Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: QDwyHqvYccR1sL9gO4dJTo0T9Mfz9iptEvnw3qDiLRc=
Subject key identifier: F2:7B:DC:81:78:FB:A4:F7:3A:23:D0:A6:F0:02:0B:D4:76:4C:2A:EF
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 01A03E5FECF6EA72375982FAAD29A8424969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 138F
Signing time: Wed 26 Aug 2026 14:01:08 +0000
Manifest this update: Wed 26 Aug 2026 14:01:08 +0000
Manifest next update: Thu 27 Aug 2026 14:01:08 +0000
Files and hashes: 1: Mm7c4h3MUpU65BprAJNpMKyGVWM.asa (hash: eNvrY1WNeaiv6bkgtyCJt+WRW9z61JfpMvlr9TO5/xc=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: Sd7uhQVn1MPzSFAysCLK93sjVQbIktZfhBWkKTAKrg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:ec:f6:ea:72:37:59:82:fa:ad:29:a8:42:49:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Aug 26 14:01:08 2026 GMT
Not After : Aug 27 14:01:08 2026 GMT
Subject: CN=f27bdc8178fba4f73a23d0a6f0020bd4764c2aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:fd:ac:4f:4d:0e:1e:bf:f7:1c:7a:70:66:
ef:a7:d8:40:7e:19:1b:92:b7:67:dc:07:20:13:78:
b4:92:19:6d:c8:f1:85:eb:95:34:db:fa:28:ab:a0:
f1:2d:05:f2:f7:24:30:c4:48:4e:94:f8:c9:a8:49:
86:89:4f:8e:10:d3:51:2f:0c:96:e2:51:f3:5f:7e:
86:fc:07:3c:53:5f:5c:64:f2:6c:56:de:8d:c1:b0:
6f:d9:83:0f:04:71:83:ed:d5:b7:17:9a:88:c5:f7:
56:f7:1b:a5:b5:b7:dd:d2:aa:bd:54:29:80:05:1a:
f3:7b:14:22:a9:d1:b4:a3:62:d0:ea:32:5c:c1:9b:
2d:b3:8a:58:1d:65:85:7f:76:cc:9b:17:30:aa:8b:
e6:96:e4:37:2c:8d:3b:e1:ef:c1:b8:88:90:07:5c:
a6:88:a1:f7:8e:fb:00:62:71:91:0d:86:26:08:9c:
f0:0f:e3:60:38:89:f9:9b:af:9e:5a:74:ec:f6:4c:
4d:f6:7c:60:01:67:57:b9:f6:79:45:37:43:37:24:
13:84:7c:47:77:85:46:68:7f:da:30:39:7b:4e:49:
df:6d:6a:63:d8:54:31:4b:4a:af:e4:d1:e4:7b:9d:
19:02:b6:30:0f:be:14:81:10:18:29:cc:b7:7f:0a:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:DC:81:78:FB:A4:F7:3A:23:D0:A6:F0:02:0B:D4:76:4C:2A:EF
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f2:a5:d6:07:24:77:3d:fb:0d:c1:0e:a7:e1:c8:9c:e7:08:
1b:bd:9e:c7:e7:02:ad:9d:cb:b7:79:35:6d:c1:34:3d:42:b2:
34:ab:a2:5d:74:17:e5:8d:78:8e:79:51:4b:3b:02:e7:20:b7:
b5:49:82:62:5c:93:1a:24:09:3a:4d:43:18:6b:c1:3e:92:52:
f3:85:62:80:b4:55:d8:d1:90:8a:ae:59:c8:6e:f3:d9:c2:5d:
32:2d:0e:2f:e9:ae:4a:b2:a4:fb:9f:5e:26:d4:0e:b8:ff:d9:
91:2e:e7:b5:7b:8b:02:b5:a5:8c:7e:bc:57:38:c4:ae:44:57:
f4:84:59:18:b7:3d:f8:1d:df:71:f6:49:77:76:a4:3b:48:03:
d9:95:47:60:1c:01:3c:ac:5e:a1:45:77:56:2c:7a:af:73:23:
1c:a0:81:0a:55:13:f2:84:10:37:6e:aa:2a:13:82:6c:1b:fa:
41:a2:c7:05:3a:10:26:4f:24:5f:a2:b0:94:15:82:79:e2:61:
dd:ac:0b:36:4d:d8:30:90:81:c7:ea:b3:d9:9f:3f:39:bd:30:
98:6c:3e:fa:60:b4:36:8a:7b:6e:c9:8a:02:d8:b1:be:01:aa:
91:01:43:48:9e:37:2a:4b:6f:9c:46:6a:68:ce:ed:48:22:c9:
14:b7:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:35:05 2026 by rpki-client