Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
File: z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft (raw, json)
Hash identifier: AgEm7AtxhghCBHuWfFlLEVwGxlNqgVshe0QM6cGvaak=
Subject key identifier: 7C:15:7C:CD:C4:79:EC:FE:35:3A:E7:80:48:BD:90:31:B8:F0:6D:5B
Authority key identifier: CF:AC:D2:2F:28:7E:84:C2:3B:4E:89:64:F3:B1:1E:F1:25:A1:C8:18
Certificate issuer: /CN=cfacd22f287e84c23b4e8964f3b11ef125a1c818
Certificate serial: 019E2135F855682B3CB8B7A4496ED8A0D891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
Manifest number: 98
Signing time: Wed 13 May 2026 12:00:45 +0000
Manifest this update: Wed 13 May 2026 12:00:45 +0000
Manifest next update: Thu 14 May 2026 12:00:45 +0000
Files and hashes: 1: UPMp3Af0dIr169kINqk_eQVjuRo.roa (hash: w8xH9Ru6usUFiW6X7kxuFSu8EELCqYb7m7E2r33BxXM=)
2: fYb3yqxYZbERWvZR_A7UqgvLBhg.roa (hash: 0iZV/WEPOO770yHBZVc4wL21UBM51H4s8ObdaVDkQ64=)
3: z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl (hash: FsPN9dJ4ApWxB15MnNMeI/6E9JIjgKaxx4c/ZUtK01M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:f8:55:68:2b:3c:b8:b7:a4:49:6e:d8:a0:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfacd22f287e84c23b4e8964f3b11ef125a1c818
Validity
Not Before: May 13 12:00:45 2026 GMT
Not After : May 14 12:00:45 2026 GMT
Subject: CN=7c157ccdc479ecfe353ae78048bd9031b8f06d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:a3:f7:20:0a:4d:c0:8f:2d:3e:25:a9:2b:
e2:b2:49:09:be:a1:f7:7f:20:af:1a:5b:8f:98:f5:
cc:94:07:67:37:91:8f:23:16:02:48:a3:0e:58:a5:
21:03:83:bd:65:8e:3a:57:3f:cc:fd:e8:00:8d:2e:
c8:0e:4f:06:d6:2e:ea:85:b5:58:be:44:31:45:7b:
be:73:02:f3:00:5e:27:2a:0a:a1:7e:3d:93:47:00:
c1:f0:0d:72:86:38:b8:6b:18:b1:86:92:a9:69:bc:
37:5a:99:12:0b:06:56:88:74:40:a6:65:66:88:ee:
cc:45:93:de:b3:38:9c:99:bb:f6:db:23:e1:9b:bc:
1b:a2:7c:66:1c:f5:79:e9:04:cb:26:17:b4:65:15:
aa:d5:33:13:a1:51:59:12:ae:83:fd:bc:e0:7d:94:
51:7b:63:35:77:aa:c1:be:f9:a1:04:f7:ba:4d:3e:
1e:db:c5:e2:51:ad:f0:fb:c7:74:26:99:cf:cc:33:
a2:46:7d:dc:7f:5d:4f:2f:27:ec:20:4a:a2:df:37:
31:82:2d:ac:1a:ae:28:99:6f:e5:2e:5b:dd:57:06:
8b:f4:5c:de:0c:f2:64:ed:56:2f:f8:a6:51:22:f1:
76:8d:4c:78:24:8c:b5:c1:e9:12:37:d8:26:b8:73:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:15:7C:CD:C4:79:EC:FE:35:3A:E7:80:48:BD:90:31:B8:F0:6D:5B
X509v3 Authority Key Identifier:
keyid:CF:AC:D2:2F:28:7E:84:C2:3B:4E:89:64:F3:B1:1E:F1:25:A1:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:65:06:51:8e:df:2a:e3:cb:f4:e1:45:87:1e:dd:75:45:7f:
c9:05:43:4a:5a:ec:8f:d9:34:be:d0:07:80:69:fa:2c:8f:cb:
42:8c:22:dc:29:65:5b:a5:fa:88:f0:35:be:4a:9e:fe:3d:47:
4b:ce:dc:57:1c:4b:43:12:79:e8:02:3b:cd:37:fa:18:64:31:
14:a2:20:75:fc:c9:07:4f:28:88:fe:57:fb:07:26:6b:00:f5:
0e:08:60:aa:53:7f:22:0b:57:72:51:61:ec:11:da:df:87:ad:
03:a6:e4:16:45:be:5d:85:72:9a:1d:56:db:6f:2e:92:24:60:
5d:e1:5c:91:0f:1c:ce:12:58:94:4c:27:00:09:94:00:b2:9a:
f9:22:e5:9a:40:02:ee:a0:db:25:8e:d0:53:e2:35:5a:4b:3a:
54:e9:1c:50:fe:19:bd:b2:cb:1e:7a:b2:da:b1:5f:ec:02:d2:
2c:3f:ba:46:99:75:1a:03:0d:07:63:63:cb:27:23:84:ac:df:
83:61:b7:13:e1:91:65:f3:1b:bf:e3:38:f8:2b:db:28:63:8e:
99:f8:10:ce:30:fb:00:65:ed:85:c1:46:8e:74:bc:9b:29:ba:
93:b5:2a:6c:c7:05:c8:84:f2:bc:e1:d2:db:6e:ec:9c:34:51:
0f:10:b1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:43 2026 by rpki-client