Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: SeR6aUuPZtlH9rJMX+oKxcszEP7CwRtSXZhO3xafDcc=
Subject key identifier: A2:89:4B:C6:D3:12:22:B5:E2:12:78:33:C7:C8:D2:D8:90:0C:70:37
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019F11526EF58036B5711B583A3B85EBAA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 12F3
Signing time: Mon 29 Jun 2026 03:00:42 +0000
Manifest this update: Mon 29 Jun 2026 03:00:42 +0000
Manifest next update: Tue 30 Jun 2026 03:00:42 +0000
Files and hashes: 1: ADv4rCmboNdJeRdSNFNoC66NFcI.asa (hash: skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: lMN6mlHTOnyI1zsuFm/28QhVG0+jvhL51JtToNCt0gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:6e:f5:80:36:b5:71:1b:58:3a:3b:85:eb:aa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jun 29 03:00:42 2026 GMT
Not After : Jun 30 03:00:42 2026 GMT
Subject: CN=a2894bc6d31222b5e2127833c7c8d2d8900c7037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:0f:c3:59:38:09:82:a8:61:b9:59:62:60:
be:89:db:3d:df:79:6a:9e:b8:c2:e9:c6:e9:80:6a:
a7:01:fc:53:1f:9f:46:12:14:38:fa:53:c5:58:cc:
1c:4e:7d:b0:c7:88:8b:f9:af:96:0d:43:d9:60:fa:
99:2f:6c:10:c9:7b:f7:65:ba:37:68:c9:40:af:2b:
62:73:b2:4d:35:8d:65:45:66:c3:88:36:35:4f:aa:
02:71:c8:f6:ca:5e:2d:10:91:78:9d:6e:7d:be:8f:
0e:57:ff:f4:ad:0a:b3:df:c4:d1:da:34:d1:61:5a:
d0:27:f1:7e:04:b8:33:b5:47:e3:9c:71:51:20:e0:
0b:53:87:d7:6e:7d:13:94:d5:52:c5:65:e9:75:6e:
be:9b:13:16:52:c6:4d:92:f9:5b:46:0f:f4:3f:a4:
11:da:15:62:ca:b2:be:b3:71:87:25:2a:5f:1e:a9:
99:97:1f:3f:c2:b9:ff:a7:3a:12:1a:91:62:94:b9:
46:4f:12:d6:6d:75:7e:60:c3:73:ae:c7:fd:b4:11:
e1:44:a4:9f:bb:60:4a:b4:89:20:4f:82:ee:e3:df:
39:2a:6b:fd:77:a7:a7:b1:a4:98:4b:ae:c7:0c:c2:
41:0b:25:cb:0b:c7:13:f5:7c:d8:c6:24:2a:e9:83:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:4B:C6:D3:12:22:B5:E2:12:78:33:C7:C8:D2:D8:90:0C:70:37
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b1:73:50:a5:a2:af:ba:d3:5e:24:22:be:fb:68:7a:2b:13:
30:c7:f3:a5:12:10:59:88:a0:48:73:52:4d:2c:94:46:28:64:
39:50:2d:7a:56:5e:d3:83:0b:24:97:80:bb:fb:9f:92:bd:7d:
7e:1b:ec:26:c1:56:ce:4f:c1:ac:0c:d0:92:46:bd:ad:7d:f4:
d0:43:29:27:6f:ce:d7:07:33:b2:7d:b7:45:51:63:c3:22:03:
29:8d:23:4e:ab:41:3c:a0:b7:70:e4:ff:ec:46:86:5c:dd:48:
b9:6d:25:42:a2:32:9c:90:5a:d6:29:5a:fc:5f:6e:31:7d:c8:
b5:06:c2:c6:17:98:52:39:8b:bd:71:84:ad:54:9a:8e:5a:78:
f7:2e:2f:2c:a2:9f:d2:ac:99:84:2d:4e:48:c1:27:ac:3d:5c:
40:89:a5:da:55:47:4b:9d:e2:fb:c7:77:41:75:86:70:78:67:
11:01:a4:6a:26:92:e5:1e:73:ff:7d:c8:08:a4:12:17:b3:f7:
9f:9c:fc:8a:bc:bd:ee:30:0c:01:52:c6:04:2e:1b:12:81:8d:
e5:6a:09:4b:31:a3:96:44:40:68:e0:64:7b:f0:f8:a0:56:69:
43:d8:a2:76:6c:4d:7a:13:ca:56:4c:a5:7b:c1:c0:a0:29:48:
b2:db:8c:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RUm71gDa1cRtYOjuF66o0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2RmNjUxNjIzN2Q0MjVlOWFlMzgxN2VjYjE0MWY0ODE3
NzNjMTIwHhcNMjYwNjI5MDMwMDQyWhcNMjYwNjMwMDMwMDQyWjAzMTEwLwYDVQQD
EyhhMjg5NGJjNmQzMTIyMmI1ZTIxMjc4MzNjN2M4ZDJkODkwMGM3MDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX0Pw1k4CYKoYblZYmC+ids933lq
nrjC6cbpgGqnAfxTH59GEhQ4+lPFWMwcTn2wx4iL+a+WDUPZYPqZL2wQyXv3Zbo3
aMlArytic7JNNY1lRWbDiDY1T6oCccj2yl4tEJF4nW59vo8OV//0rQqz38TR2jTR
YVrQJ/F+BLgztUfjnHFRIOALU4fXbn0TlNVSxWXpdW6+mxMWUsZNkvlbRg/0P6QR
2hViyrK+s3GHJSpfHqmZlx8/wrn/pzoSGpFilLlGTxLWbXV+YMNzrsf9tBHhRKSf
u2BKtIkgT4Lu4985Kmv9d6ensaSYS67HDMJBCyXLC8cT9XzYxiQq6YN36wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKJS8bTEiK14hJ4M8fI0tiQDHA3MB8GA1UdIwQY
MBaAFMzN9lFiN9Ql6a44F+yxQfSBdzwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEt
MWI1MDE1MjA1MzJiLzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEtMWI1MDE1MjA1MzJi
LzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLFzUKWi
r7rTXiQivvtoeisTMMfzpRIQWYigSHNSTSyURihkOVAtelZe04MLJJeAu/ufkr19
fhvsJsFWzk/BrAzQkka9rX300EMpJ2/O1wczsn23RVFjwyIDKY0jTqtBPKC3cOT/
7EaGXN1IuW0lQqIynJBa1ila/F9uMX3ItQbCxheYUjmLvXGErVSajlp49y4vLKKf
0qyZhC1OSMEnrD1cQIml2lVHS53i+8d3QXWGcHhnEQGkaiaS5R5z/33ICKQSF7P3
n5z8iry97jAMAVLGBC4bEoGN5WoJSzGjlkRAaOBke/D4oFZpQ9iidmxNehPKVkyl
e8HAoClIstuMtA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:11 2026 by rpki-client