Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: LnXjTNNK36Zk1UstQPYqq/xHf8BH7hBQdSuSWsIAoH8=
Subject key identifier: 18:BD:37:D7:A6:76:8B:54:7B:41:7D:42:6C:20:47:25:97:39:F7:C4
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019E1DFE8FDD30DB0D639CA4F39DC4C262BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 1275
Signing time: Tue 12 May 2026 21:01:22 +0000
Manifest this update: Tue 12 May 2026 21:01:22 +0000
Manifest next update: Wed 13 May 2026 21:01:22 +0000
Files and hashes: 1: ADv4rCmboNdJeRdSNFNoC66NFcI.asa (hash: skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: hYTYFM3eP3lEO5ttgNMQR68xY6lgluy5DOiiGkooI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:8f:dd:30:db:0d:63:9c:a4:f3:9d:c4:c2:62:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: May 12 21:01:22 2026 GMT
Not After : May 13 21:01:22 2026 GMT
Subject: CN=18bd37d7a6768b547b417d426c2047259739f7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:91:bd:c7:a2:1b:69:95:01:c7:32:1d:4c:
c6:41:bd:f4:24:41:fc:96:26:f5:a0:07:2b:8c:a2:
5b:b3:5e:56:8a:31:42:c4:0f:af:e1:1f:67:89:8b:
80:be:60:1f:25:f2:4b:62:34:d2:a6:b1:fa:f4:07:
a3:9b:7c:c5:33:c3:bc:7e:a7:a2:d6:07:28:ae:1f:
26:7f:d8:13:01:42:c0:b4:08:f7:00:30:c8:5c:c2:
88:0e:03:a3:ab:eb:47:6e:d6:1c:23:f1:cf:1b:a9:
b7:b7:b5:35:d7:cf:5c:d9:ce:bc:95:8c:1d:a4:a7:
07:43:8c:22:17:7d:0f:9c:5b:8e:b6:bb:b6:23:7e:
78:46:e7:36:92:7f:d7:5b:12:0a:62:25:cc:ea:49:
28:08:45:82:9b:f8:71:96:03:00:91:1f:35:48:66:
e0:a5:d8:e2:6f:ab:22:ae:2b:7b:f5:7c:13:06:52:
77:cd:8d:46:07:e4:11:8b:f8:de:3b:b0:43:62:1d:
c2:b4:20:0e:8b:dc:be:9c:ba:cc:ac:87:f8:5b:6b:
7d:83:a7:13:19:2a:04:25:19:f1:c5:82:a2:4e:15:
6f:55:15:22:91:dc:18:6b:f2:48:19:68:3b:c3:ef:
cc:02:c1:e6:64:94:5a:be:07:a5:14:ee:8c:5e:e2:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BD:37:D7:A6:76:8B:54:7B:41:7D:42:6C:20:47:25:97:39:F7:C4
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ab:e2:75:37:0b:a4:6c:34:71:0c:fd:83:91:2b:8f:77:00:
e0:4d:dd:9e:28:32:31:b1:a7:bd:97:e4:15:30:7b:12:71:fc:
4a:66:96:45:3f:ba:f7:77:f1:01:5d:25:30:63:ed:da:0e:3f:
7c:d9:a1:d0:80:fc:6b:ca:0b:65:e2:e9:23:88:c4:4b:1d:36:
17:77:52:fe:b0:48:93:8a:a6:fb:31:94:e2:d7:4b:e2:cb:8a:
0d:b2:ff:7f:24:92:a1:18:eb:2a:16:11:bc:85:bb:08:13:70:
50:42:f0:ea:5b:d4:47:9c:04:9d:0c:fa:c6:e8:86:76:a0:c5:
01:06:07:16:ac:27:d7:3d:11:e3:9f:91:07:4f:89:96:29:e7:
d4:9e:6a:b7:3b:fc:c1:e5:2b:bb:47:01:9b:c7:90:bc:6a:e2:
58:20:02:53:6a:0e:c5:16:e0:f6:ca:7a:7f:81:57:98:44:5b:
bf:56:49:3a:38:8d:5e:0d:56:95:1c:74:84:12:c8:29:5f:01:
7e:f4:bc:73:79:7d:0b:64:3c:0f:cc:35:b4:17:ac:e6:33:83:
12:bd:ff:74:54:99:0d:c1:d5:69:90:fe:36:18:11:2c:ae:a8:
71:18:4d:60:ec:99:e9:a1:18:72:33:6d:95:c0:9e:5e:d1:fd:
dc:00:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:21 2026 by rpki-client