Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: WB8phkv2GXRDvpAiXeZo131fG3tW+Kbiwfu4hfZLs8Q=
Subject key identifier: DF:91:0C:60:DA:CA:9C:60:B9:FA:88:F1:FA:77:A4:F3:85:6F:5C:3B
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 01A16D5B2937FA17429EF41EA56BE2823473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1AB9
Signing time: Sat 24 Oct 2026 10:00:53 +0000
Manifest this update: Sat 24 Oct 2026 10:00:53 +0000
Manifest next update: Sun 25 Oct 2026 10:00:53 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: 6E89K4D4TDC+o6A+hiDYUdNAodlsF0olCOehNYKgRvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:29:37:fa:17:42:9e:f4:1e:a5:6b:e2:82:34:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Oct 24 10:00:53 2026 GMT
Not After : Oct 25 10:00:53 2026 GMT
Subject: CN=df910c60daca9c60b9fa88f1fa77a4f3856f5c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7b:d7:d2:59:89:b7:cf:b2:14:53:e7:52:34:
bc:33:e7:29:27:1f:49:96:42:54:f7:4d:4d:bb:85:
af:90:0f:6a:d4:dd:80:da:26:4d:75:41:18:9e:02:
db:c3:33:b9:8e:7e:3e:31:f5:d8:9b:da:8f:db:e7:
68:8b:fb:26:02:83:29:9f:f9:a0:03:8d:65:57:95:
e6:bd:d1:af:8f:80:c9:09:4e:a8:99:bb:e4:43:6d:
a2:16:50:5c:63:fc:05:69:1f:cb:a8:50:c3:fc:f8:
89:fe:89:49:5b:10:64:2f:cc:95:19:eb:33:b7:7a:
2c:fc:dd:68:57:0f:be:9f:e6:b3:b8:c2:a7:fe:88:
98:78:7e:6a:ff:50:79:94:20:b0:c2:51:6f:bf:ad:
ff:a4:d2:ed:31:d1:d3:cd:df:8e:88:c2:4d:ce:75:
8b:2f:68:75:88:a3:8f:f3:21:7f:d6:bb:a8:15:38:
44:a5:9a:e6:77:67:c7:64:ad:cd:2b:4a:52:17:af:
53:3c:53:5c:a2:17:28:71:b2:0f:f1:e6:1d:61:26:
c4:ef:09:b9:30:27:f3:62:be:d7:cb:e6:0a:b4:e1:
50:b2:14:57:7c:19:3a:ef:3a:f5:5e:f4:32:cb:d0:
1b:21:fd:dc:ee:bf:43:85:56:77:d9:8b:7b:a7:76:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:0C:60:DA:CA:9C:60:B9:FA:88:F1:FA:77:A4:F3:85:6F:5C:3B
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:74:ee:a5:20:f8:38:38:cf:d1:d6:82:2a:7c:01:46:4b:4f:
f3:dd:76:c6:5b:65:7a:96:05:b8:f1:ad:2d:b9:9c:ce:f4:6e:
72:76:3f:5c:25:eb:2d:02:70:b9:66:29:41:6e:d6:94:26:98:
ee:50:a7:bd:ac:17:93:ef:ed:79:02:e3:7b:e7:e1:5a:08:4e:
7c:48:19:c6:e6:31:a9:37:88:fa:71:cc:15:f4:39:0b:09:4e:
15:59:9d:26:e5:8e:58:38:0d:12:42:df:51:3e:fa:e6:5d:d4:
a9:37:57:bd:c0:30:a3:8c:96:e3:45:7a:51:64:a1:a2:2d:53:
71:d9:09:dd:94:97:4d:9a:80:b8:f4:f4:47:15:9b:e2:5f:c7:
0f:4e:74:92:91:43:8d:1d:91:b8:96:5d:8f:2f:be:81:14:bb:
fd:98:6b:37:61:45:44:8b:0d:33:51:2d:d2:bc:e7:42:b2:c5:
cf:4c:5a:f2:8a:10:1c:98:46:62:39:bd:fb:20:35:58:40:6d:
b2:1b:28:41:01:71:a2:b6:e3:62:26:fa:a8:54:53:bf:d3:18:
3e:55:59:6b:62:83:43:de:05:02:f0:49:16:3b:5b:71:1f:90:
67:c7:5b:5d:22:52:6a:38:34:20:be:8f:8c:ba:70:8b:07:8a:
f2:3d:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:35:04 2026 by rpki-client