Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: eoBu859U+YftSwiLILKdb1iuG4O5dxkqBszUbNAY2nM=
Subject key identifier: B4:B5:CE:7B:5C:90:A0:A4:97:A9:1B:B9:81:EB:41:E5:8E:60:6E:39
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019D2771F0D8C23D7BE3FFF5C4C988E468E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: D1
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: pLUy//+h/JY7adlDKOHiPy11MpuhQyPxUKUzQme7M54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f0:d8:c2:3d:7b:e3:ff:f5:c4:c9:88:e4:68:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=b4b5ce7b5c90a0a497a91bb981eb41e58e606e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:cb:20:ac:86:1f:7b:f2:de:3c:00:15:73:e9:
27:01:70:c0:2c:26:83:74:11:80:97:10:e0:d7:74:
af:1c:fd:12:0f:ad:5d:99:d0:cc:6c:f6:70:bd:61:
f3:41:ad:e1:27:9b:c5:91:fc:e8:fd:96:7f:91:c1:
ae:39:90:62:87:5d:74:fb:b5:d5:d9:ed:6d:51:93:
27:bf:42:12:d0:91:96:bc:9f:9f:73:ae:62:b4:bb:
0b:24:35:9e:28:98:27:ea:4e:63:39:66:42:bf:77:
ae:c3:c9:f4:58:8c:0f:a4:43:15:08:07:dd:b9:f0:
3b:df:ed:a3:a2:75:a5:b1:ed:b2:97:ac:a3:8b:e0:
43:f4:4b:33:c9:48:54:50:11:8c:ec:84:fa:d8:54:
60:ff:35:84:88:98:c4:d8:8a:07:3e:9d:1a:7f:d6:
3e:66:2f:16:6d:e1:a8:cd:a8:95:8d:94:b6:a4:ea:
5b:83:b3:ce:bf:29:36:94:73:3c:db:0d:95:92:90:
11:e1:4d:4c:38:21:bd:29:a7:37:2d:bc:01:a6:d2:
a4:9f:93:8f:ad:51:5a:dd:20:22:fa:ba:bf:a2:4d:
9a:ab:e9:44:6e:cf:f2:0c:70:49:49:6e:1b:8d:b2:
ca:93:91:61:fe:60:9a:36:75:fa:57:43:eb:c2:67:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B5:CE:7B:5C:90:A0:A4:97:A9:1B:B9:81:EB:41:E5:8E:60:6E:39
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:e2:20:19:2d:0d:38:15:41:d2:e6:69:2f:9c:4f:d7:d3:
48:be:87:ad:de:73:26:7e:bb:f8:cf:86:7c:81:c5:39:da:d2:
bc:d5:11:2a:ad:ad:40:29:e5:7d:33:ca:c5:4c:ee:89:ac:c3:
01:96:5e:f1:6d:70:f0:44:6e:35:1f:6f:dc:59:d0:02:6e:ef:
a1:12:ff:81:d3:50:31:39:d6:a2:5d:62:65:b8:4e:e0:a2:5c:
05:46:4b:cc:9e:5d:db:6c:4a:ba:e5:74:4c:00:3b:e2:3c:15:
f7:aa:ce:25:d4:33:2b:83:08:15:0d:39:70:fe:b1:32:57:59:
0b:50:91:2c:f5:bd:22:e6:56:8f:e1:b4:67:87:15:22:ee:41:
c7:fa:69:57:c2:80:45:80:46:c7:7b:ff:83:99:db:c1:53:e4:
1a:f2:67:cb:83:6b:59:6a:03:26:6d:20:8f:86:e3:8a:94:9c:
70:c0:02:6c:b6:dc:fb:5f:a1:27:58:93:31:d4:57:27:82:63:
09:30:43:8b:05:6f:e0:cd:c5:56:89:9d:1b:a8:43:fc:dd:b0:
fd:29:45:09:f8:ae:bd:06:2e:db:0f:b0:c7:77:1c:b7:e6:45:
8f:d5:a2:71:11:77:3e:d4:95:74:6c:b5:5b:84:3e:c3:fb:df:
fa:99:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:50 2026 by rpki-client