Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: Cj+HOnDe6oNCjLbdxLtVorO0kvUkizG5TXQPuStfBds=
Subject key identifier: C2:3B:E6:F7:26:CA:FF:0D:6B:34:9B:D9:83:B4:D0:53:59:5F:43:B6
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 019D25F202E8C38067E1A47580EF2B7AABBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 0786
Signing time: Wed 25 Mar 2026 17:01:50 +0000
Manifest this update: Wed 25 Mar 2026 17:01:50 +0000
Manifest next update: Thu 26 Mar 2026 17:01:50 +0000
Files and hashes: 1: TKIL50vHJx3mU2yrGCZ7cyXz-kA.asa (hash: Vo6w1KKM1/rvMLTgJTDXJJtM6U/uZiIyqWTgty9lyF8=)
2: pchuRg1QLyIFpwfwBa8mUvFC7YI.roa (hash: mgPigocKfj7ADfA3gO1GOzZIymW9WRZZ/OqjW5DV1fM=)
3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: zV+lSmCVOFmfvCmfZzn3fRyeQYkhaYWuFRczjq8dNY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:02:e8:c3:80:67:e1:a4:75:80:ef:2b:7a:ab:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Mar 25 17:01:50 2026 GMT
Not After : Mar 26 17:01:50 2026 GMT
Subject: CN=c23be6f726caff0d6b349bd983b4d053595f43b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:e5:6f:69:66:fd:5e:4d:48:86:43:fe:15:
57:f9:8b:46:8e:20:5e:b5:99:b8:01:80:cb:6c:63:
16:68:72:fc:e0:ef:f3:1a:7d:62:1f:40:a2:f6:36:
a6:18:f7:00:9b:cc:2d:5f:ee:59:be:26:fc:fa:90:
8d:e6:ce:21:ae:9c:c4:89:90:17:26:09:93:7a:fd:
bd:f0:12:54:73:fe:1e:b9:00:54:29:06:2e:43:b7:
fa:88:2b:e0:de:9c:f1:92:cc:2a:41:ce:44:0e:87:
b2:ac:13:a9:bf:6c:6f:44:36:21:7b:f6:16:76:17:
4c:7b:83:ab:c9:ff:1b:b4:0f:db:7b:03:9c:d9:98:
33:63:3b:a6:9e:de:21:c1:98:92:b7:15:2f:02:d8:
cd:16:3e:7a:a4:9e:f5:bb:ef:3e:39:9e:6b:c2:fa:
d5:0f:73:14:be:d7:e0:1d:ed:e1:f3:53:19:2d:9a:
2d:8c:7f:60:b9:da:17:76:6d:b6:e1:e5:26:93:32:
d0:4b:98:72:3e:71:a0:56:72:87:08:f6:22:f3:21:
44:7b:20:d2:b8:3f:31:00:30:31:ae:36:fe:67:cd:
4d:06:be:d3:65:0b:0d:8b:24:03:c2:8a:e7:22:ec:
70:07:17:d8:07:f4:a8:d0:dc:c8:6c:8c:21:f7:99:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:E6:F7:26:CA:FF:0D:6B:34:9B:D9:83:B4:D0:53:59:5F:43:B6
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:5f:4f:f8:43:37:b4:db:6b:14:83:e8:a7:7c:f8:fa:c6:
18:4d:3d:7a:00:4f:a0:05:7e:15:94:78:14:2c:bd:33:21:47:
f3:43:2c:fd:5e:66:83:3e:15:af:15:2d:7f:70:90:62:64:5d:
92:b9:37:e3:29:87:f5:60:00:f7:f2:4b:04:b1:3f:98:ec:35:
55:3e:94:e1:62:0c:b3:f8:56:1e:51:28:8b:a8:aa:a6:71:a2:
f2:08:39:2c:9f:1b:df:25:c4:b9:78:32:91:48:66:d2:65:eb:
0a:a4:49:f6:89:57:3f:6c:b3:90:2f:80:2c:b4:2f:63:17:19:
ef:66:e7:8a:30:f2:18:28:ce:b3:cd:52:0b:c8:ab:d3:48:e7:
b7:11:98:e7:12:92:b8:04:ea:c0:bf:0c:b4:06:06:91:9a:74:
ab:a5:fc:4c:35:46:32:14:b6:75:62:e7:7d:c2:ea:69:d5:50:
ca:59:d3:7d:51:fc:62:6e:d2:65:b3:d2:36:20:d6:0e:cc:9b:
3a:25:15:45:d0:c1:a7:50:2b:c0:26:a4:d4:68:e0:11:f2:0a:
ea:1d:ca:e7:39:39:85:0b:69:94:26:4b:18:89:f5:45:59:d8:
f3:26:34:66:38:94:f9:fb:0c:05:07:e1:b8:b6:90:bc:2f:76:
46:4c:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:50 2026 by rpki-client