Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
File: z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft (raw, json)
Hash identifier: qRXgI+QI7cU6tMGFdEtWayBQ2dAwbBdHsfZ693Hf+2I=
Subject key identifier: BE:14:6E:B6:BE:EE:9F:63:2A:F6:C7:5D:4E:C6:0D:D1:58:ED:DC:49
Authority key identifier: CF:AC:D2:2F:28:7E:84:C2:3B:4E:89:64:F3:B1:1E:F1:25:A1:C8:18
Certificate issuer: /CN=cfacd22f287e84c23b4e8964f3b11ef125a1c818
Certificate serial: 019DA3AEE9A9572F473F17A23EE3C7D793B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
Manifest number: 57
Signing time: Sun 19 Apr 2026 03:00:42 +0000
Manifest this update: Sun 19 Apr 2026 03:00:42 +0000
Manifest next update: Mon 20 Apr 2026 03:00:42 +0000
Files and hashes: 1: UPMp3Af0dIr169kINqk_eQVjuRo.roa (hash: w8xH9Ru6usUFiW6X7kxuFSu8EELCqYb7m7E2r33BxXM=)
2: fYb3yqxYZbERWvZR_A7UqgvLBhg.roa (hash: 0iZV/WEPOO770yHBZVc4wL21UBM51H4s8ObdaVDkQ64=)
3: z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl (hash: Q9RWbSKApPgbQ9UqSnVbS9nPr9RRLcftiH2uuj7xeO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e9:a9:57:2f:47:3f:17:a2:3e:e3:c7:d7:93:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfacd22f287e84c23b4e8964f3b11ef125a1c818
Validity
Not Before: Apr 19 03:00:42 2026 GMT
Not After : Apr 20 03:00:42 2026 GMT
Subject: CN=be146eb6beee9f632af6c75d4ec60dd158eddc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:cb:b6:f6:4b:83:d1:94:92:d0:08:60:fc:
a0:5f:46:96:34:b6:3f:7b:8b:94:78:78:63:25:b2:
be:1c:5f:de:7e:d1:05:31:90:30:56:f8:3c:26:a7:
7e:2a:a1:c6:39:7f:26:38:ee:20:04:f0:51:12:a8:
be:07:95:1d:c7:e9:3d:64:f5:c2:c4:6a:9a:65:52:
32:a6:4b:08:d8:07:fd:a9:ae:ef:96:c1:fd:a1:7e:
ab:7d:e7:7c:66:23:d8:33:5f:41:71:46:18:83:51:
d2:77:19:20:d8:00:7b:49:f7:25:17:ff:d0:90:28:
de:fe:f6:33:32:bb:a3:07:7c:df:68:86:70:3e:e8:
9d:ad:60:d5:6a:31:f4:eb:bf:f7:77:21:f6:e8:30:
80:ca:f6:ac:ba:22:33:c2:97:0e:70:8d:e5:cf:86:
b7:05:26:99:0b:41:84:25:a6:99:c6:27:5f:fa:82:
7a:3d:c1:70:db:04:ab:d7:5a:8f:f9:da:04:b5:40:
da:c6:96:9e:d7:48:ec:9b:1c:0d:f5:cc:a8:6c:05:
ea:fd:8a:17:b7:cd:8a:ed:9e:bd:57:00:22:a3:3f:
e0:57:64:60:23:94:aa:b4:d8:aa:6e:2d:bd:df:5b:
07:08:c8:31:9a:34:dd:ca:f7:11:ba:1a:db:81:c5:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:14:6E:B6:BE:EE:9F:63:2A:F6:C7:5D:4E:C6:0D:D1:58:ED:DC:49
X509v3 Authority Key Identifier:
keyid:CF:AC:D2:2F:28:7E:84:C2:3B:4E:89:64:F3:B1:1E:F1:25:A1:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:ea:b4:5b:68:9a:4d:7b:46:4f:7c:97:6b:e3:68:e1:05:
88:4b:3e:bf:70:c3:25:9a:98:59:3c:f0:29:58:bc:18:45:eb:
a5:aa:41:86:af:5c:ab:13:05:2f:18:b1:05:d8:b2:b9:2e:a4:
6a:e4:d2:99:4c:e9:22:29:e7:4d:4e:f7:ba:a8:1d:28:6e:e0:
4a:92:53:7b:c5:eb:a1:24:c4:37:e6:87:9a:7d:02:7c:ce:d0:
b1:77:92:ef:7c:38:8a:c5:1c:89:04:a4:15:e5:46:8b:87:f7:
92:72:1e:61:e9:20:16:c2:86:7b:ab:12:0a:04:c1:f8:af:33:
ca:e3:2f:dc:ae:c3:6a:5e:29:50:be:9b:30:2b:a4:ae:52:ba:
56:ef:ef:c7:7c:04:7d:cb:58:9f:d1:5e:54:fb:86:53:17:0c:
e9:e2:d8:b7:d0:df:b3:83:c3:6c:67:4e:9c:59:38:41:03:d8:
14:ee:44:c2:93:3e:9c:c1:42:47:83:82:f3:8f:b7:a8:2d:53:
69:c3:c2:27:08:01:b6:8b:ed:28:7b:08:ac:ee:5d:79:03:1f:
60:7d:fd:f6:76:27:9c:97:e5:3c:86:73:42:5b:7e:66:c9:64:
b2:13:34:b8:f3:1f:81:a2:74:f7:5c:44:ea:76:ab:83:d8:24:
3b:10:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:30 2026 by rpki-client