Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: 7/qzX4H04lUp4h257WKCC+MBTh07ymCXO9ytzVbxPlE=
Subject key identifier: A1:08:FD:E8:63:99:CC:E5:F7:2E:FF:4A:1F:3E:C8:39:A0:DF:0F:6E
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 019D9BBE49BAB64F90C89C230936860D2613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 07C3
Signing time: Fri 17 Apr 2026 14:00:32 +0000
Manifest this update: Fri 17 Apr 2026 14:00:32 +0000
Manifest next update: Sat 18 Apr 2026 14:00:32 +0000
Files and hashes: 1: TKIL50vHJx3mU2yrGCZ7cyXz-kA.asa (hash: Vo6w1KKM1/rvMLTgJTDXJJtM6U/uZiIyqWTgty9lyF8=)
2: pchuRg1QLyIFpwfwBa8mUvFC7YI.roa (hash: mgPigocKfj7ADfA3gO1GOzZIymW9WRZZ/OqjW5DV1fM=)
3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: AwjE9Zep+1oyHbupnRPCDAQyZLc8paEFLNYVAf6R9Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:49:ba:b6:4f:90:c8:9c:23:09:36:86:0d:26:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Apr 17 14:00:32 2026 GMT
Not After : Apr 18 14:00:32 2026 GMT
Subject: CN=a108fde86399cce5f72eff4a1f3ec839a0df0f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:26:29:8f:8d:f3:c5:24:25:1f:de:83:45:
2b:14:1a:94:13:52:19:ac:cb:bc:a7:89:9c:4f:d7:
7f:39:94:43:8f:4c:20:30:a7:a6:a6:23:8d:be:4c:
c4:ea:0e:29:94:fb:19:bd:9c:56:57:11:2a:e4:e9:
cd:55:df:6f:ec:d2:02:fd:0d:d8:db:bd:61:e7:c9:
8e:c9:05:f1:1f:a7:11:51:ef:d5:04:ae:d5:34:c1:
80:6a:71:8a:78:6f:b7:3f:37:27:b3:95:38:1c:af:
09:c4:fc:aa:a7:44:57:de:a0:43:1c:9e:00:62:13:
40:b2:20:e2:68:f6:65:b6:bb:f5:79:ab:70:de:5d:
6a:15:69:04:82:73:a3:a9:4f:10:c4:15:54:b0:6e:
ea:7c:4f:96:0d:b3:a2:4c:51:4b:1d:d7:00:f9:43:
89:3a:d3:f4:60:ca:30:d6:e7:65:b4:96:27:38:40:
20:f8:fd:e5:d5:ab:c6:bd:a2:54:c0:c1:52:b8:5a:
af:46:75:c0:a5:bc:07:d5:b6:c5:69:9e:7e:02:e7:
fb:ae:55:06:76:d3:0e:97:40:a7:d7:fc:77:c2:8b:
a3:86:16:34:17:ae:3e:d0:08:65:0f:39:f4:a4:50:
2b:fd:d8:2a:71:cb:23:0f:68:38:7a:bb:0e:9d:4a:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:FD:E8:63:99:CC:E5:F7:2E:FF:4A:1F:3E:C8:39:A0:DF:0F:6E
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4d:5e:47:f6:4c:a3:dd:22:f5:38:19:26:a6:ca:05:e6:52:
25:1d:c4:fb:e5:e1:0f:ac:e0:41:fd:4f:24:ba:91:ea:e9:7e:
7d:8a:2e:0b:76:68:43:f5:3c:09:5b:3f:b2:3d:c5:dc:ec:1e:
34:75:69:76:d0:d6:bd:2a:a7:69:c2:39:0e:8f:ff:0e:d9:8d:
3b:ca:2c:c9:5b:55:cf:87:b0:9f:a6:f2:8a:91:11:a2:92:12:
62:38:32:83:84:34:55:e4:41:65:4e:a4:1c:35:a8:1e:6d:aa:
b6:51:69:b6:aa:d3:a5:b0:61:e9:b8:7c:e4:ac:93:73:f4:dd:
85:64:7f:72:be:f6:b4:61:d1:4a:a9:db:53:7f:f1:a4:94:1d:
a7:8d:22:7a:6b:e4:51:b1:8b:8e:c1:ac:b3:d6:23:57:3f:03:
0d:e9:d5:40:35:2e:65:28:1f:06:4a:1a:f8:3f:ab:5b:18:05:
8d:6e:18:34:a3:a9:f6:87:42:88:5d:fa:05:e3:f2:8c:49:6f:
fc:75:a8:b0:2e:b7:98:bb:0a:4d:a4:fa:d1:b8:99:c5:4a:bd:
ba:36:94:39:f1:f4:53:c5:39:59:f7:1b:22:b8:c9:fd:3f:4f:
60:18:9e:12:f0:19:63:24:0a:ba:78:99:9c:6a:12:fd:1e:01:
b8:29:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:19 2026 by rpki-client