Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: lTIHpoA2SQS6gURIksLA9pwqg9gbKxK8+JVf2U2kmcI=
Subject key identifier: 5D:2A:E6:B0:4C:12:35:C1:DB:43:E2:1A:D5:5D:3C:AC:26:09:74:8E
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019E1CB4877DC5AFC2EFDBAE501B62A5693C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 0150
Signing time: Tue 12 May 2026 15:00:53 +0000
Manifest this update: Tue 12 May 2026 15:00:53 +0000
Manifest next update: Wed 13 May 2026 15:00:53 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: HY2vK08sj0i9LWGix0OwXrF/MwK3SAg2jVAj/wxAnpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:87:7d:c5:af:c2:ef:db:ae:50:1b:62:a5:69:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: May 12 15:00:53 2026 GMT
Not After : May 13 15:00:53 2026 GMT
Subject: CN=5d2ae6b04c1235c1db43e21ad55d3cac2609748e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:24:70:1f:f3:87:95:d8:93:95:09:eb:3e:
b8:7e:90:f7:77:f1:98:08:60:74:f1:b1:7e:ac:01:
b1:06:d9:91:24:98:6b:34:65:89:4f:1a:1e:d9:eb:
3c:48:fb:a8:f1:4a:ba:45:67:1b:bd:3b:af:94:09:
ba:8a:0e:76:23:4b:40:b2:66:e1:22:c0:e0:df:dd:
69:15:bc:fe:0a:6b:05:7b:e7:94:8d:a7:0d:46:7c:
0c:bf:97:31:fa:c4:fa:95:00:f2:b8:67:c9:ca:24:
6c:a2:80:db:1c:66:d0:b0:f1:e2:c8:f4:45:72:62:
5a:14:c6:bd:89:e5:2c:d1:95:8c:f8:d0:47:a8:12:
af:e3:91:f6:c2:d2:c0:62:9b:ae:30:fc:49:de:55:
82:b9:7c:e9:76:c2:9b:02:3c:ce:cd:23:93:55:9d:
68:bc:11:23:4f:7b:8c:d5:66:a8:e2:f7:3b:13:35:
6d:04:3a:2b:70:de:f8:3f:69:01:43:96:65:4c:e0:
56:38:5f:a0:75:72:d3:5d:78:d0:48:00:3d:4f:c1:
4e:8f:6d:fe:e9:ef:14:b7:74:a8:f3:28:cb:94:a1:
5a:d6:23:51:ce:6d:c3:b8:f0:1f:55:83:61:52:9e:
56:69:28:0a:8c:74:74:d2:f8:bf:99:81:8d:8c:65:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2A:E6:B0:4C:12:35:C1:DB:43:E2:1A:D5:5D:3C:AC:26:09:74:8E
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:50:1b:36:ab:78:ba:dd:12:2c:65:12:22:55:e1:ae:f8:
98:ae:2c:28:76:d5:7f:c4:36:e6:35:eb:05:2d:65:02:9d:e8:
8d:b7:bf:0b:e2:0a:69:a8:e9:91:91:03:1c:ef:b1:1f:15:2d:
c8:dd:3a:2c:f3:61:6d:13:aa:fd:a6:f6:65:24:96:3d:59:ea:
a2:10:9b:dc:39:00:b4:25:77:e7:5b:31:35:32:85:c7:19:b0:
ef:f4:5f:3d:dd:c2:b5:6e:f8:3d:47:1d:09:5d:f1:3c:c2:4e:
2d:3e:0b:1f:24:1b:3d:73:e0:9a:8e:53:45:9f:63:26:34:4f:
68:08:43:82:3d:88:6e:12:15:35:af:bc:6a:6c:34:21:0c:4f:
27:03:69:2f:35:57:b4:3e:a0:3b:ec:8a:b0:f3:77:b6:d2:de:
f3:43:6c:bd:70:69:c0:d5:11:d0:96:07:66:ed:e7:fc:a0:04:
a8:a4:1b:10:52:63:85:d6:c1:61:b3:a9:74:a7:08:a5:54:38:
b1:08:39:b5:4c:1c:fc:29:55:d2:bd:1b:6f:16:1b:62:49:b3:
26:1f:ee:a4:d3:3e:0a:fd:69:30:57:35:49:5f:f8:dd:34:6f:
4d:ac:8e:77:3f:92:3f:6d:a5:ce:7a:e1:9f:eb:34:7c:12:d1:
8a:4d:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:23 2026 by rpki-client