Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: QYMjEuP19kvYhngZsXauVticamCMvvIXs0NExBydu1Q=
Subject key identifier: 85:4D:E7:C2:E1:05:91:B5:8D:89:EB:CF:DA:62:F7:96:C0:EF:58:54
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019D25F1D7F4318F287E453691B3389E9928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0B48
Signing time: Wed 25 Mar 2026 17:01:39 +0000
Manifest this update: Wed 25 Mar 2026 17:01:39 +0000
Manifest next update: Thu 26 Mar 2026 17:01:39 +0000
Files and hashes: 1: aqNwN3-ll9HshPzliK9tAQGxaVo.asa (hash: gjrMmHCii/++x249mqnTyN00ERQyQPVEew9ThELl64I=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: VgezcXG9IPkbAyaS/6mwhdaImf/0Nllh1VDHbgiGy4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d7:f4:31:8f:28:7e:45:36:91:b3:38:9e:99:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Mar 25 17:01:39 2026 GMT
Not After : Mar 26 17:01:39 2026 GMT
Subject: CN=854de7c2e10591b58d89ebcfda62f796c0ef5854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:a6:8f:1d:10:62:25:85:59:ce:49:c4:c8:
18:fc:70:0b:a2:b9:fa:bf:a7:9b:9c:68:e9:a8:73:
6f:e2:e4:e8:22:fc:c4:fd:7d:fd:74:44:fc:e4:45:
fc:1a:87:d2:02:09:fc:bf:22:fa:3a:ee:75:9f:00:
fb:d0:e1:a1:6b:fd:56:aa:39:c7:ff:2f:92:d8:ca:
47:93:3f:b7:54:78:e5:98:df:1a:36:cf:ed:26:4c:
16:99:df:a1:4c:1c:a6:4f:51:36:2b:7f:6b:2e:1a:
d6:82:2c:f7:3b:ed:06:a0:12:18:8c:77:11:7c:fc:
0e:8c:53:37:09:2e:d0:29:34:87:c5:e0:73:b4:d3:
48:5f:2c:ed:ff:0e:8a:78:bb:63:4e:33:8d:f5:c8:
aa:00:d8:2d:8e:79:9c:ff:8a:74:87:27:5d:86:ff:
d1:39:f0:d9:9a:69:04:3c:e5:6f:9a:b1:e2:47:ce:
62:36:b3:49:3d:39:8d:f8:db:bd:42:99:88:a2:9b:
c1:52:28:38:be:e6:ff:ef:e7:d6:d6:16:4d:5c:d9:
6a:15:87:d5:79:f0:95:12:27:12:78:94:1f:9c:fd:
e9:5c:da:3e:2a:41:5e:76:e1:6f:cf:4d:f2:81:90:
26:33:15:5a:15:d8:48:7e:9c:24:bc:8e:1a:39:ab:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:E7:C2:E1:05:91:B5:8D:89:EB:CF:DA:62:F7:96:C0:EF:58:54
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:65:b7:66:2c:87:1e:61:a1:a0:5f:b6:4f:88:d7:78:dd:cd:
10:03:a1:23:a5:0c:57:a2:ac:10:3b:8e:f7:a5:07:48:ef:82:
a9:f6:0a:27:32:d0:87:f2:af:06:6f:1d:08:9b:9e:b5:15:82:
cc:b6:b8:49:8e:42:74:31:d0:56:90:51:68:c2:d3:e9:78:a4:
08:3f:a1:e2:cd:cf:9b:63:72:99:85:85:e4:5f:a9:c0:61:79:
84:dc:e4:b7:22:e0:df:cd:10:94:08:88:ba:a0:30:a8:43:05:
e6:89:d2:55:73:38:c9:d6:41:fb:fc:97:6f:33:fb:be:3c:73:
6f:54:6f:5f:6d:44:a1:43:d1:c8:ce:bc:85:82:7c:2a:df:ec:
f0:60:4f:99:1c:dc:fa:e3:0b:c4:00:30:c8:59:74:7c:86:95:
72:22:2a:df:ef:b4:a3:43:db:11:41:59:5e:e7:66:86:cd:3d:
f7:e8:dd:d7:3f:f8:87:c5:a9:6b:eb:42:9a:08:54:74:89:53:
ac:ec:a1:95:23:8b:8b:1f:33:e9:60:ac:0b:95:7d:9e:c1:af:
3a:e5:e9:d4:f2:d9:43:d4:ad:1f:b0:35:cc:ce:52:3c:a3:24:
c2:2d:cc:f0:1a:99:40:ee:34:43:65:78:ab:f7:e1:cf:ad:e8:
cf:6e:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:45 2026 by rpki-client