Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: 45O4IHH+raZvbyyh588+UrNqlhuNO4QrAnmQ11mIngU=
Subject key identifier: 1D:20:BB:3C:E0:59:A6:B6:A5:7A:7A:53:09:B1:78:C9:CA:12:C1:4E
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019EA00749FB476B13FFD12AAD2E5F92CE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 0194
Signing time: Sun 07 Jun 2026 03:01:32 +0000
Manifest this update: Sun 07 Jun 2026 03:01:32 +0000
Manifest next update: Mon 08 Jun 2026 03:01:32 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: Tlh31JoIqIXmW9t+MPCKGfthnxglPiD1jTU6Lw4YdXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:07:49:fb:47:6b:13:ff:d1:2a:ad:2e:5f:92:ce:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Jun 7 03:01:32 2026 GMT
Not After : Jun 8 03:01:32 2026 GMT
Subject: CN=1d20bb3ce059a6b6a57a7a5309b178c9ca12c14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:98:d3:e8:cf:26:4e:ed:df:e0:60:94:63:
7e:bd:bb:6d:a5:00:86:3b:ff:70:d7:5c:0a:26:d2:
a5:69:69:af:27:7f:07:ff:b3:27:1c:69:cb:4d:10:
48:4a:38:aa:33:74:61:57:d6:0c:66:0f:a5:d5:83:
39:46:70:38:73:5f:68:56:91:ba:9e:48:a0:62:86:
e7:75:cc:83:34:59:10:8b:a4:32:de:31:2b:9a:30:
6b:9b:33:d5:3b:52:60:f9:60:58:5e:ae:67:03:4f:
cb:74:83:db:c1:a8:fa:59:4c:2c:e5:fc:15:d0:5d:
45:d4:02:20:ef:8d:c7:68:48:d1:e9:9c:8d:08:de:
de:80:cf:b7:d6:41:de:c9:b3:74:65:db:80:e5:ad:
bd:98:44:14:6f:98:de:5e:14:a3:45:21:3b:a7:1d:
9a:34:90:ca:06:fa:71:a2:d6:ce:87:26:a4:83:dc:
b5:13:5e:71:d6:19:26:1b:e3:a3:1d:53:26:e4:22:
f4:45:95:36:75:94:ea:f5:b9:4c:12:ce:90:71:e1:
cf:7b:05:d1:52:2e:b4:17:2d:8e:0e:c7:d4:98:25:
fa:b0:21:40:a7:6b:bc:cb:93:1a:76:cc:7e:80:f1:
59:ab:9a:ef:55:3b:e8:fc:eb:f4:82:b7:a2:ae:b2:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:BB:3C:E0:59:A6:B6:A5:7A:7A:53:09:B1:78:C9:CA:12:C1:4E
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:20:c1:de:89:3d:4b:ea:e3:e7:0c:55:07:8d:fa:d2:7b:ec:
aa:70:4f:be:4d:1c:bc:b0:63:6f:c8:11:6c:c8:34:30:9e:f6:
40:57:d9:75:74:2a:03:b0:4f:61:8e:88:f3:97:73:ad:a8:b4:
8c:79:c0:98:cd:d5:44:3a:d2:83:de:2b:4b:a5:72:cf:96:d9:
e7:78:f3:a5:9d:c4:25:2e:90:7c:33:51:d6:df:6b:59:ac:fc:
d7:d3:7f:05:dd:64:32:97:40:76:cf:6a:ba:35:2f:bb:43:9d:
c8:e8:8f:51:11:87:4c:7c:57:1c:e3:f3:86:12:dc:89:ab:40:
7a:f0:58:48:1a:f3:3e:78:15:0b:74:b8:91:cc:52:73:5f:3d:
95:36:d5:2c:da:8c:a5:9d:6d:5c:41:fc:1c:9e:f1:0c:e4:37:
98:86:e9:6a:4c:45:4f:11:58:e1:58:f7:35:de:ec:c7:3b:04:
95:7f:81:75:f0:42:ec:89:1f:35:a0:e4:c3:c1:0e:7f:0b:48:
82:aa:73:81:5d:ed:87:74:f5:81:96:50:70:50:1f:dc:68:1b:
c5:cf:4b:78:54:43:10:a5:60:b0:83:26:83:93:c6:00:22:c8:
ea:08:95:da:00:0a:d5:27:98:be:6c:84:43:ea:a0:5f:0c:d7:
16:8a:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 08:20:08 2026 by rpki-client