Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
File: z6ExZhMNKdWtimB9gUmNpmAm0DY.mft (raw, json)
Hash identifier: 9CLf/x+MQj0Hwt6jdjoHIWExEmaANtW2yFWK1agP7E0=
Subject key identifier: 41:8F:E7:B1:66:62:1A:CA:5B:D3:9B:D4:03:B9:3F:05:E7:14:62:18
Authority key identifier: CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
Certificate issuer: /CN=cfa13166130d29d5ad8a607d81498da66026d036
Certificate serial: 019D2771F292EB10B58F3F0A42B9D61C551B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
Manifest number: 0595
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: 4-70XZL_LoLYwCdfws1cTL2SnVk.roa (hash: E/rkxdhnUNVw1rmGpTXdl2JJv9S4hDWoZIecolBNcc4=)
2: z6ExZhMNKdWtimB9gUmNpmAm0DY.crl (hash: QRIXdzQ/DMbFp58oSkfBARPCtrj2qU6IjYT4zZ9w3j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f2:92:eb:10:b5:8f:3f:0a:42:b9:d6:1c:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa13166130d29d5ad8a607d81498da66026d036
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=418fe7b166621aca5bd39bd403b93f05e7146218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:36:c2:dc:92:d8:ef:55:9b:d4:c2:83:13:
5e:37:90:a7:fe:d0:75:07:ea:d0:3c:a2:36:49:1d:
63:1f:4a:41:1c:17:a7:f6:24:17:b9:8e:73:e3:2d:
f9:03:d0:87:8b:2c:0c:07:5b:80:85:ea:20:73:41:
37:ec:ad:44:5e:4b:dd:13:20:2b:4e:5e:e3:70:5a:
43:f6:b4:fd:77:ce:2e:83:5b:f7:93:0f:70:2c:d6:
d3:46:98:fb:13:61:8d:85:cd:ab:fb:eb:f6:ec:1e:
7d:4c:ef:8a:84:db:74:49:ac:3b:62:c0:01:49:00:
66:da:7a:58:df:64:41:85:d1:e8:31:e1:13:c1:d9:
da:46:e1:b0:77:aa:3b:86:55:90:8e:9a:73:06:3a:
25:06:31:da:fd:e4:59:ba:69:7e:4f:51:3a:f4:e4:
e7:6b:92:43:0c:dc:b4:05:6f:03:2a:cf:33:cc:22:
93:ba:9f:56:07:f1:00:10:5d:18:22:fa:84:47:c2:
d9:1f:37:26:a1:8d:10:5d:56:64:28:6f:77:64:29:
dc:57:15:8c:27:08:8c:52:08:39:4c:a1:84:9a:f5:
4d:87:45:7a:1e:e5:91:a4:f9:39:7c:3d:c6:29:81:
f4:aa:08:40:a3:eb:f1:6a:5d:6a:99:64:49:eb:34:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8F:E7:B1:66:62:1A:CA:5B:D3:9B:D4:03:B9:3F:05:E7:14:62:18
X509v3 Authority Key Identifier:
keyid:CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2e:75:e7:f2:51:f8:47:56:09:e0:a7:7d:3a:20:fd:08:b4:
03:66:1e:8d:31:25:88:11:43:dd:a0:b9:fe:fd:31:4d:43:6a:
f0:e9:ef:da:98:d4:5a:bd:95:67:5a:16:92:e9:69:44:cf:97:
1e:fb:89:4b:83:e3:b4:08:60:a4:e2:e7:67:b8:45:74:e9:1f:
dc:75:a1:63:cd:b4:65:be:a1:4f:20:ab:1c:c9:d4:4e:dc:d2:
f5:02:ca:e0:31:df:a9:6b:ba:13:79:c2:70:96:67:45:cd:dc:
c1:46:03:b7:58:b7:24:f2:68:eb:21:37:b0:71:d6:8c:cb:84:
88:63:90:18:84:4d:a0:8f:85:84:7a:79:d2:46:8a:03:f8:ff:
be:8d:16:0b:02:a8:e4:71:f1:e6:31:3a:78:4c:3e:7e:11:33:
98:7b:d3:51:82:d9:7b:8b:bd:d1:a5:8c:0d:2f:67:cb:38:de:
10:03:9f:d7:f5:ee:fe:cd:a0:21:21:7b:ef:60:23:ed:56:f0:
2b:73:b0:ca:38:13:71:8a:43:8f:b6:ac:65:b3:2e:d7:45:aa:
9e:cc:18:17:0d:3f:10:ab:cc:db:8c:37:18:2b:c7:66:20:1b:
cd:6c:24:f3:16:4e:47:92:a5:f0:01:3c:d9:f8:d7:ec:71:b9:
ed:03:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:38 2026 by rpki-client