Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
File: z6jgKeXx6FsRFss9M8haObsslNE.mft (raw, json)
Hash identifier: ERKd8KO9SLWT2PaqiLRa3WD8LmcLy/q02EPiW4Hy/Rg=
Subject key identifier: DD:6D:F2:3D:D3:1F:19:69:A3:E9:04:8E:91:01:9F:DB:AB:A5:B1:09
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 01A08C7B7312A79BE699C133B465A24A4A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:35 +0000
Manifest this update: Thu 10 Sep 2026 18:01:35 +0000
Manifest next update: Fri 11 Sep 2026 18:01:35 +0000
Files and hashes: 1: O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa (hash: +cSVPrrZGE0RG6ua3kDeP5fHxWhOEOv6pgh3gSfnwNo=)
2: lUVl9Benklpiw6Ylck0dSuxSo-Q.roa (hash: p2ACt84JdaKlgpHAL/YLec1OeIXMp63TXCMnSlAEvAw=)
3: oaqhAz8r6QOEtVOyS7uoPCODlHc.roa (hash: c6tnbsMZPWMkjfAiaVIbYOOTReRqsQcVwvFXobf5RrI=)
4: z6jgKeXx6FsRFss9M8haObsslNE.crl (hash: RZSXLSVEa6/sb9GeGhvFNSPWZHknXak0Dl18e75eFDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:73:12:a7:9b:e6:99:c1:33:b4:65:a2:4a:4a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Sep 10 18:01:35 2026 GMT
Not After : Sep 11 18:01:35 2026 GMT
Subject: CN=dd6df23dd31f1969a3e9048e91019fdbaba5b109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:8a:bd:df:c7:f1:c5:37:b7:28:c1:8e:07:
bd:8f:77:36:32:2c:a0:a3:c0:5d:1a:72:c9:b7:03:
b5:aa:d4:ad:06:7d:32:62:60:8d:86:09:5c:94:f7:
b1:ca:f0:c3:98:73:04:b6:b4:98:39:48:08:c7:dc:
9e:12:59:c4:b9:9c:23:6b:58:39:c9:13:3f:da:1e:
45:73:9a:d8:e0:ea:00:e0:92:02:72:08:8a:8f:89:
0a:c9:c5:7b:c8:4f:6d:9e:e8:93:f2:33:fd:af:38:
49:e4:53:16:3e:aa:6c:24:0f:9d:39:9e:c2:67:64:
ca:5d:a7:52:e8:5c:d2:a0:16:68:e9:eb:60:db:b1:
05:f9:dd:83:d8:36:a8:74:f0:24:b3:c8:c5:c6:79:
ee:56:95:50:86:1f:e9:42:6b:7a:81:d7:da:6d:4a:
e1:83:52:c9:ba:48:b3:87:b9:21:90:f1:c1:30:f0:
f5:e8:4a:fa:20:69:3a:57:8b:f5:6c:73:7d:99:16:
35:56:b0:7e:73:61:7b:47:03:9b:df:e9:03:b4:26:
88:b0:ef:29:5d:44:03:31:c6:79:f9:eb:60:16:2a:
08:3b:75:e3:07:b9:6d:69:86:6f:4a:4c:22:04:f3:
e9:af:b8:eb:5b:4a:5c:14:d8:fc:62:73:7d:c2:35:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:F2:3D:D3:1F:19:69:A3:E9:04:8E:91:01:9F:DB:AB:A5:B1:09
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:86:44:47:9c:24:c2:da:85:a8:38:45:2a:49:cc:4c:46:f0:
a6:b5:e2:8c:7c:9a:66:b3:e0:95:6e:ed:e2:84:0a:49:31:b8:
14:ff:01:c2:23:07:86:1f:f5:43:91:f1:cb:f2:69:20:4c:7b:
6c:90:0d:12:70:17:95:42:8e:1f:72:87:6a:2d:0e:ea:fb:92:
79:c3:63:74:89:b8:61:08:cc:7e:a0:23:7c:a6:e5:f4:a0:74:
ea:b7:4a:49:86:78:52:1f:51:2e:ec:96:35:64:7f:5e:ba:dd:
ba:57:26:72:8b:18:5d:15:7e:40:6d:db:67:09:6c:ce:c5:dd:
28:e4:d4:c0:53:e8:9a:a5:c0:bb:e8:88:2d:be:fd:e4:8d:93:
44:4d:52:4c:5e:44:b6:83:15:0b:00:e8:fa:ae:4e:84:83:24:
f7:78:a6:23:fd:60:a9:21:86:a2:7f:16:a5:b1:6a:f6:ed:7f:
1f:57:bf:b7:ea:03:76:c7:e3:f7:79:b8:2a:af:8e:33:80:62:
00:5f:b7:05:32:12:68:78:c1:30:68:9f:56:bb:8e:ff:e3:64:
bc:51:f2:50:1d:de:0c:32:90:b9:6f:9d:99:2f:d8:f4:ca:1f:
af:3c:c7:a0:8f:1d:cb:8d:ba:cb:a1:64:1b:fe:a4:91:d5:74:
2f:fb:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:38 2026 by rpki-client