Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
File: zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft (raw, json)
Hash identifier: nBqy5PhNz3RwC/mDLJzT1UItnGBwrfVPPskZ9cNkkFw=
Subject key identifier: C3:D4:8F:AF:7E:29:63:DA:BF:6B:15:FC:26:C3:AB:BE:A0:AE:1F:3E
Authority key identifier: CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
Certificate issuer: /CN=cc387a840412331ae1913dedd0bea4c619b8a730
Certificate serial: 019E1E355943B5EA0C1054D94CAE00533C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
Manifest number: BB
Signing time: Tue 12 May 2026 22:01:13 +0000
Manifest this update: Tue 12 May 2026 22:01:13 +0000
Manifest next update: Wed 13 May 2026 22:01:13 +0000
Files and hashes: 1: qIYB0A4RSZN6LE7W59v3zP7y3P0.roa (hash: 5gqhlF6BkyZHYPK5fz4mRNQz3WRvXUePbuSTbTO9q8g=)
2: zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl (hash: cDOwbwmLnznYf5QNlh/d/OGsPv0hcKZdcCbZ8ttN4cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:59:43:b5:ea:0c:10:54:d9:4c:ae:00:53:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc387a840412331ae1913dedd0bea4c619b8a730
Validity
Not Before: May 12 22:01:13 2026 GMT
Not After : May 13 22:01:13 2026 GMT
Subject: CN=c3d48faf7e2963dabf6b15fc26c3abbea0ae1f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:34:46:96:07:64:42:de:41:7d:5b:fb:d4:12:
75:75:8c:c7:44:b2:3d:fa:ef:a1:1b:79:3a:b5:b4:
08:a1:89:43:d5:46:26:d5:02:90:c0:6f:0e:e9:fb:
15:fb:49:27:a0:00:cb:59:0f:64:49:2b:f2:aa:06:
4e:50:06:47:84:bc:e2:2d:e0:1c:8c:7d:95:1b:85:
2b:0b:aa:2d:e7:ef:31:e5:a2:00:a2:2f:88:43:33:
a5:22:72:62:55:ce:5c:7b:20:1b:2f:b6:d0:87:0f:
77:8e:b3:4b:3a:5d:ba:2c:a6:25:7c:d5:5c:eb:4d:
10:1c:46:e1:3f:5f:26:68:c3:34:54:65:d5:09:44:
3f:c4:9a:b4:29:61:a7:2a:19:56:de:4c:ca:a3:54:
a9:11:fc:3c:5b:8e:90:92:b0:2d:67:86:ab:a6:bc:
5d:22:77:b1:78:75:23:cc:46:d5:d4:8a:58:8b:cb:
ef:79:86:ee:c4:f0:ae:39:a8:39:4d:38:6b:a4:67:
5c:71:95:89:1f:f8:1a:63:fe:d8:8f:5f:80:ba:8c:
1b:c6:96:70:96:8c:09:12:11:cd:68:3c:e6:65:70:
90:3f:4c:3f:1a:bb:69:14:30:73:7b:f2:da:6d:5e:
9a:97:ec:bb:e0:95:21:6c:7c:65:ab:77:cc:7f:46:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:8F:AF:7E:29:63:DA:BF:6B:15:FC:26:C3:AB:BE:A0:AE:1F:3E
X509v3 Authority Key Identifier:
keyid:CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ae:da:f0:d7:f1:84:80:0f:16:5c:f2:60:fa:68:6a:e2:10:
2b:f0:c8:8b:eb:34:89:d2:04:c0:bb:c2:e3:52:57:86:3b:29:
ff:fc:19:8a:be:54:97:e4:1d:b0:9b:1c:1d:a1:40:83:cd:d0:
d1:d9:31:59:e7:8d:32:58:d3:37:c1:35:a4:d6:38:d4:c3:87:
7d:d5:ab:c9:36:63:21:52:66:86:a8:4e:8d:cc:03:6d:2c:b6:
ba:b9:e6:e7:e8:c2:01:4a:e7:40:b8:81:23:0a:3f:d6:a9:1e:
3a:04:09:d5:9f:88:ce:74:9a:66:b0:4e:d5:cf:8e:a7:2b:1d:
da:c9:bf:18:86:90:de:e0:1c:55:84:52:df:ff:7f:80:6b:0d:
b8:a7:f3:bf:7c:25:1f:45:14:06:61:61:56:c2:30:5e:26:ca:
a3:a3:43:04:2b:10:13:21:a1:90:a8:ae:78:29:59:47:d3:e7:
df:6b:a7:85:9d:16:2d:53:f5:8d:4f:7d:68:af:47:7f:bb:af:
3d:20:9f:bc:7a:c9:c0:96:15:a9:50:38:c5:9c:c0:5f:93:05:
1d:3d:be:76:76:43:7f:c2:cc:e2:25:f8:16:85:e0:7e:86:8f:
13:8a:4e:5c:1a:91:0a:c7:8b:d6:c7:4d:aa:1b:22:e5:83:84:
d2:f7:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:31 2026 by rpki-client