Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: kusHzFmXYvEbuI2kHQ4WR36hgx3yhiI3MnRZcY+lpl4=
Subject key identifier: AD:D7:E2:BA:EA:C3:26:52:12:CA:A8:25:7A:4F:DD:B6:CC:17:83:B3
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 019D08F967BADD98F0C9EDF861D0353068D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 0777
Signing time: Fri 20 Mar 2026 02:00:55 +0000
Manifest this update: Fri 20 Mar 2026 02:00:55 +0000
Manifest next update: Sat 21 Mar 2026 02:00:55 +0000
Files and hashes: 1: TKIL50vHJx3mU2yrGCZ7cyXz-kA.asa (hash: Vo6w1KKM1/rvMLTgJTDXJJtM6U/uZiIyqWTgty9lyF8=)
2: pchuRg1QLyIFpwfwBa8mUvFC7YI.roa (hash: mgPigocKfj7ADfA3gO1GOzZIymW9WRZZ/OqjW5DV1fM=)
3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: yEeyrvsBgMad/tQ/8cX+hMopG2OY1MY8v005NhLREPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:f9:67:ba:dd:98:f0:c9:ed:f8:61:d0:35:30:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Mar 20 02:00:55 2026 GMT
Not After : Mar 21 02:00:55 2026 GMT
Subject: CN=add7e2baeac3265212caa8257a4fddb6cc1783b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:34:c7:83:e2:ff:fb:e3:5e:96:f2:cd:a1:
59:ad:0e:cb:29:85:08:0c:84:45:d1:9b:d4:2b:05:
04:64:7c:c5:70:eb:54:2e:3f:f1:9c:f5:38:d1:2a:
8b:19:58:22:a5:5a:1f:02:1f:9e:8a:ba:bf:99:74:
37:4f:07:a6:d5:60:a4:e1:81:2e:0f:7b:1e:0f:cc:
d0:46:f4:6d:7c:a1:bf:a3:84:b7:fa:1f:b3:12:c2:
eb:3a:84:29:b9:13:5e:d3:b9:86:05:37:8f:50:93:
bf:47:6b:ed:22:f4:b8:35:8c:ad:d2:c1:06:25:74:
69:d2:4e:61:06:c6:0a:52:b6:62:12:f5:54:e2:6c:
56:4a:6f:41:04:b8:60:b3:45:a2:e9:bb:b7:08:be:
b5:e1:6d:ba:81:86:a3:fe:7c:8f:78:7a:60:50:aa:
73:7f:b7:d8:b9:e8:40:ef:a3:67:3c:3e:70:a6:44:
c6:04:56:82:5a:7f:9b:3b:50:63:21:e3:ea:cd:b4:
29:76:21:9a:ea:dc:37:c2:51:75:3a:64:c1:e3:22:
f2:4b:ca:c1:31:91:b1:47:95:27:6e:d2:60:9e:4e:
d1:a9:41:4d:66:02:ce:c0:1c:2d:10:4d:70:fa:37:
dc:ab:0f:ab:41:b2:da:8d:d2:11:55:ad:11:37:88:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:E2:BA:EA:C3:26:52:12:CA:A8:25:7A:4F:DD:B6:CC:17:83:B3
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:56:68:9f:16:91:ce:b4:07:f4:04:5e:3e:0a:0f:de:da:63:
0f:6a:6b:32:be:05:a6:97:7e:fe:ef:ae:e3:db:03:d0:d8:48:
2f:ef:a0:9b:a0:3a:37:1a:fe:11:94:7c:10:03:5f:c2:ec:76:
43:91:0d:2b:ef:82:64:56:f8:90:de:34:59:8d:b6:66:62:3b:
5a:e0:2a:ac:16:f6:0a:e2:de:6c:7d:26:82:1a:c9:54:6c:4f:
6e:8b:44:e0:b2:35:cc:df:37:08:c2:ef:41:ef:6d:77:63:7a:
c3:4a:28:8a:d5:4e:74:68:1e:d7:cd:98:07:96:4b:e2:72:a6:
c9:ab:d4:6e:a9:46:99:c1:c5:71:63:fb:12:a2:da:37:3a:62:
c6:37:81:54:21:6b:61:8a:3c:67:8b:fd:83:14:a7:8f:cf:eb:
7d:f7:a5:33:b4:4b:20:12:ae:8e:27:0d:24:aa:d3:d5:3c:b6:
8e:42:b2:67:24:29:ac:f1:30:fa:69:c1:22:33:5c:ea:1d:55:
b1:b5:a0:10:3b:8f:5f:3c:a6:3b:37:48:2a:bf:fd:f8:a4:c3:
95:b5:f2:4f:11:50:62:c9:6e:9f:56:16:e8:d3:d5:13:1b:e3:
96:ec:c4:a2:37:04:bd:8e:2f:4f:f8:a5:58:f9:61:ac:34:3e:
25:4e:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 13:22:21 2026 by rpki-client