Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: Y+LqPmOgdFDkHhYGwDauXyozcQwMH3lAqfHV40oR6BQ=
Subject key identifier: DD:81:2B:BA:08:CB:32:30:DB:D8:1E:2D:31:F4:1B:92:6D:51:32:20
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019CB95D8F02B6E85FE8AA8F7E15FE9AE8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 98
Signing time: Wed 04 Mar 2026 15:00:42 +0000
Manifest this update: Wed 04 Mar 2026 15:00:42 +0000
Manifest next update: Thu 05 Mar 2026 15:00:42 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: vfzYEFCQsamzm4fNKkiA4XqF+Y6ApjaFR99FfP5ErIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5d:8f:02:b6:e8:5f:e8:aa:8f:7e:15:fe:9a:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Mar 4 15:00:42 2026 GMT
Not After : Mar 5 15:00:42 2026 GMT
Subject: CN=dd812bba08cb3230dbd81e2d31f41b926d513220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:a9:d3:e0:d1:bd:a2:6d:d1:10:fe:da:68:
fd:ba:6c:58:fd:3a:39:48:03:82:77:21:ca:77:56:
0a:31:1e:9c:31:ed:2c:0c:ae:32:97:01:9c:9e:bf:
2e:ff:ad:70:19:fd:f8:3b:dc:5d:ab:36:31:75:8f:
d1:e1:33:97:f4:7b:7a:0f:27:75:c0:5d:ca:7e:dc:
e8:64:e3:a4:07:c5:52:90:4f:93:79:01:b7:3a:1e:
af:8b:f1:92:c3:31:21:0e:49:8b:b1:a9:c3:c6:23:
db:1e:37:2e:ef:0e:4e:5a:bb:48:e2:30:3d:f2:a8:
d7:96:bc:88:37:03:69:21:90:e7:8b:59:e4:e3:b9:
c3:a2:4d:da:0d:11:27:77:8e:ef:29:85:4e:b3:84:
e5:f0:ce:a7:e0:26:90:f0:ba:17:d8:76:fa:25:65:
61:33:ac:05:10:5c:bc:92:f4:6f:a9:67:95:4d:20:
97:e7:76:06:c9:eb:6d:17:80:6e:df:e7:84:7a:20:
d7:06:de:66:7d:d9:2d:4d:f8:ef:36:9d:ad:c9:1c:
4a:2e:3c:0d:55:b5:4f:95:72:ca:9f:63:55:f8:60:
0a:98:09:78:af:03:c2:37:d6:f0:60:b8:fe:37:bc:
6f:c6:d3:21:1a:e8:56:0b:ed:6a:dc:ce:cc:be:85:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:81:2B:BA:08:CB:32:30:DB:D8:1E:2D:31:F4:1B:92:6D:51:32:20
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:f8:04:22:a8:63:3f:3e:e1:ae:05:e9:0f:73:e2:71:8e:
03:d3:db:dc:7e:be:0e:ac:b9:53:34:c1:72:12:af:5a:be:58:
fb:97:2f:61:e1:d4:37:24:18:9a:32:92:e4:9b:22:bb:fe:c4:
f7:82:f3:55:f9:93:04:32:f4:2e:1b:be:06:58:2a:8d:52:8a:
65:dd:63:44:65:de:a3:2d:31:ec:32:8d:bb:07:92:41:80:4b:
0f:f3:a5:fc:49:0c:43:fc:8a:1c:e7:51:93:ff:60:47:27:ae:
e0:99:2e:68:69:ae:1d:5a:32:9d:29:26:54:3e:c7:45:a9:ee:
a9:15:b6:c4:6d:b5:f9:e5:72:ac:dd:6b:ef:f3:8c:ce:e1:50:
92:73:34:87:99:d6:00:da:dd:5b:97:e3:70:d1:72:61:86:ee:
95:f0:51:c0:4e:5c:dc:e3:85:35:49:2b:6d:78:ec:bb:25:32:
48:6f:c5:f0:d4:8e:0c:09:7a:7c:dd:51:d5:41:1f:ff:8e:53:
0a:fe:82:06:56:84:0b:ad:1d:1a:6a:b4:a2:00:dd:8f:1e:f6:
95:10:a1:9e:c2:31:e2:08:d0:9c:98:65:05:25:2a:3f:d7:b9:
43:78:fb:27:7a:a5:68:e7:8f:f2:d5:cd:25:a3:d0:a1:20:87:
90:ed:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 01:19:53 2026 by rpki-client