Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: FC+NWgwt84DG2O/FIAt5RXVIjFAisgGrx6fmyQH3KvI=
Subject key identifier: 7E:39:BE:78:8E:EF:0F:B8:CC:B5:4B:6B:4C:5A:D5:F2:8A:50:B9:6C
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 01A082D321DF261BA9475F0CF269904D5030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 028E
Signing time: Tue 08 Sep 2026 21:01:09 +0000
Manifest this update: Tue 08 Sep 2026 21:01:09 +0000
Manifest next update: Wed 09 Sep 2026 21:01:09 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: lOe0OMGQV5pKJUvClTybGnKBiF9J4cTDpQ8KyXgYBb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:d3:21:df:26:1b:a9:47:5f:0c:f2:69:90:4d:50:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Sep 8 21:01:09 2026 GMT
Not After : Sep 9 21:01:09 2026 GMT
Subject: CN=7e39be788eef0fb8ccb54b6b4c5ad5f28a50b96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:d0:02:24:a5:f6:93:4f:0f:67:12:60:e7:
e3:a0:f8:b7:73:6b:55:e7:34:29:30:e0:01:64:3e:
15:64:9e:f6:3d:fd:54:9f:6e:33:ad:0c:13:13:4f:
4c:f7:48:ff:a8:b8:5d:0b:3e:51:a9:73:f8:a3:aa:
08:ea:0c:f7:14:98:15:9a:4f:0f:36:37:7b:f4:11:
a7:39:5f:c8:61:13:0e:c0:a4:22:99:53:cb:aa:72:
43:04:60:81:e5:42:2b:08:c1:e1:16:35:d0:ee:cb:
e6:7f:e3:fc:2b:ae:a9:e0:bf:e5:0c:4c:c1:47:d1:
b6:48:21:ad:5c:43:76:3e:84:63:fb:52:6e:a2:e6:
40:04:4e:06:77:70:cf:82:5c:05:9e:0b:65:2b:4b:
12:d9:9d:1f:36:48:26:0c:46:15:df:8d:3a:00:0b:
cf:b1:b3:3e:eb:c0:10:40:01:85:89:f1:65:3a:89:
f9:90:be:dc:1b:3b:0a:db:b4:4b:0a:fc:1e:69:3a:
5f:aa:14:1b:e2:e4:c0:88:7a:6b:23:8e:d3:ae:23:
76:e1:77:9c:50:45:17:e1:df:d6:1c:dc:1a:d7:83:
27:d7:0c:a3:65:4b:a9:18:9f:5d:ee:ac:c6:68:6e:
23:65:da:ff:e5:d2:b1:cd:a4:f7:d6:49:d0:c0:17:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:BE:78:8E:EF:0F:B8:CC:B5:4B:6B:4C:5A:D5:F2:8A:50:B9:6C
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:07:52:ba:ea:3a:34:aa:67:8a:ad:43:c4:61:8c:50:8a:5e:
d3:8c:b9:75:a6:90:6c:14:7e:65:7c:34:14:c3:cb:50:11:cf:
a2:0e:ec:c4:47:94:24:b3:58:d1:d6:3d:aa:db:3c:f3:05:f3:
19:87:60:c4:49:c2:0e:2a:83:56:31:47:22:e4:fb:cf:87:f4:
25:4c:63:22:0b:97:f3:f0:21:23:37:68:3e:45:94:f4:d9:be:
e3:3f:6d:c1:76:69:c1:ba:e6:fb:30:b8:1c:df:20:f9:ec:4a:
06:0d:0c:91:cd:67:39:fa:68:1e:26:22:41:fd:97:88:9b:db:
a6:98:67:9a:a4:54:ae:df:bf:62:6a:26:5a:41:1a:c6:0d:cc:
32:fa:3d:35:cd:d9:ff:14:b3:52:b2:1c:8e:b7:01:f7:a5:cb:
b2:9f:c6:a8:53:ff:3b:3b:3a:bb:a5:44:f6:d5:f6:60:49:90:
ab:6f:3a:32:01:ec:8d:d9:ed:3e:97:34:99:59:ac:25:f2:fc:
b3:ec:59:3f:b5:8b:45:0e:72:c6:7a:80:d2:a5:39:33:a2:dc:
70:ef:e6:4d:97:77:16:4a:40:56:34:26:41:8b:ff:21:05:01:
d4:f9:ab:04:8b:b8:73:71:09:33:a8:98:f2:be:ec:72:47:7d:
0b:d1:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:42:40 2026 by rpki-client