Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: 5OxvQFU7BKyoVBhVgAXl9CN3fcQLt8OCl9HZHw8rIxs=
Subject key identifier: E0:EE:78:EF:12:64:7D:56:0E:BB:3C:73:C3:00:FC:BC:5B:49:32:99
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 019D99D071BD64611E3FB6A34B159C78F82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 07C2
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: TKIL50vHJx3mU2yrGCZ7cyXz-kA.asa (hash: Vo6w1KKM1/rvMLTgJTDXJJtM6U/uZiIyqWTgty9lyF8=)
2: pchuRg1QLyIFpwfwBa8mUvFC7YI.roa (hash: mgPigocKfj7ADfA3gO1GOzZIymW9WRZZ/OqjW5DV1fM=)
3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: SVSKfZqNoHtk+zSN+r94YHnpM5j/eKU8JT6xKpQVqLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:71:bd:64:61:1e:3f:b6:a3:4b:15:9c:78:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=e0ee78ef12647d560ebb3c73c300fcbc5b493299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:2a:fa:87:d7:3f:41:5e:01:18:d4:b1:8c:
f1:df:63:dd:b6:b3:91:23:55:b9:91:9a:18:d5:0f:
62:9a:d6:e2:f8:7c:41:ac:dd:87:8f:14:65:c6:45:
46:4b:18:8f:0e:5a:4d:23:24:a1:c1:7a:fe:12:77:
20:d7:e4:15:2b:d2:8b:48:64:3a:ef:30:9f:5f:e9:
49:93:9a:2a:a8:aa:17:04:ef:80:b1:17:04:a6:c8:
8f:b0:db:39:ee:df:c7:aa:4a:ad:f1:7f:bc:ff:c8:
47:1d:cf:09:29:8a:57:78:54:f2:c3:0c:3b:d5:2d:
39:6e:6f:f7:dc:55:30:75:45:54:44:65:6f:ff:84:
17:2e:8e:10:ea:62:30:67:07:62:97:54:34:31:a0:
24:82:88:af:d1:1b:f7:ce:aa:3b:17:73:a5:12:e2:
de:2d:7b:25:f0:1d:7a:c4:18:59:61:f9:bf:a6:9d:
6e:8e:29:1a:57:2b:87:ef:a1:d4:91:dd:39:13:09:
e5:2e:11:fe:92:78:3f:0f:41:c4:23:ca:67:aa:a0:
50:6c:3b:5a:13:12:74:6e:d7:b0:2d:3f:ca:bb:c0:
be:cb:1a:bb:3e:d6:aa:1e:1f:e7:7e:ee:19:c9:9c:
7c:ec:cc:4e:c9:38:67:26:71:3d:57:8c:24:7f:95:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EE:78:EF:12:64:7D:56:0E:BB:3C:73:C3:00:FC:BC:5B:49:32:99
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0e:66:f4:12:f9:d7:36:de:2a:72:a0:d9:3f:1e:d6:4c:9c:
51:1e:ff:9b:c0:b5:ad:c8:0a:a5:1f:ef:3a:f1:08:b6:f7:71:
e6:3d:94:e1:8d:5d:81:7a:ad:37:bc:02:a8:81:88:3a:3e:90:
7d:3f:fc:f8:93:96:4a:32:4f:ac:3f:6d:01:bf:36:11:df:87:
03:d6:ee:34:8d:dd:57:94:6a:77:07:28:8d:60:27:4d:93:c3:
df:2b:13:ac:be:16:b8:35:38:f9:ad:65:31:26:9f:c3:fe:2c:
97:43:2e:f9:54:b0:9d:94:2e:cb:cd:12:fb:76:09:a1:1b:ca:
6e:6f:2f:27:ad:56:30:fa:c6:0c:a3:42:0c:c9:36:b5:1e:d6:
ca:96:cd:c9:e8:f0:ab:fd:ac:83:1f:05:d2:68:b7:d4:8e:39:
21:81:c5:61:d0:2f:1b:a0:f4:c0:3c:49:13:9d:d7:75:e4:a0:
61:cb:e7:e1:a8:24:7d:92:34:5f:f9:45:6d:a3:a7:14:eb:d1:
e9:d8:c4:0c:b4:b5:26:00:d2:9b:18:02:cc:17:09:cb:4f:2b:
dd:fd:ec:e2:e2:32:d6:fe:05:0e:03:b4:dc:18:20:bf:ac:e7:
25:e3:83:3c:31:f3:7d:10:44:50:84:3c:e0:b9:fd:cf:e8:c0:
45:7c:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:52 2026 by rpki-client