Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: sRREl6xxp6gBYkPYZO+MkpAFIs8MZ9xOhep7yX5d8ds=
Subject key identifier: 6D:77:4F:28:A9:4D:52:EE:8D:B7:5F:C8:CC:48:7F:C5:04:7A:03:C0
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 01A0CFA420C2A8FA02AF2B7A5359664D6DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0D31
Signing time: Wed 23 Sep 2026 19:00:35 +0000
Manifest this update: Wed 23 Sep 2026 19:00:35 +0000
Manifest next update: Thu 24 Sep 2026 19:00:35 +0000
Files and hashes: 1: Fqi5GgJzBuBU-O3Svwls2oA58e0.asa (hash: aVFzS1UCWhMVB1SwHJ+JRLsU/2I8DVI5pdRtjMd5wcs=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: 64yX+ZTT52pB0yjZp3/NnEIbqtzz3wQDPJVRMgFP7IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:20:c2:a8:fa:02:af:2b:7a:53:59:66:4d:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Sep 23 19:00:35 2026 GMT
Not After : Sep 24 19:00:35 2026 GMT
Subject: CN=6d774f28a94d52ee8db75fc8cc487fc5047a03c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a3:35:9f:84:11:47:62:5f:25:79:0f:e5:a5:
4c:5a:74:af:a0:28:59:04:e2:b7:f6:40:4e:97:56:
17:2d:d1:4f:74:d3:5d:c7:22:73:78:4d:2d:15:fb:
20:01:df:75:62:15:42:b7:43:a6:67:1e:39:86:da:
c6:79:25:3d:11:f9:a1:55:dd:dc:ae:0d:fa:2f:21:
0c:68:1d:51:1d:76:10:65:d2:32:e5:7a:86:f3:51:
7a:a8:af:ad:1b:2c:3a:cb:41:2c:3b:58:f1:11:ef:
87:26:f0:84:b7:1d:ea:2d:a9:3c:2e:6e:d7:bd:9c:
93:78:5c:59:63:cf:94:e1:2b:99:a5:58:56:56:85:
55:53:b1:c8:ab:7d:8c:9c:5c:9b:3d:55:1b:99:50:
99:81:f4:b8:39:b4:b0:ac:2f:87:0f:42:5a:aa:b8:
a8:96:6e:da:18:30:da:69:0c:24:29:ef:81:65:a6:
54:b1:58:e3:74:d9:cd:2a:c8:a9:07:f6:cd:71:33:
1f:d9:6b:f2:5c:8a:d0:89:bd:d2:2f:6a:ae:eb:b2:
08:d9:81:ca:70:a3:2b:48:c2:60:ff:4e:bc:5e:9e:
14:13:8e:48:32:86:88:dc:48:2d:9d:98:fb:d2:8c:
14:89:99:e0:30:cc:d0:ba:45:db:7c:75:bb:2b:6d:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:4F:28:A9:4D:52:EE:8D:B7:5F:C8:CC:48:7F:C5:04:7A:03:C0
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:08:39:80:aa:73:4f:5c:2d:79:e9:32:2d:67:d6:9b:d2:59:
05:75:8d:32:18:ac:ef:4e:c5:65:ee:c9:fb:04:fa:0f:77:7d:
14:cb:e0:7b:ac:54:5e:34:db:0b:a5:87:13:56:6b:58:32:ee:
c7:3f:96:7c:30:28:6b:b2:12:d3:a6:b7:5e:96:96:6f:7d:e8:
28:38:33:fc:4f:fa:40:79:71:9b:5f:31:fd:5a:92:b5:32:80:
ca:35:70:21:f1:df:41:a4:11:fc:1b:69:00:ff:28:bd:7d:04:
ad:c1:70:b1:4c:a8:7f:1e:4d:75:2e:72:1a:52:f6:fa:60:73:
e7:bb:a3:83:eb:8a:45:4c:ab:7f:3f:53:b8:c5:59:cb:42:b6:
e4:a5:09:1a:f2:5b:5c:09:0f:cc:e3:d4:70:36:8e:4b:a7:e5:
70:9c:a7:61:0a:6e:3e:04:5f:d0:d2:90:40:7e:fa:c1:8e:5a:
4c:74:55:26:c7:64:00:5c:a7:36:e4:54:8d:a7:5e:f8:6d:31:
5a:54:44:05:bc:de:57:8e:e2:ea:5a:05:8c:87:cf:a7:6f:84:
e4:ad:4b:89:00:dd:77:24:e6:74:ac:9a:ff:a6:b9:5c:c6:e5:
c5:dc:ec:44:b9:ab:5d:58:6b:c1:ef:9f:4e:e4:71:3e:d2:3c:
48:fe:c7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:29:35 2026 by rpki-client