Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
File: z6jgKeXx6FsRFss9M8haObsslNE.mft (raw, json)
Hash identifier: QgqcK2IvKTeauTQywWR3Y0z/fD2Q5cG+2QUNwXTMUUs=
Subject key identifier: 5B:3A:02:71:C5:A1:B4:C8:70:F5:31:41:96:4C:55:98:0D:46:B7:F9
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 01A0CC35D2A2425C4A913FEFCF38135443E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:01:14 +0000
Manifest this update: Wed 23 Sep 2026 03:01:14 +0000
Manifest next update: Thu 24 Sep 2026 03:01:14 +0000
Files and hashes: 1: O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa (hash: +cSVPrrZGE0RG6ua3kDeP5fHxWhOEOv6pgh3gSfnwNo=)
2: lUVl9Benklpiw6Ylck0dSuxSo-Q.roa (hash: p2ACt84JdaKlgpHAL/YLec1OeIXMp63TXCMnSlAEvAw=)
3: oaqhAz8r6QOEtVOyS7uoPCODlHc.roa (hash: c6tnbsMZPWMkjfAiaVIbYOOTReRqsQcVwvFXobf5RrI=)
4: z6jgKeXx6FsRFss9M8haObsslNE.crl (hash: 851reLjpz2AIaxuYLGFIrmZr4LDwyz9fd/NoTPtkJLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:d2:a2:42:5c:4a:91:3f:ef:cf:38:13:54:43:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Sep 23 03:01:14 2026 GMT
Not After : Sep 24 03:01:14 2026 GMT
Subject: CN=5b3a0271c5a1b4c870f53141964c55980d46b7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:3e:43:b2:33:50:b0:3a:5f:c5:92:36:90:
56:13:ba:c3:a5:f8:6f:b6:c2:de:9e:84:f4:aa:7f:
2b:a3:f4:20:48:c4:a2:a8:d4:8c:eb:be:83:b7:f1:
15:f0:f5:fd:0b:eb:24:38:df:1a:f0:5e:0a:09:0c:
a9:c4:a2:07:41:90:39:fc:89:b6:40:cc:02:8d:56:
57:14:8b:65:0d:46:f8:de:4a:f0:f6:c5:a8:36:3b:
73:a6:bc:c1:3b:e3:84:da:69:7b:c2:90:70:4f:53:
8d:61:41:f6:10:a1:9a:bc:00:db:de:82:5a:51:04:
1c:26:e4:50:85:d6:37:5e:b5:25:ba:71:5e:ba:26:
3b:70:96:75:77:f9:72:43:b9:3f:1c:ec:1d:a1:48:
29:03:24:93:b7:42:48:14:be:aa:2e:d8:0b:a6:bd:
8b:1d:2d:e6:97:59:cb:25:0d:af:c6:b7:d4:87:ef:
d9:1b:3d:8e:55:a8:5a:d9:8d:83:4b:4b:a7:34:73:
95:c8:f8:4f:70:04:17:16:1f:17:7d:c7:13:41:3a:
6c:9b:c2:06:93:17:b8:d1:4a:7b:2f:8b:b4:45:fb:
70:92:f7:93:37:ab:fb:e2:e9:8b:16:bc:5f:7a:73:
94:b4:1a:05:b6:97:1c:43:8f:de:06:ac:7d:e7:74:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:02:71:C5:A1:B4:C8:70:F5:31:41:96:4C:55:98:0D:46:B7:F9
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b9:15:06:85:44:14:25:d4:f7:b0:ff:0f:cd:ac:23:05:f3:
1b:57:b0:24:39:49:80:31:bd:09:eb:02:d5:0e:8f:b5:9c:f5:
b2:0a:92:82:7b:05:79:31:20:75:29:b6:31:de:f4:20:40:7d:
38:fd:7a:db:08:32:12:96:eb:b8:f4:43:0f:16:f1:b6:21:ad:
8e:61:bb:67:5d:cf:0e:c2:85:f6:82:be:7b:c5:d4:ba:98:7f:
b8:6e:6f:a1:30:80:18:b5:d7:e3:b8:93:f2:1b:fe:4c:3f:a7:
a9:74:c4:ba:e4:42:f7:b8:7b:f6:49:47:54:ff:23:d1:03:a4:
49:7e:99:5a:0e:0e:2e:ff:cc:0e:80:fb:3f:70:bd:81:65:13:
45:f5:ca:aa:e7:29:fb:ff:10:1a:12:05:5f:e9:6c:e9:5d:33:
70:03:8e:22:ba:56:1c:00:af:85:f8:4b:5f:54:fb:87:b1:d2:
b2:4c:83:a3:a9:f1:05:8a:a3:fc:b1:2c:67:a9:08:b9:04:57:
7d:31:18:f2:49:8c:f5:d9:73:a9:02:8d:86:87:f7:ad:b4:ef:
02:3b:74:48:45:59:22:2e:98:3b:3f:87:f2:d1:d5:f0:8b:a3:
93:43:97:55:db:f9:da:fb:d4:c1:2c:09:fb:46:98:2d:50:10:
ee:96:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:48:38 2026 by rpki-client