Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: bx/nJp7iOU8dDD35Rhza5TYQzyWEUHdo/otFpfQmPc8=
Subject key identifier: 78:22:E8:CD:9C:AF:E6:33:6C:2C:86:34:B4:17:21:8F:54:25:C6:A5
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 019D2696121E0ED289F53A3F04F30EFEFC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 101F
Signing time: Wed 25 Mar 2026 20:01:02 +0000
Manifest this update: Wed 25 Mar 2026 20:01:02 +0000
Manifest next update: Thu 26 Mar 2026 20:01:02 +0000
Files and hashes: 1: Gaonav40tTJpKCNRA2Pgw8c6CJI.asa (hash: qQGsDuLfuc8HGPjQosjqKzgl1S/2LQUHdjWbkc+kEYQ=)
2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: LMynw0LcuSBC15YSNcKXYUTS/g/KOluNkvW10MzAnm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:12:1e:0e:d2:89:f5:3a:3f:04:f3:0e:fe:fc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Mar 25 20:01:02 2026 GMT
Not After : Mar 26 20:01:02 2026 GMT
Subject: CN=7822e8cd9cafe6336c2c8634b417218f5425c6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:3e:36:55:32:e0:1e:df:20:0f:6e:f8:43:
a2:eb:35:cd:f4:47:f8:02:a2:4d:ad:51:cb:78:39:
ae:de:ac:d6:18:38:d9:88:70:b1:9f:b2:5e:07:ce:
fc:bb:bd:47:bc:ee:e2:2e:ab:c6:8e:b5:49:5a:0c:
4e:91:55:5f:02:d1:cb:8c:ab:5f:73:87:74:f8:b8:
ab:c0:f9:c3:f7:89:fe:6b:47:61:af:0b:64:14:7c:
fa:ee:f5:27:20:50:53:f1:6d:23:74:22:44:6a:95:
ce:3f:c3:6e:e0:48:ab:c1:8f:82:fd:1a:f1:fe:8c:
4c:37:b2:2c:de:54:25:00:c7:a2:e0:f1:29:f5:1d:
74:a5:00:e2:67:72:0d:e6:00:dc:96:4c:91:62:03:
72:95:68:4a:f4:08:e7:47:ac:6c:66:cb:6d:13:fd:
e3:f2:e8:09:0d:9a:1a:e5:64:d6:75:88:d9:43:fc:
6d:4e:78:51:4a:19:8b:39:53:2d:df:8b:50:37:e6:
28:b4:a7:5d:96:b6:a7:bd:f8:61:af:4a:59:1a:fb:
95:97:70:ad:58:78:b5:9b:81:cf:b8:27:c1:8b:69:
35:fd:e0:2a:a1:3c:83:3c:97:d5:29:40:07:5c:7f:
0e:55:de:11:3d:75:f5:06:ac:d2:f0:9d:31:3e:09:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:E8:CD:9C:AF:E6:33:6C:2C:86:34:B4:17:21:8F:54:25:C6:A5
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b2:07:ba:c5:3a:30:81:f6:7e:6c:c2:eb:fd:ea:04:9b:ca:
6c:a2:5d:d5:04:11:09:9b:35:9a:f5:5c:d1:02:af:95:da:41:
ad:a5:ed:ce:96:59:fa:b9:af:88:0f:84:8b:cb:57:d1:f4:70:
2c:79:a5:f7:6c:57:a8:2d:e6:9d:5d:32:18:4e:a9:93:13:f6:
e6:93:20:b9:95:97:e9:f3:e8:ff:c7:53:b3:a5:14:64:37:a8:
78:60:d4:e0:70:ed:a3:b9:86:05:c4:14:10:b1:08:fb:6e:45:
a9:35:c6:35:69:01:9e:30:7a:c5:9f:59:a5:25:36:57:70:0c:
3f:48:1c:4b:54:f6:76:86:7d:2e:ae:bd:62:6a:7c:b6:7d:f2:
1e:f8:1f:f1:79:64:c1:63:23:cf:8d:18:93:75:7d:d8:f0:80:
c3:52:2b:fd:6b:8c:06:df:01:71:0d:1b:9b:d8:c0:2c:28:b2:
95:ef:a7:10:1a:f9:82:10:b0:4b:0e:6a:b1:66:cd:30:af:fe:
b4:0a:f7:21:92:fb:df:63:17:44:54:0f:dd:93:ba:03:b5:4c:
5f:1f:05:41:1f:b5:65:7f:d8:d9:82:b7:0b:3f:68:ee:a4:77:
f2:12:98:de:50:7c:0b:37:66:78:3f:92:93:8e:be:9e:5a:bf:
c1:74:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:52 2026 by rpki-client