Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
File: z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft (raw, json)
Hash identifier: zziWgYBMpfpJD1IYUlEeYAluVn3NPFfn/yx5rgilRuQ=
Subject key identifier: 2A:A3:C3:99:4F:C0:C2:4C:D1:ED:44:F6:0B:C1:81:D8:B2:F3:14:30
Authority key identifier: CF:AC:D2:2F:28:7E:84:C2:3B:4E:89:64:F3:B1:1E:F1:25:A1:C8:18
Certificate issuer: /CN=cfacd22f287e84c23b4e8964f3b11ef125a1c818
Certificate serial: 019D2627F1BAE233DFE439115BC55DE645A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
Manifest number: 16
Signing time: Wed 25 Mar 2026 18:00:45 +0000
Manifest this update: Wed 25 Mar 2026 18:00:45 +0000
Manifest next update: Thu 26 Mar 2026 18:00:45 +0000
Files and hashes: 1: UPMp3Af0dIr169kINqk_eQVjuRo.roa (hash: w8xH9Ru6usUFiW6X7kxuFSu8EELCqYb7m7E2r33BxXM=)
2: fYb3yqxYZbERWvZR_A7UqgvLBhg.roa (hash: 0iZV/WEPOO770yHBZVc4wL21UBM51H4s8ObdaVDkQ64=)
3: z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl (hash: SwHfFVhsTop1gwQV6fBGcW5A/bHTcAuYJk4lzkDeJBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f1:ba:e2:33:df:e4:39:11:5b:c5:5d:e6:45:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfacd22f287e84c23b4e8964f3b11ef125a1c818
Validity
Not Before: Mar 25 18:00:45 2026 GMT
Not After : Mar 26 18:00:45 2026 GMT
Subject: CN=2aa3c3994fc0c24cd1ed44f60bc181d8b2f31430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:82:98:08:69:55:7b:68:a5:4f:b9:3f:86:
ec:b3:15:fe:05:e7:4d:29:3e:6d:ec:df:25:5a:e6:
2d:ac:44:66:d0:f4:66:7b:38:ff:e0:3d:2d:a8:16:
95:9c:ec:97:17:b8:e3:21:59:9d:a1:e2:7f:75:b3:
58:90:b7:9a:ed:a3:07:6a:18:16:ea:d8:34:d2:33:
4d:e7:f4:b6:87:db:0b:c1:4c:e5:cb:aa:f9:d0:59:
17:11:4a:c4:e5:73:b0:c8:ef:5e:b1:08:09:7c:2e:
72:26:11:9b:8f:a7:d6:ba:8c:48:6b:24:36:cd:9c:
a5:be:57:d0:54:0e:7c:48:ec:68:c7:1d:b8:7c:4c:
99:f5:7f:3a:09:7e:21:7c:ba:14:fa:c3:42:5c:2d:
e0:c9:d2:97:4c:72:3a:9b:83:1c:fe:3f:85:c3:f2:
98:d6:06:7a:1f:e6:12:ae:b5:ca:43:4f:b1:8a:0b:
f6:8f:62:cd:d6:31:57:eb:de:9b:eb:8b:d6:19:a2:
68:85:6f:a5:5b:b1:2a:43:96:65:bc:9c:60:88:a3:
c8:97:11:e2:6a:63:a6:89:84:f3:28:8b:dc:3a:42:
56:a1:11:97:05:d7:30:9a:66:ea:20:4a:34:5e:b0:
63:84:e6:a7:b9:a6:17:70:da:ec:82:fc:f2:ef:8b:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:C3:99:4F:C0:C2:4C:D1:ED:44:F6:0B:C1:81:D8:B2:F3:14:30
X509v3 Authority Key Identifier:
keyid:CF:AC:D2:2F:28:7E:84:C2:3B:4E:89:64:F3:B1:1E:F1:25:A1:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ea:cc:60:a5:04:c2:18:47:46:99:cd:73:1c:a0:63:08:a4:
73:b1:00:bc:1d:24:31:2a:19:df:b1:b0:ac:79:5c:b7:47:ef:
52:53:73:8c:a4:60:d8:a1:bc:fb:d2:74:54:d5:72:ef:d5:c4:
20:99:f8:9e:52:ee:d3:0a:09:4c:37:fb:ef:40:fe:fe:8a:e6:
c6:f0:d7:a6:db:2f:bb:09:20:56:fb:ca:bb:c1:fa:c7:b6:9e:
67:3b:0f:27:d4:57:75:2f:9a:b4:b6:15:47:78:83:22:2b:e4:
0e:be:0f:b0:7d:ad:49:9c:cc:d5:a4:11:13:2f:b7:f6:f5:94:
5d:bf:2c:73:e5:10:8d:73:e4:cf:64:22:c9:74:e4:88:b4:c1:
a6:24:8e:94:ea:27:d6:e6:ba:ea:05:97:9e:17:d9:21:d1:1d:
2d:59:a3:04:f0:fa:cf:45:5f:18:da:c3:f7:aa:c2:54:2c:1c:
4e:2c:84:f0:8d:eb:8d:5b:59:9d:81:e4:d2:57:3d:59:4c:c2:
1a:0b:72:b3:34:62:6d:ca:04:eb:de:8e:e2:1f:46:b8:e2:eb:
f2:37:8b:27:bd:26:05:7c:29:42:31:9a:b7:aa:21:36:38:f8:
26:9f:b1:ee:7d:45:aa:f7:26:13:85:27:88:c8:60:68:ae:63:
61:45:02:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:03:15 2026 by rpki-client