Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: EiUWDF9hB71qZc7hhM4xJQJErapXU/RM/SveNvV0OsE=
Subject key identifier: FD:8D:69:96:9A:8A:C7:9F:DA:64:A4:B8:C5:D2:4E:0F:9A:6E:0F:FF
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019DB65A60003D0A5FF2921B57F2AF18D668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 011B
Signing time: Wed 22 Apr 2026 18:01:09 +0000
Manifest this update: Wed 22 Apr 2026 18:01:09 +0000
Manifest next update: Thu 23 Apr 2026 18:01:09 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: Atdqv4gsK2NjR433vmVdJwhm6NCSaGq+sj1Mv3S5UTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 14:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b6:5a:60:00:3d:0a:5f:f2:92:1b:57:f2:af:18:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Apr 22 18:01:09 2026 GMT
Not After : Apr 23 18:01:09 2026 GMT
Subject: CN=fd8d69969a8ac79fda64a4b8c5d24e0f9a6e0fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:47:41:e4:46:32:2a:dd:a8:f5:98:36:c5:
bd:51:c0:dd:f4:6a:9a:6e:8e:17:1c:42:b3:0b:b3:
14:25:a8:d5:13:02:b4:5c:43:e6:24:49:58:aa:83:
d8:b8:db:5f:3b:42:fa:1c:b5:f4:c9:14:86:3a:b1:
ac:e0:18:14:ee:a7:bc:05:39:d3:1d:8c:1f:37:07:
d4:18:75:c1:eb:d8:04:b5:a3:63:4d:d4:79:eb:2c:
2e:d2:e1:4d:3a:0e:f8:23:5f:58:14:23:fc:19:6c:
2f:87:df:85:98:cd:a2:7f:07:05:04:3f:27:fa:26:
cc:d8:cd:17:aa:85:b8:82:6c:e6:38:b9:4d:7d:65:
5c:df:24:94:05:62:13:c6:ee:fa:e0:d9:8c:45:6d:
a5:44:d7:99:09:13:e3:c3:8c:93:b6:a2:97:b5:6e:
c1:ef:b8:07:a2:13:9d:2e:35:e5:90:27:c8:63:c6:
f6:34:14:4a:e3:85:85:1c:bf:68:05:6a:f6:31:e2:
e6:35:67:8d:ab:ad:93:cc:89:be:ea:1c:92:f6:d8:
8d:0d:3c:36:46:a1:2d:58:0d:98:12:a8:0b:51:5c:
fa:75:f5:c7:25:98:73:17:28:17:11:77:3d:a5:c2:
eb:8c:2f:48:48:22:ab:c0:4b:76:9f:82:ba:93:3e:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:69:96:9A:8A:C7:9F:DA:64:A4:B8:C5:D2:4E:0F:9A:6E:0F:FF
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6d:41:09:67:a1:a3:b0:55:f9:34:7a:b3:31:a5:cc:5e:94:
4c:27:10:8e:86:30:cc:02:02:b1:44:d4:3c:8c:c6:42:dd:03:
2d:ac:c1:0a:44:87:10:e2:36:d0:1a:ea:0c:d4:de:a8:b5:84:
f5:2a:16:31:62:e4:8f:52:14:c4:d2:bf:69:62:8b:f1:74:8b:
53:7f:cb:b6:64:b7:51:4a:f3:5b:50:42:46:b3:79:24:90:a6:
cf:4c:49:9b:e4:83:a8:a5:a5:ce:d7:57:76:7c:50:27:e4:d9:
7d:a5:7e:9b:92:d4:bd:53:30:f4:30:a8:5d:5e:8b:09:2c:12:
f5:95:bb:56:5f:0a:c0:0f:e2:f7:ed:dd:68:03:1f:1e:37:b1:
5f:bc:8f:d5:ec:ad:c4:28:b3:c2:4d:9e:a2:bf:fe:50:03:61:
50:9a:5d:c6:b0:b1:45:02:c3:85:06:5b:98:21:4b:24:18:95:
f6:a6:5c:f4:6e:00:10:1d:74:9b:95:e0:7b:a2:39:cc:1a:ec:
da:2e:bf:f8:c1:68:4f:42:a8:3c:ea:28:4a:46:78:34:08:99:
63:d6:cf:56:8f:d8:46:18:4b:90:ea:23:1f:f8:21:f7:c5:95:
88:30:b6:2a:e7:df:b9:d5:4b:5d:d5:a3:8f:f9:7a:9f:68:f4:
15:e3:d4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 22:20:27 2026 by rpki-client