Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: 6Y+c8nFxakQVOLeul9CqV2Xc5bq2M6xPNFBOobWvWR8=
Subject key identifier: 0A:15:69:08:AA:FF:28:B6:58:5B:6F:E4:69:E7:D2:A9:C2:54:9B:32
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019E3117407EFD73CFF0151F99D6A6DBCABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 1915
Signing time: Sat 16 May 2026 14:01:07 +0000
Manifest this update: Sat 16 May 2026 14:01:07 +0000
Manifest next update: Sun 17 May 2026 14:01:07 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: V9lTfzEDn5ooIYd192xDVQQPezXN4Q11Z3HMlQimlUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:40:7e:fd:73:cf:f0:15:1f:99:d6:a6:db:ca:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: May 16 14:01:07 2026 GMT
Not After : May 17 14:01:07 2026 GMT
Subject: CN=0a156908aaff28b6585b6fe469e7d2a9c2549b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:53:74:4a:29:49:a9:a8:f1:23:d9:b0:9c:
9d:8d:b5:c3:3d:80:b1:24:fe:78:31:2f:dd:cf:30:
8d:e5:e9:b5:9c:38:73:2f:3a:ef:da:ae:52:4f:17:
35:5d:d7:85:16:2e:91:56:5c:d8:4f:1c:4e:92:62:
6c:5a:ca:27:8f:96:bb:0c:52:1f:74:91:97:bc:8b:
25:04:b3:da:14:14:a7:f0:13:55:aa:00:bc:ef:12:
98:39:5b:81:42:e6:0a:8c:28:87:10:73:1b:55:74:
08:d1:04:0a:be:e3:22:e6:b0:d8:1a:70:a7:4c:5f:
58:59:a6:1d:fa:94:c7:0c:cd:e0:04:37:eb:28:23:
f3:7b:68:0a:fe:21:c5:4e:70:da:8d:96:18:f3:ee:
ce:c8:8e:99:f5:a7:63:6a:e6:f3:33:be:ad:1d:f6:
53:fa:64:4e:09:01:c2:e4:43:c3:f1:b1:da:51:34:
94:5d:ab:58:62:b3:7e:5b:3d:68:aa:be:86:e8:8e:
19:a0:5f:ed:d6:0e:35:a4:cf:98:d9:be:85:c6:d1:
08:1e:4e:15:5c:e3:69:f2:d9:cd:03:d2:94:fd:dc:
09:9f:a7:db:c1:e0:c4:af:19:4c:3c:6d:7a:9e:f9:
85:1c:a7:09:37:06:5c:de:82:96:30:6b:f2:c7:67:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:69:08:AA:FF:28:B6:58:5B:6F:E4:69:E7:D2:A9:C2:54:9B:32
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:73:ba:bf:a4:dd:6d:de:58:14:df:6b:4f:3f:09:1a:bc:
79:1f:af:c9:9b:35:c1:d9:46:89:2f:90:00:f1:ad:99:e2:52:
38:90:1c:cb:84:52:24:1a:e8:ca:0f:de:7e:f5:ff:b8:50:b1:
2b:ad:97:1b:a5:80:2c:68:b6:3b:26:f3:ae:75:e3:6e:7e:bf:
a6:29:bf:1a:1c:b8:fa:a9:d5:ea:04:f6:e3:7c:96:21:e9:fb:
9a:7c:d8:04:b4:78:11:c4:c1:57:7b:3b:75:b7:f3:81:23:f3:
84:63:b9:41:b9:dc:11:e2:8c:cd:44:4f:ef:9d:8e:11:58:44:
66:e1:0a:c7:1b:dd:15:a6:8c:f0:ea:38:12:5e:23:02:20:c1:
af:41:18:d6:4b:7b:cb:f5:2d:0c:c2:fb:43:a8:b6:f0:de:65:
f4:da:e7:b1:61:ce:f1:8e:f2:0e:8d:d5:eb:e0:47:4e:9c:f7:
b1:a1:cb:cf:02:56:a4:60:f3:aa:7c:d3:78:70:aa:ca:dd:c1:
e6:85:be:d1:c5:16:ba:c1:33:a0:44:ad:36:4e:64:4e:e0:ae:
c7:69:e7:3a:64:a0:13:ac:24:ec:fb:0e:22:14:0d:25:45:35:
5a:63:6a:aa:b5:3f:22:3b:f7:5d:d5:d3:0c:50:d6:c2:31:10:
2e:fa:9c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF0B+/XPP8BUfmdam28q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTk2ODMxOWQ3MmE5OGE3NTk0MDAzMzhiNzBmZGM2Nzg5
MTJkZTYwHhcNMjYwNTE2MTQwMTA3WhcNMjYwNTE3MTQwMTA3WjAzMTEwLwYDVQQD
EygwYTE1NjkwOGFhZmYyOGI2NTg1YjZmZTQ2OWU3ZDJhOWMyNTQ5YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnZTdEopSamo8SPZsJydjbXDPYCx
JP54MS/dzzCN5em1nDhzLzrv2q5STxc1XdeFFi6RVlzYTxxOkmJsWsonj5a7DFIf
dJGXvIslBLPaFBSn8BNVqgC87xKYOVuBQuYKjCiHEHMbVXQI0QQKvuMi5rDYGnCn
TF9YWaYd+pTHDM3gBDfrKCPze2gK/iHFTnDajZYY8+7OyI6Z9adjaubzM76tHfZT
+mROCQHC5EPD8bHaUTSUXatYYrN+Wz1oqr6G6I4ZoF/t1g41pM+Y2b6FxtEIHk4V
XONp8tnNA9KU/dwJn6fbweDErxlMPG16nvmFHKcJNwZc3oKWMGvyx2eVVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoVaQiq/yi2WFtv5Gnn0qnCVJsyMB8GA1UdIwQY
MBaAFM+paDGdcqmKdZQAM4tw/cZ4kS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1Mzkt
OGNlNTEwMThlMmU2LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1MzktOGNlNTEwMThlMmU2
LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUp9zur+k
3W3eWBTfa08/CRq8eR+vyZs1wdlGiS+QAPGtmeJSOJAcy4RSJBroyg/efvX/uFCx
K62XG6WALGi2OybzrnXjbn6/pim/Ghy4+qnV6gT243yWIen7mnzYBLR4EcTBV3s7
dbfzgSPzhGO5QbncEeKMzURP752OEVhEZuEKxxvdFaaM8Oo4El4jAiDBr0EY1kt7
y/UtDML7Q6i28N5l9NrnsWHO8Y7yDo3V6+BHTpz3saHLzwJWpGDzqnzTeHCqyt3B
5oW+0cUWusEzoEStNk5kTuCux2nnOmSgE6wk7PsOIhQNJUU1WmNqqrU/Ijv3XdXT
DFDWwjEQLvqcow==
-----END CERTIFICATE-----
Generated at Sat May 16 22:42:10 2026 by rpki-client