Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: WT6j3hBuJ2PpmjciCMZIGFfoUywljDAXy3vsweiP7Iw=
Subject key identifier: C5:5B:79:BC:6A:50:4B:4A:BF:A0:75:3D:A0:47:D7:71:4C:FF:88:C9
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019E29945951AEE5AB9DF0DFDA77881AEB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 127B
Signing time: Fri 15 May 2026 03:00:48 +0000
Manifest this update: Fri 15 May 2026 03:00:48 +0000
Manifest next update: Sat 16 May 2026 03:00:48 +0000
Files and hashes: 1: ADv4rCmboNdJeRdSNFNoC66NFcI.asa (hash: skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: cmDA7JlI9U/JDNzQvmmoulHB+MQh8934NtoNYOMF7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:59:51:ae:e5:ab:9d:f0:df:da:77:88:1a:eb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: May 15 03:00:48 2026 GMT
Not After : May 16 03:00:48 2026 GMT
Subject: CN=c55b79bc6a504b4abfa0753da047d7714cff88c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:eb:ed:ab:c8:e9:7e:62:e0:62:d6:b2:65:
b3:c4:86:5c:34:e2:38:f9:b8:32:1f:b4:61:e8:6f:
38:85:e2:09:e0:04:50:be:c2:51:68:7e:46:92:7a:
e1:33:70:c0:d4:80:54:87:24:59:06:51:0f:ae:41:
8f:7a:e4:45:b2:1e:5c:bc:91:83:ae:d0:8c:7e:3e:
aa:fd:1b:85:87:5f:16:ed:06:df:08:37:5c:f4:01:
7c:71:7e:aa:ec:d0:07:31:e4:e8:8a:59:7b:2c:84:
8b:f9:78:0e:55:fa:06:8e:a2:0b:01:f7:d1:e0:52:
ae:9e:be:e8:db:86:78:4d:72:7b:1d:46:e4:b1:86:
ed:ba:98:bc:80:31:d5:64:84:0e:77:52:25:40:7c:
91:1a:2a:47:da:9e:e1:bb:6c:71:67:fc:30:f8:99:
ff:ed:0f:2d:9f:09:d8:95:24:a9:fd:61:a6:d6:49:
d4:0e:3e:cd:f7:5c:b9:63:f5:a5:dd:33:6f:0e:89:
c3:16:55:9b:4a:11:80:59:70:3b:0e:2d:d2:d3:56:
5b:71:a9:ef:8d:3e:c3:ef:f7:d7:71:d1:3e:58:bc:
dc:42:0d:d8:c4:94:93:c6:39:92:6b:0f:ed:1e:34:
cb:60:63:46:e5:42:72:d7:50:16:ef:10:ff:42:6e:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5B:79:BC:6A:50:4B:4A:BF:A0:75:3D:A0:47:D7:71:4C:FF:88:C9
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:44:91:6b:33:c6:15:d3:f8:31:d3:1e:80:7e:59:f0:5c:3e:
a7:ed:05:20:c4:25:6d:e2:b9:3e:af:bc:a2:0a:b1:b6:60:79:
cf:4c:ac:ca:3c:1b:aa:c3:fa:ad:96:c6:f3:90:ce:43:79:26:
a1:66:52:8a:13:a1:4a:ad:ff:24:b4:db:0d:55:9d:8e:2c:e8:
ea:a5:f9:c5:41:09:e1:89:6b:ce:9f:1a:61:1a:f2:1d:19:7e:
b5:46:9b:91:44:ab:c9:d2:6d:d0:35:b8:d1:52:5a:1a:e6:7e:
9f:30:1d:fb:aa:a8:e4:14:11:04:86:89:d0:e6:8d:fa:16:81:
3e:70:97:b7:c2:6f:7e:fa:a2:7f:eb:58:ee:e2:34:18:39:5f:
b1:0e:5c:5b:91:dc:bc:86:9c:e0:76:b0:45:d6:14:18:a1:26:
d4:9b:07:00:fe:3d:0d:ba:94:a6:92:8f:2f:1d:a6:c0:f1:4b:
77:61:6d:00:06:c6:66:65:95:ca:c4:52:8c:0f:ee:b9:4b:ca:
4a:64:3a:87:ac:88:9b:13:9f:39:31:e5:99:e2:15:38:e9:f1:
6a:30:72:d2:56:d3:2b:d9:13:37:df:36:93:17:69:be:68:ff:
87:63:30:25:0d:23:59:96:f3:c0:32:d4:12:2d:0e:22:a1:7f:
fa:6f:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:06 2026 by rpki-client