Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: XRUcv5iY5P6MNEsLDSTXPCf0dRDi9KjzNe8PIDD/F0M=
Subject key identifier: FC:04:EA:3E:DF:BD:A9:C9:B2:1B:D1:62:EF:9E:86:89:57:B8:BD:BC
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 01A1DF8389F7A6DAD0DCD4317D3FD3464A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 0343
Signing time: Sun 15 Nov 2026 14:01:41 +0000
Manifest this update: Sun 15 Nov 2026 14:01:41 +0000
Manifest next update: Mon 16 Nov 2026 14:01:41 +0000
Files and hashes: 1: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
2: jI4Rloh6DFz1HmHCdBXf3y15Qtw.asa (hash: 4TbdMsbbWioUGGQcOp+9Gcb+grYZOV2ELPq2K0XliQo=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: XHnFtEmsA8z8QUzH34oignj1Lh1N/fiWgWFiPQZh3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:89:f7:a6:da:d0:dc:d4:31:7d:3f:d3:46:4a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Nov 15 14:01:41 2026 GMT
Not After : Nov 16 14:01:41 2026 GMT
Subject: CN=fc04ea3edfbda9c9b21bd162ef9e868957b8bdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:9c:b1:43:42:ea:85:d6:61:37:d2:2a:98:
1c:ff:83:4c:c4:26:ad:eb:a2:bf:51:66:cb:3e:da:
ae:4c:a2:65:76:a3:e3:42:22:8c:14:bb:40:b6:fb:
84:6e:e3:4c:52:ae:13:21:23:0f:28:79:25:df:88:
fc:2d:66:8e:8c:7d:b3:e3:ef:17:28:01:83:60:ca:
8d:f2:06:0e:e0:b1:2d:d4:73:24:24:1a:58:4c:ee:
7f:a7:ab:b2:7d:6c:9c:76:7a:5b:ed:8f:10:44:35:
46:7d:e4:ea:8a:f7:49:43:bf:1d:87:00:1c:b4:75:
db:0d:52:0f:67:d3:43:14:11:92:27:a4:2b:ca:61:
2c:9b:bb:fa:e0:aa:9c:47:12:1d:93:54:74:e0:4e:
07:c4:29:b6:d2:23:d2:b7:50:d1:48:ef:5a:16:59:
d8:2c:5f:8f:a8:d7:a8:50:66:f8:0e:80:45:03:ee:
82:70:89:d6:9f:57:d2:b3:4f:62:2f:78:43:2f:70:
a4:1d:db:8c:2d:e4:ae:30:ea:9f:dc:3b:e5:74:79:
1d:b7:d8:b3:ee:56:d3:e5:2d:c5:5e:0f:aa:33:1c:
0f:3c:0a:45:bd:40:a2:5e:8c:04:91:c8:15:10:4b:
47:57:db:c7:95:49:01:1b:36:9e:da:da:20:fc:8e:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:EA:3E:DF:BD:A9:C9:B2:1B:D1:62:EF:9E:86:89:57:B8:BD:BC
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fa:02:26:ea:20:67:96:dd:ba:cb:1b:e6:1e:bb:17:54:e8:
27:a5:e0:7c:3c:aa:eb:00:ff:91:0d:ad:ef:e6:56:6a:ca:9a:
0a:31:aa:73:36:59:d1:6c:fc:bd:5b:47:cd:9e:f4:d0:de:21:
2c:60:3b:1c:43:78:d1:3a:54:17:d9:83:6d:d6:7b:3a:0a:72:
62:4a:31:25:8f:ed:1e:ab:56:d9:f1:2f:de:77:a6:c8:4d:fc:
4e:0e:14:7b:61:3a:d9:e1:2a:60:2c:fb:7d:40:27:0a:4d:33:
8d:c7:29:08:ff:7a:6a:a7:5f:2f:5a:7b:fc:5a:df:a2:53:c0:
b2:00:53:55:fe:2b:1b:51:c4:a3:f0:b4:01:be:7f:7c:0d:34:
d6:84:a4:a9:95:49:50:5b:1d:dd:71:41:fb:0d:7a:29:d0:68:
17:e2:9b:d7:90:b5:dd:a0:28:08:03:c8:e3:8c:9a:7e:0b:57:
8a:b9:2a:bd:b6:fe:b7:6c:00:ae:96:0a:c9:01:3d:88:44:20:
6f:11:b1:6e:65:52:35:4f:51:18:a9:14:aa:6a:7e:0c:3d:99:
2c:eb:f5:49:ca:93:1b:4f:d1:50:64:85:5c:43:a7:c4:a4:04:
d2:70:ab:10:2d:0b:82:1f:a2:81:e5:86:f7:75:03:63:41:7c:
9e:c9:32:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfg4n3ptrQ3NQxfT/TRkpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWRjNWZhMGRiNmMyNjdjMGI5ZDk2ZTRkZTcwOTRiMzE1
NjYyZjgwHhcNMjYxMTE1MTQwMTQxWhcNMjYxMTE2MTQwMTQxWjAzMTEwLwYDVQQD
EyhmYzA0ZWEzZWRmYmRhOWM5YjIxYmQxNjJlZjllODY4OTU3YjhiZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SScsUNC6oXWYTfSKpgc/4NMxCat
66K/UWbLPtquTKJldqPjQiKMFLtAtvuEbuNMUq4TISMPKHkl34j8LWaOjH2z4+8X
KAGDYMqN8gYO4LEt1HMkJBpYTO5/p6uyfWycdnpb7Y8QRDVGfeTqivdJQ78dhwAc
tHXbDVIPZ9NDFBGSJ6QrymEsm7v64KqcRxIdk1R04E4HxCm20iPSt1DRSO9aFlnY
LF+PqNeoUGb4DoBFA+6CcInWn1fSs09iL3hDL3CkHduMLeSuMOqf3DvldHkdt9iz
7lbT5S3FXg+qMxwPPApFvUCiXowEkcgVEEtHV9vHlUkBGzae2tog/I6/iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwE6j7fvanJshvRYu+eholXuL28MB8GA1UdIwQY
MBaAFMwdxfoNtsJnwLnZbk3nCUsxVmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZGVhNzItNmUxMS00NzFlLWFhZTIt
ZDhmYzYxNDdiNTA0LzEvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ZGVhNzItNmUxMS00NzFlLWFhZTItZDhmYzYxNDdiNTA0
LzEvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPoCJuog
Z5bdussb5h67F1ToJ6XgfDyq6wD/kQ2t7+ZWasqaCjGqczZZ0Wz8vVtHzZ700N4h
LGA7HEN40TpUF9mDbdZ7OgpyYkoxJY/tHqtW2fEv3nemyE38Tg4Ue2E62eEqYCz7
fUAnCk0zjccpCP96aqdfL1p7/FrfolPAsgBTVf4rG1HEo/C0Ab5/fA001oSkqZVJ
UFsd3XFB+w16KdBoF+Kb15C13aAoCAPI44yafgtXirkqvbb+t2wArpYKyQE9iEQg
bxGxbmVSNU9RGKkUqmp+DD2ZLOv1ScqTG0/RUGSFXEOnxKQE0nCrEC0Lgh+igeWG
93UDY0F8nsky9g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:48 2026 by rpki-client