Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: pLhdWBanm/SYMmvRzghorzEcyFMtp6HPjBMuzpWCLtM=
Subject key identifier: 60:0C:8C:13:F8:AD:5E:B7:81:19:50:6F:2D:09:AC:C7:D3:77:AD:90
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019EC3A4CA97D232FC5372DD0CB21F903358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1958
Signing time: Sun 14 Jun 2026 01:00:17 +0000
Manifest this update: Sun 14 Jun 2026 01:00:17 +0000
Manifest next update: Mon 15 Jun 2026 01:00:17 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: HJGWa7c8aj0G51xs8UX7pNVKeqvqIy2AEf1GYHCLlbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:ca:97:d2:32:fc:53:72:dd:0c:b2:1f:90:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Jun 14 01:00:17 2026 GMT
Not After : Jun 15 01:00:17 2026 GMT
Subject: CN=600c8c13f8ad5eb78119506f2d09acc7d377ad90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:4c:13:a9:c8:67:e5:51:c3:05:1a:04:8d:
00:cc:be:7c:ff:67:6a:9a:d1:99:09:db:3d:2e:d7:
bf:7d:b7:7c:2c:3a:32:57:77:69:37:2b:be:4d:b9:
06:4f:55:f1:60:d4:98:7e:69:c0:1f:1b:6c:30:42:
a4:c4:96:e5:7a:41:dd:95:dd:9b:da:88:77:d7:c9:
cf:f3:10:55:02:f8:6b:c2:4e:df:fa:e5:9f:cc:09:
42:40:a1:fa:27:fe:ff:c2:d6:6c:4c:04:2f:ae:08:
99:41:be:9f:23:82:2e:e8:2f:26:c4:19:09:76:a3:
ed:5f:78:36:33:4e:2a:72:e4:4b:0c:11:56:3f:35:
fc:6b:db:08:20:49:78:31:26:71:aa:e6:9f:04:50:
bd:af:72:03:48:0a:5a:e3:db:b8:90:f6:e9:26:35:
86:00:84:f0:1e:f2:3c:18:bc:c1:86:3d:27:81:ac:
52:34:75:b5:8a:15:56:d3:33:87:68:1f:d9:1e:a8:
d0:34:fd:e2:53:06:fb:1b:d6:63:4b:f3:81:ea:be:
60:17:5d:11:48:3f:51:9d:f2:99:55:b4:ad:96:12:
1b:7a:63:13:c6:64:00:9f:3c:d4:c2:ae:23:d6:4b:
bb:73:c0:24:e2:9d:6d:58:87:d1:ca:94:01:4b:23:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:8C:13:F8:AD:5E:B7:81:19:50:6F:2D:09:AC:C7:D3:77:AD:90
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:06:c8:33:96:15:cc:ff:be:8e:ab:84:77:b2:b5:8e:57:
01:99:9c:18:d1:4d:bd:dd:31:32:5d:5a:a0:62:7e:d1:6a:5c:
62:2d:fe:07:9e:9f:3b:9f:e7:09:61:0e:0c:79:bb:f1:25:95:
25:f0:b0:c2:4d:44:8d:ae:54:de:eb:77:85:fd:8d:37:44:7b:
1a:2f:27:27:22:d1:0b:19:d0:83:ad:a8:b8:ac:a2:6f:26:f6:
83:6d:a6:b4:71:77:16:a4:03:01:52:85:00:f0:33:8b:97:63:
c9:98:04:95:d8:cb:13:1a:5a:ff:d8:71:9a:3d:43:7c:be:cf:
46:2f:47:60:cb:cf:e3:55:e3:e9:9b:d2:b7:7a:29:a3:53:fb:
95:47:6a:3e:e9:4d:08:4e:5e:c6:74:83:77:82:04:e2:7b:9c:
8c:e8:39:42:3f:e7:bf:5d:1e:88:7b:cf:60:c1:72:bd:63:92:
99:c5:8d:d8:44:eb:00:22:a9:a6:b4:38:fa:ee:4c:82:60:39:
7c:c4:cb:22:4a:6c:3a:45:9f:18:80:c6:10:bf:9b:57:b6:c6:
77:6e:bb:7d:aa:d2:d1:ea:ac:a9:4c:2c:92:df:98:7a:4c:f4:
61:bb:49:c7:e7:e9:ec:21:6a:f0:c3:38:17:87:92:95:26:e7:
00:ea:02:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:56 2026 by rpki-client