Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: +GSE9N1xWP2SuJEASngyat20QeyW3tr88IQp7Wk0zzg=
Subject key identifier: 61:AB:A4:DB:A0:8F:CC:AC:34:89:A8:E3:AD:43:EE:2F:2B:EE:B6:65
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 01A0EFD4F39023F8DB77DAEBC35179094214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1A78
Signing time: Wed 30 Sep 2026 01:01:45 +0000
Manifest this update: Wed 30 Sep 2026 01:01:45 +0000
Manifest next update: Thu 01 Oct 2026 01:01:45 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: iGEernDsGvhSeOr05gR9AdndPWymoRgaRzAv/JHxHcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:f3:90:23:f8:db:77:da:eb:c3:51:79:09:42:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Sep 30 01:01:45 2026 GMT
Not After : Oct 1 01:01:45 2026 GMT
Subject: CN=61aba4dba08fccac3489a8e3ad43ee2f2beeb665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:1e:d8:41:20:58:7d:3a:b4:e2:c9:e1:83:
5a:a3:58:e5:67:4a:bd:5b:40:09:90:0a:3c:9f:70:
9c:44:59:4f:20:09:d1:0d:08:1b:7a:37:ad:2f:ea:
dc:8e:c8:8d:c5:84:70:12:00:11:9a:a3:58:e7:d7:
0d:35:3c:52:53:ae:55:8d:28:6c:9f:f3:3d:c4:67:
5a:90:93:9b:83:34:86:4e:b4:06:33:70:29:ed:53:
9f:58:ae:5e:7c:d7:56:72:eb:33:61:45:d2:77:9f:
0b:14:42:3a:6a:36:20:fb:00:8c:96:f5:f2:99:6f:
99:89:15:a2:f0:78:10:15:0c:83:dc:46:50:36:81:
0d:c5:40:6b:d0:c2:cc:86:0c:4d:ef:b8:9b:d0:d1:
23:bd:99:62:32:3d:76:68:fe:64:1e:da:27:ec:2d:
1b:98:aa:02:28:2d:02:30:bf:f2:bf:94:3a:4d:23:
20:fd:70:e6:dd:20:2d:1a:3c:d8:55:9d:96:89:13:
84:2b:f2:33:0a:84:a7:35:96:45:8b:d2:bd:e0:10:
d9:59:30:c9:30:87:53:ae:c7:ad:3a:c9:58:aa:89:
56:3e:86:28:25:18:d9:17:94:13:39:b2:da:3f:89:
39:fb:71:12:4d:a4:f1:85:ff:ca:14:6b:46:06:8d:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AB:A4:DB:A0:8F:CC:AC:34:89:A8:E3:AD:43:EE:2F:2B:EE:B6:65
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:40:08:8a:75:23:b3:18:88:2d:8b:91:dd:be:71:04:b6:
ec:82:c6:a7:27:db:c9:2d:50:b7:fd:7f:05:a7:e1:32:47:cd:
b6:58:30:19:5c:8f:92:24:51:2f:de:35:34:fe:18:1a:e8:40:
c8:0c:25:76:36:c3:0b:aa:6c:40:5a:87:c3:52:ad:ab:3b:20:
a1:63:ba:c2:95:9b:8a:dd:d6:0e:4d:ec:e3:c2:28:cf:93:f4:
42:e4:24:87:df:2e:9b:ff:ba:00:1a:45:1e:2b:c5:46:30:20:
a7:c9:c2:2d:0e:0b:2d:5c:07:ba:97:06:e2:c7:5d:f7:09:26:
3b:7c:1d:bd:0d:5f:49:52:80:7d:e1:8d:ce:30:cb:84:0e:e4:
54:b6:36:2b:0b:11:86:8a:cb:86:b3:8d:64:d9:45:f1:70:61:
0e:11:f6:f2:17:ee:06:26:d3:01:07:b5:40:f2:6b:20:fe:d4:
dc:32:31:20:ea:8f:c1:6f:e3:4a:8d:ff:f0:bf:e8:e0:52:82:
d5:81:b3:b6:25:52:93:84:05:54:17:81:cc:7c:4e:6e:3a:55:
12:d6:fa:65:9b:e0:ff:50:98:4d:fd:59:e3:75:b0:ef:cf:f8:
40:55:61:0e:05:54:ad:ef:1c:b8:04:d2:e6:f3:e0:fa:59:18:
54:86:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:34:27 2026 by rpki-client