Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: HMZ+UQUG3CAl5VS6VLIha+L0Uxh+OGSsQzJE5uF7tPc=
Subject key identifier: B3:80:23:0A:90:7A:FB:6C:58:F8:4C:5B:EF:7A:D6:33:1F:D8:18:98
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 01A1AB27DFD6E6FE1C71630CD050AD4F9E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 09DE
Signing time: Thu 05 Nov 2026 10:01:19 +0000
Manifest this update: Thu 05 Nov 2026 10:01:19 +0000
Manifest next update: Fri 06 Nov 2026 10:01:19 +0000
Files and hashes: 1: lkEN_n1hApHdJnOQwgFqE7D8Iv0.asa (hash: zJ6sva32oUPzoGiW7df7lb3v0bTwrSUf3PIERJ7PhOM=)
2: pchuRg1QLyIFpwfwBa8mUvFC7YI.roa (hash: mgPigocKfj7ADfA3gO1GOzZIymW9WRZZ/OqjW5DV1fM=)
3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: PF+SmjVU0oik4QY0Slo+bsvGMwPo2fu05duy6HHx8K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:df:d6:e6:fe:1c:71:63:0c:d0:50:ad:4f:9e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Nov 5 10:01:19 2026 GMT
Not After : Nov 6 10:01:19 2026 GMT
Subject: CN=b380230a907afb6c58f84c5bef7ad6331fd81898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:0e:49:ff:8f:6d:97:98:ae:12:3d:2e:a9:
f2:f2:b8:f4:ae:29:8a:2b:85:73:3d:0b:b8:06:69:
b1:44:31:c5:d5:cf:ac:47:48:0e:b1:a8:79:eb:28:
3f:9b:e4:43:6d:c9:50:ac:6a:4b:2e:18:7a:99:c9:
4b:18:be:c8:24:62:e5:bb:6b:7e:d0:41:5e:eb:4e:
2e:9a:e1:29:06:3f:4e:89:5a:8c:c4:ad:1e:11:c3:
3c:93:a0:c4:0e:8a:f8:54:34:60:6c:99:5b:c3:20:
43:ef:f0:d5:bf:79:d7:72:03:d4:74:12:91:b1:c0:
84:00:2c:f2:91:e6:1a:2a:88:a9:f8:ab:09:a1:95:
7d:de:39:64:07:0b:49:66:a3:44:be:dc:f8:be:32:
4e:4a:de:b0:ce:a5:19:3b:17:26:56:45:41:7d:d4:
62:da:99:18:07:47:25:f7:9a:aa:db:cc:77:8a:97:
b6:ae:b8:12:0d:dc:f2:2b:77:8c:ef:8e:6f:00:61:
1c:ef:b5:f0:4b:f1:65:2a:d9:95:36:a6:4e:97:4b:
6d:3f:8d:cb:18:54:36:dc:45:8c:7b:9b:fb:7d:0c:
07:05:7f:9f:6d:86:06:08:ee:ba:00:5c:1d:20:e4:
e9:dc:7e:3d:d4:fb:69:75:8d:a3:c2:59:63:95:49:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:23:0A:90:7A:FB:6C:58:F8:4C:5B:EF:7A:D6:33:1F:D8:18:98
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:f4:c8:e5:bf:2f:4a:53:8e:ae:7b:6c:c6:a8:b5:97:61:e6:
a4:f4:33:c8:31:e1:b4:02:ab:0a:36:71:33:b8:95:09:53:6b:
ce:2f:5f:c5:6e:7a:98:da:89:d1:0c:6e:01:b8:b5:01:97:37:
7f:9f:69:84:1b:0f:89:63:10:12:26:ac:4f:6a:2f:2e:a0:8a:
8a:ba:39:cd:e2:a5:66:4d:53:e0:21:1b:c3:1f:7f:ec:03:fd:
89:ca:cc:e9:b2:7e:e7:d0:78:20:fd:e5:b3:e9:f1:fb:72:0d:
92:eb:ed:19:9f:e4:fe:b5:73:11:f9:8e:21:92:70:98:cc:bc:
1a:68:7a:2e:05:b6:02:28:af:9a:e5:0e:64:42:58:d2:eb:38:
f3:1f:53:87:d1:0d:30:2d:3e:13:46:0e:89:d2:1f:80:fc:e2:
d6:5b:97:ff:5d:fc:f6:b3:89:52:e7:66:21:55:58:73:7d:6a:
6c:57:de:7f:5b:55:4f:66:7f:bf:08:92:67:36:b8:bb:49:07:
fa:e7:0e:6e:5f:46:d4:0f:ab:64:d4:01:5b:90:d9:e8:dd:aa:
bf:16:18:85:cd:05:1c:9f:fa:19:36:51:e9:f0:e8:fb:0f:8e:
09:24:98:ef:b6:d7:73:4f:d2:d0:fd:99:0f:e6:52:b3:ef:c4:
44:60:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:42:20 2026 by rpki-client