Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: B3OTnu9AGJWyrB8HGu9nW9+V5mjrig8nkr5Yi/lRKI8=
Subject key identifier: D4:48:A4:4F:C6:BA:4F:96:3F:B8:A7:85:0C:A7:7C:45:9D:E6:99:EB
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019EBEECFB41AC295DC5CFCB72435F2DF8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 0276
Signing time: Sat 13 Jun 2026 03:01:02 +0000
Manifest this update: Sat 13 Jun 2026 03:01:02 +0000
Manifest next update: Sun 14 Jun 2026 03:01:02 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: ajkxYaZZMOvaTTBYsbkEJVuNJFkL8Pmh2jm65QNsxvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:fb:41:ac:29:5d:c5:cf:cb:72:43:5f:2d:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Jun 13 03:01:02 2026 GMT
Not After : Jun 14 03:01:02 2026 GMT
Subject: CN=d448a44fc6ba4f963fb8a7850ca77c459de699eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d2:b6:1a:a1:ae:07:69:48:bb:d2:d9:8f:fb:
33:27:79:e6:f0:34:44:bc:ea:ae:01:a4:b8:ce:f8:
e4:40:b0:c2:b7:4e:b5:c3:30:92:17:11:65:6e:32:
d1:a7:c7:d1:2a:c8:19:b9:9c:f8:87:04:d5:49:78:
e2:e1:fc:c5:dd:2b:9d:8d:bb:0b:d7:a7:ac:54:8e:
91:2d:c6:ac:6c:cd:a8:18:70:6b:d4:c5:2a:32:aa:
23:db:fc:1d:b7:d9:44:2a:57:f8:94:1b:85:2b:21:
fc:17:28:90:87:2d:ba:4b:9d:82:0a:19:ff:bf:1a:
ee:6b:20:b0:13:ec:cc:c9:8f:30:e5:9e:b4:49:33:
52:e6:23:f9:1a:51:61:60:52:ae:c9:50:42:56:c0:
33:5d:15:48:79:7c:8c:21:0c:f4:b9:76:11:82:a1:
90:90:61:33:e2:44:56:05:c2:fa:b8:21:f2:28:7c:
0f:7a:3e:64:24:67:38:0a:54:97:51:c3:25:48:bb:
e3:b9:84:d2:a8:dd:03:b9:ac:2b:32:e3:38:fa:1e:
ba:7b:2d:4d:93:f8:f1:9b:8c:24:1c:a0:96:79:8b:
9d:2f:c1:2a:b9:71:7c:b4:06:9e:5b:1a:f1:df:ce:
2c:37:4b:14:0f:94:33:8d:32:19:ad:c3:b9:5d:32:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:48:A4:4F:C6:BA:4F:96:3F:B8:A7:85:0C:A7:7C:45:9D:E6:99:EB
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:79:24:77:09:fe:f6:71:38:ca:cf:bc:d4:77:dc:8f:67:f0:
df:3f:76:05:6f:b2:22:0d:85:42:cb:63:1b:6a:4b:8a:36:d6:
8f:6d:b1:5c:c8:ea:fe:33:93:8d:5b:d1:9d:a3:36:6d:2c:43:
d8:7b:dd:fa:f9:6b:ca:27:d8:a8:5c:57:6a:75:0d:16:68:34:
7c:47:1a:81:35:13:95:30:2e:86:51:49:86:3c:ca:ae:db:90:
74:0d:f6:cd:dd:c7:df:86:58:9e:56:27:8f:92:c1:56:29:9b:
d8:7c:05:59:e8:eb:05:87:45:e5:2c:7c:b4:6e:da:07:18:c8:
ae:f8:f2:0d:6a:d9:92:09:72:91:e8:17:00:ba:ac:37:40:71:
06:85:c1:15:89:8c:65:58:c9:e5:02:30:f5:56:b2:9f:13:aa:
e5:df:5a:20:b0:e7:23:e7:97:87:3d:3d:86:90:64:68:d4:55:
b7:46:ab:f3:5f:6b:53:2a:98:72:5a:55:4a:53:68:26:05:57:
18:3b:85:ad:39:2b:04:43:ad:dd:64:a6:bd:2b:a8:7c:5f:d0:
4c:43:10:f8:45:38:b1:99:4c:6a:6b:de:73:03:24:08:fb:fb:
25:ee:7f:db:a8:57:e7:7c:84:8b:a6:87:9b:89:91:4f:41:74:
ba:a4:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:01:45 2026 by rpki-client