Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: YZM4gXUhemrHe5iEVjAYEa7DFhQh/9nCdwFBJbiZzc8=
Subject key identifier: 2A:22:FD:95:0F:82:FB:70:57:EF:40:28:E9:F5:B6:D6:45:D9:E3:EF
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019E24DBE7D0DDEA7EBBA13720C755D153BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0BCC
Signing time: Thu 14 May 2026 05:00:51 +0000
Manifest this update: Thu 14 May 2026 05:00:51 +0000
Manifest next update: Fri 15 May 2026 05:00:51 +0000
Files and hashes: 1: aqNwN3-ll9HshPzliK9tAQGxaVo.asa (hash: gjrMmHCii/++x249mqnTyN00ERQyQPVEew9ThELl64I=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: BFQploylsjx4yyxGkV4I1b7EeXmh+o3FNtJyj86FaV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:24:db:e7:d0:dd:ea:7e:bb:a1:37:20:c7:55:d1:53:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: May 14 05:00:51 2026 GMT
Not After : May 15 05:00:51 2026 GMT
Subject: CN=2a22fd950f82fb7057ef4028e9f5b6d645d9e3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:93:df:b7:4b:ac:39:6e:83:25:11:05:db:
49:d9:6f:47:a0:2e:20:b3:8d:c3:58:d9:8d:0b:3a:
c3:b3:6a:2b:31:5b:b9:22:4c:34:b2:18:36:bc:9e:
03:58:b5:ce:1c:e0:b5:f5:f0:33:38:1a:9a:7a:2f:
12:2b:ff:01:0a:b2:f7:fc:57:e1:0b:2a:86:c5:5c:
6c:12:44:55:e6:10:69:18:90:a1:7b:fc:47:23:67:
4c:b0:77:aa:ec:d5:a4:23:94:0f:23:4d:4a:29:e6:
1a:6a:8f:8d:30:0c:6b:7a:aa:fd:8e:04:4b:b8:fd:
f2:c9:11:35:a1:75:46:94:ea:72:67:1a:45:70:a3:
f3:57:96:97:d5:de:e4:15:fd:9e:4a:58:9b:1b:1f:
b3:25:53:da:38:20:72:f8:30:1a:bb:20:96:ed:93:
c2:dd:af:dd:c4:fa:61:cd:a5:52:cf:62:4e:b8:b5:
04:71:f2:5b:60:14:b4:c0:b0:65:fb:f0:19:e8:20:
31:4a:4b:c5:d5:af:fc:59:68:a8:8e:93:81:51:71:
57:53:43:ac:4f:de:c4:96:36:5b:fa:31:0b:b6:3b:
5f:45:74:50:c0:fe:28:4d:68:bb:81:69:6d:17:e4:
7f:7f:23:14:43:47:a5:02:2b:93:15:e4:b9:7d:b0:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:22:FD:95:0F:82:FB:70:57:EF:40:28:E9:F5:B6:D6:45:D9:E3:EF
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:69:d3:15:0a:ac:f6:f1:cd:54:fc:a6:a2:98:e7:9f:08:d1:
82:c1:86:fc:0c:d8:b5:c0:18:3e:ac:20:d3:e5:1f:88:00:10:
99:89:9c:00:a0:01:c2:16:78:90:dd:4d:31:b7:14:db:c2:fd:
d0:88:31:49:49:81:f8:12:f8:3b:69:b8:29:65:dc:d3:58:26:
44:0d:df:62:54:db:24:32:cd:6e:bb:0a:5f:5d:55:43:3a:7a:
04:30:48:d0:39:b6:22:c2:09:f9:3d:0c:21:5e:10:86:32:22:
06:a3:f0:c3:1a:a0:e0:18:bd:02:29:f7:a2:23:6c:78:c1:43:
dc:48:7c:e9:b9:99:b3:c1:c4:05:73:5d:13:5a:ca:1a:12:77:
74:b7:a7:fb:f5:31:bf:9c:2b:c2:8e:04:27:a2:c2:06:34:6b:
29:f4:e1:e3:50:fc:53:5f:1b:27:f6:2a:e2:09:fb:d4:59:a2:
e4:9a:75:ed:d3:7d:11:e9:d5:e7:ae:a8:3b:84:04:55:53:e9:
fd:29:7a:a3:51:e7:ab:2f:0d:bb:3a:3c:ab:cc:c1:54:b4:4f:
50:76:8a:5d:57:d8:3b:11:fe:6d:fb:8d:bc:97:1a:1a:f9:43:
59:51:b0:8f:e7:39:93:41:f3:06:71:9f:3b:0c:dd:78:93:20:
6b:23:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 08:04:41 2026 by rpki-client