Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: J1ap33rUWmAETOlNKEVfoFuW+toajOYeDtcy+WdRlcs=
Subject key identifier: 9A:EC:91:6A:D5:C6:F7:AD:BC:9D:A7:24:0B:14:E9:35:B3:E3:7A:A0
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019F1265685EFA5F4947CDC9DDC823011A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0C47
Signing time: Mon 29 Jun 2026 08:01:03 +0000
Manifest this update: Mon 29 Jun 2026 08:01:03 +0000
Manifest next update: Tue 30 Jun 2026 08:01:03 +0000
Files and hashes: 1: aqNwN3-ll9HshPzliK9tAQGxaVo.asa (hash: gjrMmHCii/++x249mqnTyN00ERQyQPVEew9ThELl64I=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: 1Lo1dlq5wsa9BGCWDXhBg8K9IeHKdOnQuG3RyVQrpLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:68:5e:fa:5f:49:47:cd:c9:dd:c8:23:01:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Jun 29 08:01:03 2026 GMT
Not After : Jun 30 08:01:03 2026 GMT
Subject: CN=9aec916ad5c6f7adbc9da7240b14e935b3e37aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:d4:a8:ac:d1:cc:f6:5f:db:a7:b4:8a:94:
e0:22:7f:d0:fb:8e:f9:6f:c6:4b:f9:50:81:ae:de:
64:b1:09:58:01:23:3b:d2:1d:2b:ee:b6:51:1e:0a:
57:9d:74:b6:ea:91:fb:d0:90:55:4c:ef:38:4b:8c:
78:35:d3:d5:a9:ca:61:30:1c:43:26:1d:41:d1:6e:
7d:53:ee:d8:6c:c9:47:31:cc:39:33:92:af:fc:e5:
4e:7e:c7:e2:48:34:11:cf:f1:26:ea:2d:d7:9f:8c:
3b:01:a1:56:f4:6a:af:85:ce:c3:b0:f3:6c:32:30:
b8:db:28:12:c7:83:c8:b4:8c:bb:a6:3b:e0:3d:ad:
86:1a:d3:92:af:89:aa:4e:59:4b:d7:f0:95:3e:f3:
c4:a0:c7:14:8e:9c:96:05:6b:52:48:c8:6c:fb:7f:
55:db:60:2b:84:4a:99:32:46:54:40:c9:02:e4:30:
70:f0:21:38:bd:52:c5:01:9c:89:24:af:66:bf:ad:
8b:9a:29:49:ca:d3:21:77:7a:5b:a3:8a:b0:34:26:
16:e1:ff:57:fe:9a:0c:0a:4c:4d:ca:1b:23:ff:16:
c5:e9:30:0f:e3:30:a1:f9:cd:2a:63:36:00:6b:79:
02:cb:61:e4:ca:67:ee:eb:5c:63:ff:71:97:69:1c:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:91:6A:D5:C6:F7:AD:BC:9D:A7:24:0B:14:E9:35:B3:E3:7A:A0
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:13:26:b6:2b:a8:c2:b8:be:3f:c4:2a:97:75:1b:ab:22:34:
71:b8:b5:aa:61:2f:7a:9b:43:57:d1:fc:59:6f:3d:c1:20:10:
a5:28:43:4f:7e:22:94:6f:a7:eb:24:a8:2d:af:3a:9f:48:e6:
4a:cb:6b:8a:a9:f4:76:a9:86:98:37:19:a0:f8:58:95:5b:61:
b9:39:c5:ee:9a:6d:b1:f3:3c:be:92:2b:5f:b7:7b:52:d7:51:
da:b0:c5:f8:2a:49:b7:e0:1e:94:3c:86:8d:dc:80:4c:31:19:
3e:7c:e5:14:c4:d8:74:d5:6c:78:22:f2:01:47:1a:6f:7a:dd:
3a:0c:53:55:ad:57:ad:9b:b9:94:98:03:5d:fe:e7:d1:b9:30:
62:c4:10:b6:79:ba:e7:db:63:a8:44:70:c0:09:1a:9b:71:74:
5e:68:80:e3:b0:04:fb:d4:05:48:ad:ba:ea:ec:06:02:86:7f:
53:4e:fd:76:08:2d:45:7d:ea:f1:aa:09:f0:71:7e:2d:7b:61:
54:61:83:b4:b9:19:34:92:88:b1:1f:9f:47:7e:bc:a2:df:06:
00:c7:3d:be:4b:0e:13:b5:79:56:fe:f6:21:90:2f:da:5b:a7:
be:eb:d6:58:49:84:72:5b:d0:64:02:2c:2a:59:73:95:61:06:
fa:b4:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:44 2026 by rpki-client