Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: 0iaNWZZHxm0ZiIyj1PV3unvqYELGa394qHnfAsaPc0s=
Subject key identifier: 07:71:CD:72:00:86:D2:CA:05:CD:C6:07:EB:32:46:20:4A:2A:C7:B6
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019E1D22C0557D942106FD59F7204FF421E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0BC8
Signing time: Tue 12 May 2026 17:01:17 +0000
Manifest this update: Tue 12 May 2026 17:01:17 +0000
Manifest next update: Wed 13 May 2026 17:01:17 +0000
Files and hashes: 1: aqNwN3-ll9HshPzliK9tAQGxaVo.asa (hash: gjrMmHCii/++x249mqnTyN00ERQyQPVEew9ThELl64I=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: Y5TG8snM/IfOlLcgrH9m04V/5fyWxjZyE/+yRk0/i+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c0:55:7d:94:21:06:fd:59:f7:20:4f:f4:21:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: May 12 17:01:17 2026 GMT
Not After : May 13 17:01:17 2026 GMT
Subject: CN=0771cd720086d2ca05cdc607eb3246204a2ac7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:2c:03:5e:0b:f7:70:d1:7a:ea:ba:bd:86:
14:0e:79:cf:95:d3:81:a2:d4:4b:fb:f1:52:0d:db:
fe:91:5b:84:74:3b:45:6b:b0:65:a5:97:eb:3a:99:
ba:f0:e4:78:00:fd:f4:6e:f8:f9:ba:17:ba:c8:41:
9e:52:5f:70:e3:cd:ea:8c:43:4f:fc:8d:4e:bb:ea:
1d:c2:56:e2:8b:c2:37:db:9b:a9:fa:2d:93:57:17:
78:eb:9f:53:b2:47:f4:80:25:a2:00:18:56:33:ef:
4b:08:c5:18:c3:05:de:a9:85:d2:fe:b1:a7:92:e5:
f3:8d:15:25:b1:b7:71:6e:a0:7d:d2:3e:5f:0e:08:
84:8e:43:8f:86:6d:0c:70:1f:d1:0e:72:ce:26:55:
b1:47:87:51:dd:ef:ad:27:05:93:3f:b3:f8:bd:4c:
cd:24:b8:18:f0:23:3b:f0:1d:21:f5:df:4c:00:9d:
7f:ce:37:fa:dd:e9:53:e0:e5:76:f4:4b:84:3b:cf:
90:0b:ba:07:18:38:20:f1:f4:6c:54:be:f4:03:d4:
7e:c6:74:57:e6:11:bf:19:5c:9e:b9:0e:98:57:8b:
e4:ee:f8:a0:7f:52:9a:80:76:08:93:10:5b:99:3c:
6a:59:50:72:64:8d:20:7d:64:90:90:81:b5:59:30:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:71:CD:72:00:86:D2:CA:05:CD:C6:07:EB:32:46:20:4A:2A:C7:B6
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:75:78:da:a7:91:8f:26:3e:2a:ef:0e:36:c0:21:0d:c6:
64:9a:11:4a:bd:ec:ef:48:e0:74:35:da:73:20:3f:be:a4:4f:
c5:58:ea:48:b2:27:59:48:81:f9:e4:73:a8:eb:85:7a:f3:3d:
26:83:b7:4a:c2:f5:ea:14:df:22:7e:d6:a3:6d:44:6c:05:20:
ea:70:a3:9e:b1:53:2d:66:20:d0:14:55:fb:56:04:d2:e9:b1:
8f:f0:b9:d3:33:ff:7c:e5:2f:2f:3f:49:e5:3b:85:4a:df:3e:
f0:37:89:aa:77:58:39:71:74:e9:57:b8:b1:ec:cf:0b:18:8a:
b9:20:b9:51:a4:62:8a:be:52:bf:e0:eb:69:71:1b:5f:39:e9:
25:b2:f6:5c:54:0f:b2:f1:c0:7e:93:11:33:ef:3a:27:fb:59:
8a:bc:54:12:81:db:0f:4a:a6:71:c0:27:85:ee:00:7f:0f:cf:
96:04:1c:f5:35:31:0d:44:91:12:5d:b6:7a:f7:72:47:3c:88:
0e:9b:86:ca:8a:a3:11:10:35:0a:56:5d:22:5f:ad:b1:6f:2c:
5c:ef:cd:a0:83:09:9b:d4:e4:91:17:2b:23:46:fa:14:08:a0:
e4:24:95:11:03:d8:7e:2a:c5:80:1c:77:6c:b5:46:01:86:a1:
5e:61:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:44 2026 by rpki-client