Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: fngHPmat0NLB1RvmDCBscxf2EhA/+F2Gbqc/d4Z0ao0=
Subject key identifier: F8:F7:3B:0A:4F:35:B1:CE:15:D2:58:38:CF:AB:10:84:3C:57:BF:99
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 019CA869D09B7124299AF51143A8EE3038AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 0745
Signing time: Sun 01 Mar 2026 08:00:32 +0000
Manifest this update: Sun 01 Mar 2026 08:00:32 +0000
Manifest next update: Mon 02 Mar 2026 08:00:32 +0000
Files and hashes: 1: TKIL50vHJx3mU2yrGCZ7cyXz-kA.asa (hash: Vo6w1KKM1/rvMLTgJTDXJJtM6U/uZiIyqWTgty9lyF8=)
2: pchuRg1QLyIFpwfwBa8mUvFC7YI.roa (hash: mgPigocKfj7ADfA3gO1GOzZIymW9WRZZ/OqjW5DV1fM=)
3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: a/mLyUQKNgXEq5U4H5LMFa6S61f/fdB6s+vx/oaHZf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:d0:9b:71:24:29:9a:f5:11:43:a8:ee:30:38:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Mar 1 08:00:32 2026 GMT
Not After : Mar 2 08:00:32 2026 GMT
Subject: CN=f8f73b0a4f35b1ce15d25838cfab10843c57bf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:57:58:b4:32:70:3d:a7:dc:32:de:0a:79:
ec:81:ec:4d:be:38:7e:95:96:5d:fa:7a:d2:6e:da:
c8:1f:a2:13:d9:a7:72:33:08:d6:64:6d:3f:5c:82:
e6:8e:cd:08:b4:a3:7f:0d:39:b2:35:6f:ec:9a:1e:
86:a0:d3:be:3c:39:27:42:06:d5:b6:49:5a:a4:e3:
2a:05:bd:2f:18:92:33:e0:ef:b8:83:51:d9:c8:1e:
4a:5a:a7:d9:1d:f9:69:a6:72:36:88:4c:0a:57:a1:
cc:b6:01:c2:cb:11:f7:ac:52:69:8e:b3:c5:d4:8f:
10:6c:b7:33:f1:13:fb:75:00:69:5b:38:1f:06:f6:
7d:46:af:2c:a9:ac:e2:93:2b:a2:f4:c9:29:9f:3e:
50:04:47:76:29:6f:49:ec:9b:75:f0:24:34:6c:31:
25:81:db:fd:a3:b2:d8:12:c7:28:09:e7:2d:59:82:
b1:40:aa:c3:c1:84:78:51:9a:50:ec:3c:97:32:56:
c0:83:be:cd:1b:5c:74:be:c7:a7:ca:c0:58:f0:ab:
84:92:47:b3:91:93:5b:f6:f8:33:7c:09:46:ab:06:
8e:eb:ff:d7:63:5c:f9:98:6d:e0:d4:c9:e2:50:fe:
3f:7d:83:c6:bf:c2:6f:52:a5:1f:2d:a6:d5:f7:14:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F7:3B:0A:4F:35:B1:CE:15:D2:58:38:CF:AB:10:84:3C:57:BF:99
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9a:28:d2:91:6e:ea:c0:03:75:8c:88:a3:ae:cd:3f:a5:cc:
72:27:8d:72:24:f9:ca:fe:89:95:54:c7:d7:1b:ff:f1:8f:63:
c5:a0:34:cb:d5:ea:51:74:e9:28:a6:8f:4f:5d:00:60:cb:92:
a5:1e:25:7f:a6:81:f6:92:ca:c7:06:68:1b:8b:4b:69:1f:b4:
6c:ae:4e:c0:36:1b:45:1e:84:79:28:4d:b9:6b:37:0b:5c:a0:
ea:78:f6:3a:e2:b1:80:55:c8:ce:70:fc:d4:71:04:49:e6:37:
34:d9:74:48:5e:75:60:84:78:64:12:c5:8f:40:9c:1f:c0:6c:
bf:73:9c:90:88:51:a4:cb:1a:ff:bb:f5:5f:dd:2f:b5:75:b3:
63:a2:7b:73:c1:a8:24:8a:89:c1:35:5c:c7:96:f8:60:8a:f1:
01:76:a2:1f:ee:f4:bf:e5:e5:25:f7:37:91:92:ec:1d:e6:b6:
2b:a4:4e:29:7b:8c:67:8a:12:54:13:ed:a3:d8:6e:0c:84:50:
6b:bb:28:a1:fe:d3:38:54:a0:4d:7d:9d:f5:53:93:5a:e6:2c:
47:ae:5a:01:b0:e7:24:5b:3a:26:5f:ce:16:95:8e:b8:ed:2a:
35:71:31:82:e0:d9:e2:52:a6:39:d2:8f:38:37:34:c5:7b:19:
5c:c3:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:12 2026 by rpki-client