Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: ki0IwS3/q0Ws8xJqXjQ+wJZu+vhUovFu99ApZAX1jBA=
Subject key identifier: 30:3B:7C:99:D0:1A:33:42:E4:A1:DD:75:3F:D5:D7:52:5B:7B:4D:F6
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019E1F7EE17DE4698E2448FC987C1F9AD3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1903
Signing time: Wed 13 May 2026 04:01:09 +0000
Manifest this update: Wed 13 May 2026 04:01:09 +0000
Manifest next update: Thu 14 May 2026 04:01:09 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: bXzmyS+0h69JWzCcIn8G8H4iz4Ox10EyBIWZsxK7TE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:e1:7d:e4:69:8e:24:48:fc:98:7c:1f:9a:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: May 13 04:01:09 2026 GMT
Not After : May 14 04:01:09 2026 GMT
Subject: CN=303b7c99d01a3342e4a1dd753fd5d7525b7b4df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5c:66:e2:d2:a3:56:10:81:d7:ec:af:61:21:
6a:aa:da:e3:77:f6:20:48:f1:67:fc:16:91:a9:db:
58:83:64:0a:0d:a5:5c:e0:5d:bf:94:7c:4c:8e:dd:
5c:2b:55:4b:00:c8:3d:c2:f9:94:2b:f1:9d:8c:e4:
80:af:00:aa:6e:56:78:2e:25:e3:d1:c9:7c:42:26:
41:94:ad:4e:55:d9:66:96:e4:0f:a4:78:fb:bd:fc:
d6:a2:9e:b8:37:3c:67:30:ff:f0:c4:34:53:e9:0e:
bd:1c:a8:a9:e9:eb:7f:fd:e6:f5:2e:78:45:27:21:
4f:a5:77:aa:a9:30:88:1d:d5:a4:68:e7:ac:30:67:
50:d4:6b:f9:e0:e4:6b:12:55:08:f7:62:00:1b:2a:
bd:3d:55:54:ff:6a:a8:a6:8d:13:77:e7:83:30:ed:
a0:0f:cb:54:44:a5:3b:18:81:16:74:40:d3:2b:ef:
64:70:40:f8:b4:40:8d:e4:d8:20:10:30:3c:33:55:
c9:f2:91:6f:bc:0d:6a:da:54:04:de:a1:e0:cb:ce:
9d:eb:01:74:ac:74:b6:2b:6e:8d:01:02:a3:dd:ef:
f4:28:13:d9:10:44:4c:26:81:1d:27:e9:02:f2:f4:
ac:f3:bb:08:3a:74:b5:82:40:f1:f4:e6:06:2d:87:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:7C:99:D0:1A:33:42:E4:A1:DD:75:3F:D5:D7:52:5B:7B:4D:F6
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:18:32:4d:06:08:53:36:64:c9:84:71:17:7a:55:42:27:be:
1f:d1:66:c3:60:24:15:8b:c4:d7:a2:4e:06:03:5f:91:9c:96:
f9:6f:96:f2:89:53:75:93:2b:a0:36:0e:99:04:a2:ac:93:1c:
da:20:91:4e:19:08:6a:46:0e:76:c6:cf:ff:77:c4:7f:0b:bf:
be:06:70:e2:1c:c0:76:dc:12:27:2d:e2:d7:58:9e:6e:7c:51:
e4:fe:76:f5:17:93:f5:33:a8:2a:e7:28:9b:43:4c:97:99:27:
35:64:11:2e:2f:67:e1:2e:be:c3:f3:fa:0b:d9:50:23:d8:1e:
1a:69:1e:fe:5e:9a:1c:42:24:22:a1:be:72:f2:6d:e0:47:91:
fd:81:36:a4:77:28:ba:0f:ee:fa:70:db:07:bb:e7:f9:28:ae:
a1:86:d6:92:e0:c8:df:93:a8:8b:bf:89:54:2b:73:2b:5b:e1:
3c:56:ca:5b:79:8c:f2:20:28:9d:3d:3d:1f:b6:d2:5b:89:9c:
97:32:71:4f:ab:78:44:8e:32:0a:1c:26:a8:57:8e:05:14:91:
00:3e:49:ac:bc:a7:b3:8c:d1:3f:28:62:41:25:34:55:78:1d:
b0:29:a8:3a:54:1e:e5:0a:87:b1:c6:a6:3f:f7:ba:97:03:23:
41:e4:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:54 2026 by rpki-client