Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: vuH6icVchPwJqTIKsfvRD8MDX2jyZmCc/938bHZzY2s=
Subject key identifier: 23:6A:AE:7E:8D:13:A7:D0:B5:EA:EB:C0:E5:A2:DB:D9:DA:62:81:1F
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 01A0F97CC37520286788F1412033567A4FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1A7D
Signing time: Thu 01 Oct 2026 22:01:38 +0000
Manifest this update: Thu 01 Oct 2026 22:01:38 +0000
Manifest next update: Fri 02 Oct 2026 22:01:38 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: Bs/+gcefug9ibwrEqSVZSecg1do8cVni9y86Pe3E/l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:7c:c3:75:20:28:67:88:f1:41:20:33:56:7a:4f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Oct 1 22:01:38 2026 GMT
Not After : Oct 2 22:01:38 2026 GMT
Subject: CN=236aae7e8d13a7d0b5eaebc0e5a2dbd9da62811f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:cf:7c:97:fe:ac:96:92:fd:44:75:52:01:
14:7a:73:54:75:4d:df:dc:c0:ac:6b:c6:0e:a3:e0:
bb:a4:21:76:5f:58:60:5c:13:3b:13:2c:e9:d9:f6:
31:94:fc:b5:91:f7:60:02:e6:22:85:c9:7e:d6:8b:
08:48:c5:81:3b:9a:94:87:64:83:fc:9a:15:3f:f6:
72:45:da:c2:e5:aa:da:b5:1b:cb:ad:0e:71:bc:f2:
76:94:d6:2f:4a:81:68:fe:ca:48:a4:8c:99:53:06:
8f:c5:38:0a:e8:ce:0f:e7:e4:6b:41:8c:df:9e:76:
9e:e2:80:21:63:2f:c3:43:c8:07:63:5e:34:87:da:
4c:7c:4d:51:4b:a5:15:e5:1b:35:9c:a6:f1:8e:f2:
25:01:92:06:87:e9:2b:84:07:f9:e8:33:ce:08:cd:
ee:97:b4:d9:3c:d3:2d:ba:5c:2f:99:a1:5e:ac:f4:
39:5e:53:5e:f0:5f:9b:6f:ea:e3:b6:0a:27:7f:43:
95:65:2d:ee:b4:3b:81:75:b3:d7:83:b0:da:d6:5c:
eb:61:81:99:c2:a7:f1:d7:9c:82:99:c9:10:f2:45:
1c:2f:18:f6:30:67:2f:ca:cd:fa:15:8d:68:75:16:
74:87:1e:92:92:4e:55:a4:f8:ca:d5:bc:67:db:f9:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6A:AE:7E:8D:13:A7:D0:B5:EA:EB:C0:E5:A2:DB:D9:DA:62:81:1F
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:10:ac:c3:70:ca:5e:4f:74:3b:2b:87:5b:2a:47:f6:bf:b5:
30:50:6f:eb:40:fc:54:14:e7:37:f4:08:80:d5:1a:7a:b8:b2:
42:aa:45:bd:36:96:51:bf:59:d9:ef:0a:64:62:60:03:ea:82:
bd:95:8b:7e:69:05:11:48:20:e4:17:cb:41:a5:a4:89:43:58:
75:61:5d:e0:6e:2d:e5:1b:34:d2:b3:34:d0:6c:5c:db:58:2c:
cf:80:a1:73:8e:0a:ec:17:ae:e6:c5:27:c2:38:0b:49:3f:a4:
09:85:97:99:d1:a2:9f:ba:fe:e6:23:eb:43:5e:0a:4d:ec:00:
0d:be:c6:cb:fb:03:07:af:8c:5e:ad:d9:98:3a:fe:55:53:27:
fe:ef:66:e0:4c:e8:53:5c:9a:8a:24:54:91:68:62:e6:c4:89:
39:ad:cf:55:b0:85:14:9a:96:d2:cb:c2:61:94:8f:c7:e2:5a:
20:ec:f0:a4:f9:9f:5a:73:cc:96:ae:e1:e6:b4:eb:cc:80:5c:
3e:72:94:75:e8:b5:49:e3:ed:80:69:c0:e1:a7:47:18:3e:b8:
f9:8d:aa:63:7c:08:f1:a7:08:ad:f9:a5:52:ee:e7:82:64:75:
9f:34:9a:48:9e:ba:9e:3c:b4:73:93:d7:9d:22:10:e8:8b:2f:
16:2c:70:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:25:33 2026 by rpki-client