Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: hmhUEg6zx+soBsnw0sA34J9KdsOvUQS0wVd/wnfwbWw=
Subject key identifier: B7:93:64:7D:71:2C:40:44:F7:9F:05:D5:19:A5:24:08:B6:99:03:A9
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019CBB4BF2BF9A15635E6502CDCC5A0AA4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 99
Signing time: Thu 05 Mar 2026 00:00:42 +0000
Manifest this update: Thu 05 Mar 2026 00:00:42 +0000
Manifest next update: Fri 06 Mar 2026 00:00:42 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: UbHI28ssYIvv3tqLGuEX4fBenrwb9o+Ohra+PbjcKzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bb:4b:f2:bf:9a:15:63:5e:65:02:cd:cc:5a:0a:a4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Mar 5 00:00:42 2026 GMT
Not After : Mar 6 00:00:42 2026 GMT
Subject: CN=b793647d712c4044f79f05d519a52408b69903a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:b7:09:64:3c:ac:03:58:75:8d:e0:dd:8d:
06:1b:58:a3:f6:80:c5:c6:b3:81:6e:d0:bb:c2:43:
cb:af:99:86:1a:e2:f3:5e:73:55:f8:70:16:6b:26:
2f:c6:bf:f8:e0:bf:d3:76:72:70:a4:f9:e3:85:2d:
b7:2b:5f:87:5f:f5:23:1a:f8:53:bb:76:e8:cb:cb:
ed:64:f4:49:f8:f4:b9:81:69:3a:96:9d:1e:52:c1:
e3:3c:9d:1b:a1:e7:86:31:a7:4e:a5:2a:6f:c0:c9:
8e:e7:2f:35:ab:95:72:10:1f:54:81:f3:3c:0d:41:
1f:82:5f:02:fd:a0:04:93:26:3a:43:0c:1b:93:8e:
02:5c:16:1e:9b:e8:4a:f7:bc:05:3f:d0:ad:9c:bf:
03:c5:77:26:b7:96:aa:78:2c:40:e8:b7:aa:63:eb:
be:23:2b:a0:13:ba:b2:33:88:41:ea:94:05:d3:5b:
df:d9:fd:4d:ef:bc:f3:ef:d7:2a:90:01:6b:63:7e:
ac:4e:a0:25:08:4c:94:4e:16:a9:82:80:fc:99:6a:
89:dd:c4:f8:ed:c4:dc:79:da:0c:48:04:be:06:47:
d3:dd:16:9f:fb:78:2a:f4:23:db:db:34:65:86:f1:
3f:ff:b3:61:36:fe:cd:d2:84:ea:99:22:38:fb:f4:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:64:7D:71:2C:40:44:F7:9F:05:D5:19:A5:24:08:B6:99:03:A9
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cd:32:d8:29:55:96:fe:99:37:1d:65:b0:42:94:c1:bc:01:
ed:1c:91:a7:9d:be:49:9e:b3:10:49:7a:f7:47:e9:8e:a8:0d:
07:c9:5f:ba:f7:78:a6:57:f7:4d:d5:d7:29:aa:0d:77:36:7b:
81:33:f4:73:d0:77:00:44:76:b9:d9:f7:64:6c:12:a1:08:e3:
08:78:7d:53:5a:48:3a:77:dc:9f:bd:84:82:7a:e7:b3:40:15:
54:d2:4b:6d:75:6c:6d:85:29:6e:7f:32:72:e8:37:d9:cb:5c:
6d:05:04:00:3d:ef:40:4f:fa:9d:b3:76:11:3a:88:56:de:7d:
1f:a3:51:b8:e6:2a:83:15:e8:3f:9e:6b:36:e4:e0:84:8a:9e:
e1:89:3d:b8:e8:b1:ae:00:51:b7:c0:3b:91:b2:49:b2:b2:ff:
a0:0e:cf:18:fb:66:00:af:7d:16:b6:e4:4a:00:3f:67:47:bd:
11:f1:2b:ed:c0:ec:28:72:5b:0b:d9:73:86:b1:b7:d5:e9:79:
e5:91:33:f6:45:08:90:4e:e1:a7:c5:73:94:f3:e8:3d:31:96:
b9:25:e2:7a:69:62:79:ab:af:3c:82:92:4c:4d:4e:e7:0f:9d:
4c:9a:a3:e9:37:1c:b7:49:81:18:48:52:4a:2a:79:3a:0f:ee:
9e:84:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 02:38:21 2026 by rpki-client