Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: N1kbiXOcd1VP+bIB2OQIA+h13ph8PXZd3ldTW7uHbQ8=
Subject key identifier: 35:E0:BA:3D:71:48:AF:84:83:E7:11:D1:4A:94:F9:BE:E7:6F:F0:2B
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 01A0D3EF5422CCDB3B4AA55064B92DEE2236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 02B8
Signing time: Thu 24 Sep 2026 15:01:12 +0000
Manifest this update: Thu 24 Sep 2026 15:01:12 +0000
Manifest next update: Fri 25 Sep 2026 15:01:12 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: BDJV3g+7k9LSy2ftLXKltvTjsZEvf38a4hS979XAy+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:54:22:cc:db:3b:4a:a5:50:64:b9:2d:ee:22:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Sep 24 15:01:12 2026 GMT
Not After : Sep 25 15:01:12 2026 GMT
Subject: CN=35e0ba3d7148af8483e711d14a94f9bee76ff02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:18:e2:3d:19:54:75:cd:52:0b:81:cc:56:
ce:9b:b8:b1:81:2f:8b:62:40:7f:13:14:1b:6f:95:
8b:79:27:08:2b:6f:f6:bb:85:7d:3f:e2:95:4a:49:
3c:5e:e0:68:63:6f:df:3d:82:f2:0e:b5:27:a5:4f:
ef:fe:3a:19:0d:8f:39:26:f0:27:60:cf:69:ac:fb:
4d:d9:e6:be:02:2d:e4:b3:3a:81:93:1f:ef:a7:7f:
e8:55:2e:c0:7c:fa:63:2e:b4:73:ca:33:af:13:2e:
9d:fc:7f:58:08:a4:40:e5:36:6d:c3:b3:8a:04:9a:
ee:70:b6:67:69:9a:21:5b:a6:85:c6:f8:c3:85:34:
83:12:8a:a4:d3:7b:73:1f:31:1e:4a:1c:c9:5f:92:
1c:55:d5:7e:64:b0:d3:e7:b9:0f:64:3b:dd:f7:38:
42:52:4e:e4:68:48:38:d2:20:05:54:66:8d:92:4a:
7f:6e:5a:9b:57:f7:9c:a6:d1:87:3a:9f:fa:37:63:
ac:5e:52:b6:04:e1:34:3d:36:67:15:4c:b1:76:99:
ac:94:fa:ff:92:b7:ef:9e:72:5a:01:5c:15:33:cd:
95:1f:15:b9:55:f5:a9:a9:09:68:4d:25:d5:d5:4b:
08:d9:80:ce:54:6a:a6:c1:67:a0:b9:bd:79:38:cc:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:BA:3D:71:48:AF:84:83:E7:11:D1:4A:94:F9:BE:E7:6F:F0:2B
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:93:10:39:39:a0:8a:84:79:7d:db:43:e4:07:ec:67:28:7f:
2a:e3:86:d9:da:86:be:0a:63:da:91:05:00:97:6a:2b:c7:15:
c9:27:fe:50:40:23:38:44:5d:c6:f1:20:7f:e8:75:6a:77:57:
c7:cb:83:6c:8d:f0:eb:29:39:80:26:98:9b:b1:b8:48:1c:69:
24:e2:21:32:1d:6e:56:1d:ba:a2:4d:7b:fe:b7:55:0b:a8:c8:
bc:59:3d:51:aa:4b:6c:c7:54:e8:d3:3b:6d:f4:8c:54:bd:e0:
cf:59:53:93:cb:92:6d:39:29:13:3c:08:1e:ff:40:00:d1:b6:
f8:ff:e2:d0:9e:11:07:6d:66:2e:cb:77:92:e6:4e:fa:31:ed:
40:72:74:c3:e1:f5:89:d1:bd:d3:6b:d1:98:08:96:a0:08:1d:
18:34:4b:15:cc:c9:ec:52:ec:a0:6b:c3:19:5a:53:4d:89:08:
5a:9c:1a:4e:f5:28:3b:b3:ab:f3:bb:c2:96:24:d8:02:7c:dd:
2b:c2:72:f4:96:10:0a:6b:8d:0b:cc:11:f2:1a:fd:29:02:94:
e8:f6:e8:65:03:31:6f:7f:ae:c2:d5:a9:14:31:bc:49:4b:f6:
61:c2:d5:6c:e8:f3:58:b8:42:9c:f9:fd:b5:41:eb:8a:a1:92:
0f:0c:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:29:37 2026 by rpki-client