:5f:7a:26:26:33:50:d9:36:b6:f1:aa:65:6f:a5:fa:
14:50:6f:06:3b:a1:72:9e:0c:72:f8:47:85:93:b0:20:74:81:
0b:75:3c:56:6e:6a:20:ab:46:18:db:41:61:e4:dd:e4:85:89:
b4:ca:01:b3:e1:75:6a:cf:a7:d2:d1:f3:94:45:d3:b1:94:cb:
d4:68:dd:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WilA3PzSfHk6EHh4qxqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmNiYTEwYWI0NjVjZjBlZTNlNzYwMjVjNjdmODU1NGQy
ZDAxYTUwHhcNMjYwNjEzMDUwMDE3WhcNMjYwNjE0MDUwMDE3WjAzMTEwLwYDVQQD
EyhlMTU5ODczNDE5ZTVkZjdhMjQxNWU0Yjk3NDBhY2VkMmIxMDY4OGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfh08tWrXKUN4juIGCkmEw/59/R6
7FMpEzI5ABcp2dyPjAir5Yb6vbmWxwL2KwNAuhoTIXbvX5VBakKJxMTgRigYfYUO
w5B93eXumEzdSvVw9ZIG2jnuTvM9pnsOolxfIqbBiBsHWfIOvWPYzHL3v9bDXnzX
3EfmMP4oOF730nmknmD6vGOBJivQnAbGxPm5/FCtVN+nEPDbdJV8K0KxiWv8AraX
My4QNkijdARr+WrvNEfc0oSbZo18bOWP7yDGL6z+2tGUUceftawrOGvxzt/UXTEL
tfLd7+Qtvhot8Rr89yLbPrLMmgt1/96NPpjeQSIPeNa3fsVEE6aZ9S1PcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFZhzQZ5d96JBXkuXQKztKxBojUMB8GA1UdIwQY
MBaAFM1suhCrRlzw7j52Alxn+FVNLQGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81MWRkMjEtOWRiMS00MjI0LTlhYWMt
NTZhZmMzY2JkZjRlLzEveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81MWRkMjEtOWRiMS00MjI0LTlhYWMtNTZhZmMzY2JkZjRl
LzEveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzIuggK4
aoiXaN+3CeVKt1yL4uSnoNalIA2piBuzEvOtWbsDofB7+qgsGIrmwpckTsvNLolm
xGOF+SQwEo86XTbe7NaNRXNziqd03hdrnQdQEz+swQLuZo2tOBiL/dZAqmOoYMPf
Ijwtv77OTrdAdC6EFEMCPjnd9RUzPGVvRbbyv/IsRs5S0TSV4s4odyrO8aabyZvH
S6y2TCutzv1ykZS+KgvWq34w2aGkc7rb1m445tt2vDfkX3omJjNQ2Ta28aplb6X6
FFBvBjuhcp4McvhHhZOwIHSBC3U8Vm5qIKtGGNtBYeTd5IWJtMoBs+F1as+n0tHz
lEXTsZTL1GjdQA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:11 2026 by rpki-client