Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: 7qQL5x8qjfJGmrjl9KFLjQzZRVntsJYx5lMap1y11H8=
Subject key identifier: C1:56:19:27:1B:3D:1E:EF:4A:E1:AF:AB:EC:00:02:43:C3:08:AC:81
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019D37F7A29F646335C4BEF35BB358D5A416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 05:01:08 +0000
Manifest this update: Sun 29 Mar 2026 05:01:08 +0000
Manifest next update: Mon 30 Mar 2026 05:01:08 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: GDdZk40FWoVrWQQeK1pxYzm3lvEnuhU86XNJDfrgLWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:a2:9f:64:63:35:c4:be:f3:5b:b3:58:d5:a4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Mar 29 05:01:08 2026 GMT
Not After : Mar 30 05:01:08 2026 GMT
Subject: CN=c15619271b3d1eef4ae1afabec000243c308ac81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:2e:c3:6c:7b:b0:57:1a:c1:dd:3c:8c:f0:
41:57:56:a2:b7:98:c4:1e:ca:d9:16:f6:32:42:8c:
56:d6:00:05:99:b9:46:89:42:2f:d0:b7:a6:4e:bb:
99:ec:94:5d:3e:21:57:fa:4a:e6:31:8e:41:de:b8:
93:9c:be:f7:bd:91:b5:47:e1:87:36:66:74:06:74:
69:16:b9:d7:36:1d:43:4c:20:22:91:be:f5:97:4f:
3d:6b:d7:fd:cf:44:90:22:b3:db:f2:53:df:c8:b8:
68:89:fc:39:6f:97:6b:84:0e:b2:1e:ce:3d:48:42:
44:dd:25:e2:cc:ba:e8:cb:70:8a:c7:ad:68:a2:38:
c1:b1:9a:71:38:6e:8b:45:b4:3e:46:11:54:4a:b3:
5c:f2:c5:b0:1f:bf:7e:7e:04:91:c8:d9:db:e9:39:
a9:98:1c:a0:97:e2:91:07:26:be:3f:2c:01:3e:7c:
95:e7:85:6a:46:65:01:ac:c7:a7:1d:e4:c1:9e:3d:
7b:f3:57:aa:aa:5f:fe:4c:c4:3b:84:f2:68:39:71:
c9:d3:41:2e:1e:cf:93:e1:f6:57:00:de:f8:5b:33:
9f:31:97:4e:da:5f:f5:2a:ff:46:c8:5c:d3:46:e8:
6f:e2:98:7c:a8:c5:ed:a4:66:dc:9b:72:3b:9a:49:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:19:27:1B:3D:1E:EF:4A:E1:AF:AB:EC:00:02:43:C3:08:AC:81
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9b:a9:c5:31:1d:79:a0:f3:06:07:bd:54:eb:c6:23:5a:37:
c0:a7:06:50:ae:e9:61:06:a9:c5:54:05:6b:d1:ff:33:c5:22:
0c:0d:87:ac:f2:01:23:88:22:99:23:4f:3c:f8:4b:96:d8:12:
f2:57:3f:32:d4:b9:18:be:25:9e:38:48:01:dc:2b:51:59:dc:
ed:17:bb:44:7f:5e:66:1d:24:62:cb:90:6e:d2:ca:cd:0c:47:
e8:0d:91:8c:10:0d:6c:a0:99:04:db:92:b2:66:fa:3d:be:ed:
7c:0b:91:3f:4b:a9:fe:3e:1f:0c:33:62:b5:3b:85:c1:3d:dd:
d8:61:5f:cf:6a:c1:8c:56:57:c4:97:57:74:c0:12:fb:d6:81:
8e:ac:4d:d0:b6:45:8b:80:44:b9:67:e2:99:0f:5e:d7:53:eb:
68:07:2c:0c:04:31:50:b4:d7:77:fb:35:6f:11:ce:14:39:77:
64:2a:f7:cb:b0:01:03:ba:f3:69:c0:85:bf:fb:61:ff:06:b1:
48:d6:50:0f:19:60:fb:37:b8:99:d0:87:d8:f8:16:48:3b:dd:
58:49:b9:0c:e1:ed:85:75:f8:3e:df:01:53:fa:09:ee:2a:6d:
c3:ef:c4:91:84:83:81:ec:1b:3b:e2:79:04:b7:0d:f8:53:14:
1c:db:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:10 2026 by rpki-client