Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
File: z03hI7ypCDRpQQ16g98niahsaZk.mft (raw, json)
Hash identifier: 1c7g99Axd98xzE2unp0oie3rHlbFAB8PEy4nsLERnqY=
Subject key identifier: 56:63:D5:15:23:6B:99:99:96:39:FB:DB:A1:42:8A:DA:E8:40:35:0D
Authority key identifier: CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
Certificate issuer: /CN=cf4de123bca9083469410d7a83df2789a86c6999
Certificate serial: 01A06D5E350AC701EDF42A446C8C1D186E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
Manifest number: 32
Signing time: Fri 04 Sep 2026 17:01:25 +0000
Manifest this update: Fri 04 Sep 2026 17:01:25 +0000
Manifest next update: Sat 05 Sep 2026 17:01:25 +0000
Files and hashes: 1: 3eLWx94YuvwwSRAoKOfCLRLl0zY.asa (hash: 79uscgj28wgq78Iu3Rnp/+KrsVCoQRVb4tTu7d98mgM=)
2: z03hI7ypCDRpQQ16g98niahsaZk.crl (hash: E3ZMZAR+xZ3b4yzrPnQeOpU7Axbw13i388tS8NFgKdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:35:0a:c7:01:ed:f4:2a:44:6c:8c:1d:18:6e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4de123bca9083469410d7a83df2789a86c6999
Validity
Not Before: Sep 4 17:01:25 2026 GMT
Not After : Sep 5 17:01:25 2026 GMT
Subject: CN=5663d515236b99999639fbdba1428adae840350d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:6d:9b:0c:e3:81:e7:67:e9:a4:97:3a:7e:
0e:c1:73:c7:3f:9f:cb:5a:b9:72:76:c8:15:0f:41:
05:8b:c3:42:ef:e4:85:87:fa:46:60:34:d7:e9:92:
01:32:7a:64:92:7f:fb:14:c2:6c:7a:b9:ef:95:80:
99:03:d2:f9:e5:fe:a2:ce:cc:b4:f9:be:24:e0:a5:
21:75:07:9e:03:6f:db:6f:98:d8:4f:fa:b2:2e:3e:
84:82:b1:9c:bc:2f:67:b6:41:c9:a5:e7:2e:17:a9:
d7:0f:54:74:bc:f9:8a:7c:e0:3d:c8:5d:cf:8b:52:
76:5c:6d:b3:4b:f2:c5:e9:4a:d2:38:f9:94:75:f4:
64:67:cd:2d:eb:82:e2:37:64:4d:27:1a:ae:9d:d8:
73:ee:80:1b:c9:99:20:a2:68:12:48:77:ad:29:9c:
d6:0b:61:fc:98:9e:58:13:15:d1:2c:d3:f4:8c:ef:
c0:02:0b:fd:5d:f3:8c:8e:14:d8:8a:5c:32:01:6e:
5e:aa:58:27:ef:97:11:07:0e:d9:26:27:b6:d9:ad:
35:c1:d7:23:ad:df:b9:91:6c:02:13:df:ba:d5:46:
38:65:cc:4b:01:72:c9:ee:f4:38:6d:15:d0:d5:1b:
7a:5a:98:d3:2a:70:23:65:84:97:87:2e:6e:80:43:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:63:D5:15:23:6B:99:99:96:39:FB:DB:A1:42:8A:DA:E8:40:35:0D
X509v3 Authority Key Identifier:
keyid:CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0a:ef:27:9f:4d:54:3d:72:14:26:ea:82:54:74:06:21:72:
d4:17:bb:61:ed:1a:3b:46:e3:4b:88:3a:ec:92:40:31:d5:53:
fc:d5:16:85:df:24:96:50:98:d3:bd:0c:77:f1:a8:1b:c5:47:
f3:c0:41:1d:4e:a1:4e:ca:ff:b3:93:80:53:85:2a:96:b8:7b:
40:03:bd:1c:23:48:9f:6b:27:87:31:4a:f4:9f:b0:b2:cb:dd:
3f:fc:04:0f:e5:85:a3:f9:ea:ea:78:51:b1:ef:f1:47:6c:fc:
51:15:3f:71:42:97:c0:54:aa:4e:5b:fb:88:66:cd:04:f3:9f:
99:ec:5d:cb:48:70:b5:fd:74:50:8e:a9:ed:51:8d:5e:1e:20:
1e:4c:f3:0b:2b:e9:e7:07:25:97:fc:1c:d2:c2:16:12:68:5e:
14:0f:fd:33:c6:39:14:a6:f4:73:8b:ef:f4:20:aa:fc:4d:35:
75:99:5f:36:df:55:57:89:41:f2:d6:06:ba:99:21:44:ee:13:
e4:1d:52:ed:08:75:f6:87:6d:68:c5:40:78:fa:7b:97:6c:3e:
37:f8:0f:76:67:1d:13:7a:77:ad:90:6e:35:0b:cc:0b:a4:7f:
c2:b1:24:62:5a:a0:45:4f:00:dd:ca:c6:1b:c6:32:3c:59:45:
d5:01:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:06 2026 by rpki-client