Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: vuGLn/hCALk6DHUPcrXQEFqiWx8bkxx0TMQKHXSebm4=
Subject key identifier: 0C:38:87:19:8F:EF:1F:70:A3:39:65:61:50:CB:E3:5F:69:0B:4B:09
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019D382DD69430AF2797CE23C8D11BDB57AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 11FE
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: ADv4rCmboNdJeRdSNFNoC66NFcI.asa (hash: skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: r02VZOVt/9jJBYhOil32ERGyWJzGAKkAWM9dnT7iPLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d6:94:30:af:27:97:ce:23:c8:d1:1b:db:57:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=0c3887198fef1f70a339656150cbe35f690b4b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:62:ab:e3:21:a0:68:3b:4e:75:b3:9d:2a:
1d:49:cd:ad:98:ea:83:98:68:8c:69:f0:6f:c0:9c:
4d:9e:13:a3:7f:ee:a6:be:6f:47:4d:ac:8f:b1:61:
e3:7c:af:0a:1a:e7:55:a6:65:e5:e1:1a:6a:8e:ff:
bc:4f:b1:5a:ac:b0:37:9b:d5:4a:75:eb:8f:f7:63:
40:44:2c:7e:28:ac:e5:86:8d:75:51:83:3d:c2:3c:
da:9a:d0:42:7b:12:e8:20:38:1d:f0:f7:af:33:d2:
c8:22:ae:6a:95:92:d0:74:71:5c:f2:38:ea:ae:ea:
7b:a3:df:35:03:e5:b5:e2:6f:d3:97:5e:01:fb:93:
73:c6:3a:ca:dd:00:da:20:35:72:dc:dd:4e:6a:97:
f9:81:2f:5e:6f:9d:a3:79:11:b5:c5:6f:15:6d:1b:
2d:d7:04:ce:50:d0:3a:7b:e8:4a:e2:85:62:93:28:
70:d2:bc:00:24:bc:11:92:66:a8:2e:48:b2:3c:14:
75:25:fe:3e:c0:17:0a:57:d3:fe:03:3a:54:67:72:
b6:4a:35:a2:0d:60:14:70:42:d2:ad:7f:63:f9:4a:
af:3c:18:d5:df:ec:2d:4d:68:e1:63:19:62:a0:82:
9b:9c:83:bd:86:4d:16:72:c6:fd:11:30:13:08:5c:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:38:87:19:8F:EF:1F:70:A3:39:65:61:50:CB:E3:5F:69:0B:4B:09
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b0:fe:3f:cd:9e:a0:c0:89:2a:cb:97:1f:da:ea:68:52:9a:
47:43:51:90:42:79:0d:00:66:c8:15:84:a9:99:a9:38:ed:eb:
13:44:fb:2f:be:bc:1c:ee:d6:2f:09:06:b1:16:d8:18:0b:9b:
e8:35:05:96:74:4c:23:16:b8:c2:86:d9:3c:d2:0c:a8:23:43:
34:23:8e:af:0d:37:4f:71:7e:25:b7:fd:e4:2b:7f:64:de:fa:
43:c4:30:3e:f0:12:cc:13:89:6e:89:c0:43:9f:7f:1b:2b:db:
de:e7:a0:d2:02:87:a3:0f:76:2d:89:4b:53:f0:5f:bc:e7:d1:
65:ea:79:67:dc:03:49:46:f5:27:e3:0c:f5:2b:31:41:8c:96:
9f:11:d9:ae:44:c9:e5:39:83:b3:dd:45:e6:d4:86:4b:96:8f:
21:4c:04:2d:c0:61:13:7b:5c:5b:77:e1:41:cf:ed:a7:17:b0:
85:3e:ed:0e:96:1f:d9:6d:a4:9b:fd:b6:15:18:24:a6:07:29:
91:68:f7:e6:b6:ac:92:81:11:6f:5b:e8:37:a8:d8:0f:59:6f:
86:2a:e1:83:f7:70:5d:8b:d8:9e:61:8a:68:f7:c7:e1:61:84:
8e:33:3f:a2:ec:7c:82:56:60:52:2c:25:ba:cc:3d:2d:53:c7:
0d:07:91:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client