Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: yf8D/pRuGXHImNHjYrHJXUjKZfaDaU8ElSuymzO5K98=
Subject key identifier: 19:E2:E4:58:AA:F1:14:87:05:11:A6:AD:F1:0D:12:CA:B6:C4:95:BE
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019F8F7EEF37C636EC28D18B1F6926B69C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 0210
Signing time: Thu 23 Jul 2026 15:01:28 +0000
Manifest this update: Thu 23 Jul 2026 15:01:28 +0000
Manifest next update: Fri 24 Jul 2026 15:01:28 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: s3yHZGBf88Iqy8D+w2s6ngyLQZ113FM38a14pidVEhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ef:37:c6:36:ec:28:d1:8b:1f:69:26:b6:9c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Jul 23 15:01:28 2026 GMT
Not After : Jul 24 15:01:28 2026 GMT
Subject: CN=19e2e458aaf114870511a6adf10d12cab6c495be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:02:6e:68:1e:7b:e4:3f:ba:1b:48:9b:54:
bc:03:b3:4d:e1:1c:5f:d2:be:7b:1d:e3:d3:ba:ec:
41:98:88:91:f9:d6:4c:65:cf:92:53:6b:48:e0:f9:
0b:42:10:06:5d:09:b5:c7:e9:ff:31:50:f8:4a:c6:
4a:67:e2:89:74:a8:75:a5:95:7e:89:95:50:15:79:
bf:6b:19:60:f2:5a:6a:f9:43:ea:7f:ed:85:c2:c6:
bb:96:62:53:30:87:47:54:3e:70:7c:51:d2:a8:df:
c5:bb:18:b8:23:bb:06:eb:7f:0d:59:c7:ff:c5:44:
59:4e:e4:dc:bb:19:9b:21:80:b7:4a:4a:06:83:e4:
6c:0c:58:b7:6c:a6:6a:ff:63:28:80:5d:a8:6e:54:
a2:b8:1d:fd:1b:e9:b0:b4:e5:db:e7:73:f5:c0:8a:
31:8b:46:dc:ed:42:19:b6:88:ab:3c:52:10:25:35:
fc:30:f1:8e:90:cf:4e:74:a1:65:d3:47:e0:a8:0d:
40:7f:0b:bc:03:7e:32:15:1a:f0:26:86:8f:5d:00:
6c:fb:f1:8d:99:26:6f:81:5f:55:3e:0a:ad:90:47:
d4:8c:38:f9:6e:63:74:6d:14:ec:e4:b2:34:16:fd:
7d:e9:f3:06:ff:a4:fb:00:49:94:62:db:de:0d:ac:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:E4:58:AA:F1:14:87:05:11:A6:AD:F1:0D:12:CA:B6:C4:95:BE
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:95:8b:2f:08:e5:b1:2c:9d:4e:08:ac:6a:57:de:96:2c:66:
12:5c:af:0d:d8:db:43:e0:7c:c7:ae:f4:d3:1f:5a:31:01:8a:
d1:8a:f0:6a:12:da:d9:9e:93:8b:e9:f9:3f:44:fe:9c:70:fc:
6c:2a:02:44:fa:03:fa:3a:93:52:f7:4d:d8:b7:6f:1f:6c:14:
97:31:55:b0:af:0e:a9:4c:1c:f8:5d:97:81:1d:3c:3d:2d:2f:
4f:00:c9:06:e4:10:6c:d8:52:fc:5f:5b:33:57:ff:38:c6:16:
a0:d2:25:32:3d:5f:54:c1:65:a4:89:d1:a8:a2:35:a7:10:93:
f7:a5:2e:e7:ca:11:de:c3:8f:94:86:f4:91:b5:27:6a:95:01:
12:09:aa:28:e1:b2:86:15:e6:d0:71:99:fe:c3:a3:8d:1f:be:
2d:50:c9:34:ca:a4:1f:cf:a9:4b:0c:2c:31:00:32:23:99:62:
47:18:8f:2d:e5:fe:91:16:95:7c:2d:bd:8d:6e:05:0b:78:29:
e2:e3:48:cf:3e:95:af:9c:37:84:13:89:ee:68:54:17:fb:27:
37:ce:22:e7:b2:ce:77:d2:ae:0c:72:84:d7:9a:49:77:70:ce:
91:42:92:93:a5:a2:00:bc:b0:bd:30:50:e1:93:9e:f8:f3:22:
90:1d:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:48 2026 by rpki-client