Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: r/sDMN0zzkSQ23mPSxHD9WTKXmFvUZzXU3gUE07FTeo=
Subject key identifier: 27:3A:95:1D:BC:65:D0:8D:D7:C3:1A:E8:52:73:E9:42:DD:5E:B5:60
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 01A12C56B57BB4740072F0EDEDAB83F725D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0D61
Signing time: Sun 11 Oct 2026 19:00:42 +0000
Manifest this update: Sun 11 Oct 2026 19:00:42 +0000
Manifest next update: Mon 12 Oct 2026 19:00:42 +0000
Files and hashes: 1: Fqi5GgJzBuBU-O3Svwls2oA58e0.asa (hash: aVFzS1UCWhMVB1SwHJ+JRLsU/2I8DVI5pdRtjMd5wcs=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: bURDydFC7adEJBb9/90yc4PFGGuCK7+//IzvYGJhiAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:56:b5:7b:b4:74:00:72:f0:ed:ed:ab:83:f7:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Oct 11 19:00:42 2026 GMT
Not After : Oct 12 19:00:42 2026 GMT
Subject: CN=273a951dbc65d08dd7c31ae85273e942dd5eb560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:af:4a:fe:94:a4:fd:c8:c6:c6:bc:fa:a5:
27:4a:86:d4:f1:c7:ed:e6:ae:fd:f6:c2:50:c2:8d:
63:62:2a:7d:39:e7:9f:9d:69:8d:bf:69:2f:02:d3:
cf:f5:cf:8f:65:cf:9d:d9:57:07:1c:e3:36:73:06:
98:a7:d1:7a:94:29:75:fe:0a:17:58:e1:6c:9a:20:
20:39:c3:24:de:65:6e:e6:2f:95:dd:fb:48:78:7c:
82:80:b0:f0:c4:3f:d5:d5:f1:e5:55:ac:7a:a9:9b:
9e:19:61:d1:64:91:da:af:85:bb:ee:ba:d4:77:32:
0c:f3:f3:b6:9f:7d:c2:df:17:d8:68:c7:cd:ba:7e:
37:1a:07:bd:73:ff:07:b0:e4:b2:a7:34:b5:50:0b:
0b:a5:3b:e0:30:cb:ea:09:e7:78:48:0b:5e:0e:c6:
43:f2:06:de:06:82:13:bf:1b:88:5d:21:8c:33:68:
41:b4:1f:78:10:f9:68:f0:e0:4d:71:96:96:d4:c5:
c6:0e:98:b0:28:2f:ee:f7:c8:dc:39:36:5e:c6:40:
4b:42:99:9b:c0:f2:24:31:bb:aa:41:3c:c6:94:83:
e7:68:c7:c6:14:4a:73:d1:e5:c0:1c:38:c8:63:c7:
32:0d:40:4a:a9:bd:f4:48:0a:f0:e7:f3:40:65:35:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:95:1D:BC:65:D0:8D:D7:C3:1A:E8:52:73:E9:42:DD:5E:B5:60
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9c:6d:0a:fb:b2:75:93:34:12:26:f7:4b:52:a2:c8:d5:0d:
ae:e1:a7:80:57:8d:db:48:84:90:50:b3:a4:18:ac:7f:a1:b8:
c0:6c:61:bd:1d:61:ad:1f:01:9c:4f:8c:62:60:a7:54:1a:25:
b7:d9:f6:41:47:70:6b:fd:9d:b8:57:40:09:30:e9:46:b8:c0:
8e:8e:a4:dc:2e:00:a3:3a:7c:f6:6f:7d:bc:f3:bd:fc:a0:ea:
ad:2c:9b:cf:8d:af:39:01:9f:18:51:b4:6c:e2:e1:0f:f0:0f:
ec:df:16:4f:d2:1e:9c:09:57:43:41:f2:26:3e:7e:26:cb:15:
68:39:d7:98:4b:ed:2f:29:70:d0:6a:5a:45:f5:12:07:54:32:
39:51:7e:55:34:96:6d:ad:e0:b6:60:6c:59:dd:68:a8:30:f9:
2e:43:f1:38:60:20:e9:d5:50:09:4a:39:50:d2:6f:d5:78:fd:
47:dd:f8:6a:0b:0d:0f:95:d8:eb:e7:7e:9f:0f:86:a7:c0:0b:
f2:d7:6b:ac:19:49:5d:f4:bc:a7:9b:5b:b2:95:11:03:bb:e5:
ba:f6:fc:b1:60:cf:ba:b4:d7:17:6d:54:de:7f:99:04:f6:5f:
dd:e1:fa:1b:f7:06:31:d3:75:e2:80:ad:23:b3:e8:b0:d0:d4:
63:2e:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:33:00 2026 by rpki-client