Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: 8FZc8Adz1A91LUyexzxr3ihO0OHgFMeKE0Py0xxNoSI=
Subject key identifier: 77:EE:0B:51:DA:AD:D5:95:01:EB:CE:90:0A:17:33:C5:9F:70:B7:F4
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019F8FEBF270F12FFCBA1B05202513580EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0C88
Signing time: Thu 23 Jul 2026 17:00:32 +0000
Manifest this update: Thu 23 Jul 2026 17:00:32 +0000
Manifest next update: Fri 24 Jul 2026 17:00:32 +0000
Files and hashes: 1: aqNwN3-ll9HshPzliK9tAQGxaVo.asa (hash: gjrMmHCii/++x249mqnTyN00ERQyQPVEew9ThELl64I=)
2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: IP/DJIVYz/LXr/diW3CKjNQ119+2aDlQwvnBpjKlGGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f2:70:f1:2f:fc:ba:1b:05:20:25:13:58:0e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Jul 23 17:00:32 2026 GMT
Not After : Jul 24 17:00:32 2026 GMT
Subject: CN=77ee0b51daadd59501ebce900a1733c59f70b7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:7a:8c:82:1a:bb:51:60:87:5b:4d:9e:46:
1c:65:d1:85:32:c5:b5:5b:54:fe:9f:b4:e3:41:ee:
2a:2d:1d:fc:a7:7f:10:55:f9:76:64:1d:65:ae:e3:
a0:a8:3e:5d:80:b2:ea:b9:f5:fa:a4:56:90:49:88:
22:db:d7:46:de:31:ec:64:18:3a:b5:8f:41:8b:e0:
51:65:df:29:39:44:50:3b:ae:bc:57:6a:4e:35:ca:
26:6b:63:c9:22:d5:bd:a7:5d:c7:61:92:c2:f7:78:
b1:dd:e0:50:d7:32:62:45:4b:86:8b:fe:96:27:83:
ad:0d:6b:6d:8a:01:ec:b4:1f:3d:47:64:ce:36:a1:
f6:a8:f1:b9:6f:11:85:ed:09:ed:df:60:c4:1a:60:
68:9b:78:30:a9:77:8b:02:9f:ac:09:51:f7:09:4c:
8e:58:29:3d:94:04:68:51:a7:2f:2e:24:01:24:86:
81:77:52:80:03:79:4e:85:88:f2:c7:90:47:6f:26:
b5:69:86:66:78:7d:85:4d:e1:b6:21:59:e7:72:53:
e4:eb:a2:fa:b2:1b:97:c5:f0:01:5f:d4:3d:5f:66:
0c:e6:b5:6a:4b:44:db:f0:12:6a:a9:ec:9d:9b:61:
2e:3e:2f:89:08:7e:58:e4:9e:e3:09:51:32:94:5f:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:0B:51:DA:AD:D5:95:01:EB:CE:90:0A:17:33:C5:9F:70:B7:F4
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cd:11:42:1a:a3:ac:d1:9e:c9:48:f3:59:b6:f5:49:64:5c:
a4:01:d1:2a:04:af:a3:10:46:ee:3c:82:ae:9b:4b:9b:50:9a:
83:49:14:d5:23:33:4a:c7:b6:9b:69:64:1e:5a:2e:48:a2:7d:
c6:ee:c9:10:e8:df:d5:7a:98:f7:79:4a:c7:d2:e4:99:b1:03:
47:53:c5:9c:67:d9:32:b7:5e:1d:00:9c:a3:77:95:b1:df:83:
0b:62:27:9f:e6:62:ab:31:30:5c:0a:b7:99:df:0a:ef:80:a3:
92:ca:f3:aa:e4:f9:07:3a:04:25:55:d3:74:e9:be:ad:43:7d:
c7:13:7a:e0:4d:c0:e0:92:6f:c2:1a:97:8c:66:3b:1e:66:53:
af:6d:44:98:98:d8:68:44:6b:13:bf:43:b3:bc:86:72:3a:0c:
99:6d:c1:db:39:1f:72:27:4f:06:74:58:48:b5:6f:34:f6:e2:
52:db:c2:b4:66:05:c9:18:a5:9d:28:47:d4:f8:bb:09:5b:b0:
d3:6d:14:a1:75:f5:c0:6e:fd:29:2d:20:34:90:35:da:e0:1a:
6a:92:52:50:23:c6:a0:2d:82:15:38:aa:02:02:0b:58:aa:d6:
9c:73:2b:3b:6e:b6:ae:bf:af:9e:c4:a8:a0:72:59:71:03:47:
27:25:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:38 2026 by rpki-client