Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: d/qsYLkw1xREf4UOQRGWHeZs49Fdovz207XPKEA/Jk0=
Subject key identifier: A2:C0:2F:67:81:62:F2:F5:ED:71:2A:1F:29:F1:A6:42:36:7C:7B:EB
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019F8EA238B8F02FAE487815C0FCC76A2900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 1334
Signing time: Thu 23 Jul 2026 11:00:23 +0000
Manifest this update: Thu 23 Jul 2026 11:00:23 +0000
Manifest next update: Fri 24 Jul 2026 11:00:23 +0000
Files and hashes: 1: Mm7c4h3MUpU65BprAJNpMKyGVWM.asa (hash: eNvrY1WNeaiv6bkgtyCJt+WRW9z61JfpMvlr9TO5/xc=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: v3pYxRV4A1YsKi8PNHfn+Wd1y2ZGZPR9ixwVaBrxkBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:38:b8:f0:2f:ae:48:78:15:c0:fc:c7:6a:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jul 23 11:00:23 2026 GMT
Not After : Jul 24 11:00:23 2026 GMT
Subject: CN=a2c02f678162f2f5ed712a1f29f1a642367c7beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:6d:b8:a7:ca:70:6e:9c:f4:a8:29:d2:d8:
3e:f0:36:8b:60:21:ae:99:97:2e:6d:32:73:ca:dc:
65:e1:ff:b3:8d:bb:70:1f:50:cd:35:a8:71:f1:7e:
05:3b:2e:1c:2a:56:23:5e:64:de:30:81:b3:ce:37:
93:d7:09:1d:ee:99:df:f4:00:28:39:31:3d:61:79:
e8:bd:da:5e:bf:32:eb:8f:5f:87:12:82:16:6b:89:
40:ab:fa:93:ce:84:d9:d7:03:02:62:47:ff:a7:83:
48:2f:0e:2f:4c:8e:96:0b:46:2c:7a:d4:5a:e9:9d:
39:2e:0a:3d:9b:fa:b4:ae:7d:25:26:85:a8:15:4d:
89:a8:ce:c6:1a:e3:36:e1:c1:63:28:de:65:87:63:
ad:cd:36:19:44:e6:2b:b3:f7:3c:35:a0:e2:29:57:
a2:84:ef:d4:17:08:49:27:9e:2d:04:a0:92:5d:f7:
81:8e:a2:cb:3f:b6:90:88:b3:88:c7:e5:67:bf:ed:
67:5d:f7:e3:c8:0f:02:21:34:db:61:84:9f:10:cf:
d8:fe:43:bd:fc:20:ce:d9:d9:74:b4:1b:d0:5d:19:
92:db:e6:98:6e:42:72:a4:e1:da:be:1d:55:5f:dc:
49:ab:2f:e6:56:6d:53:6b:0c:e7:1c:75:49:39:17:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:2F:67:81:62:F2:F5:ED:71:2A:1F:29:F1:A6:42:36:7C:7B:EB
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:f2:65:39:2b:6d:9e:e0:54:19:dc:6c:98:3f:7f:19:0f:
78:de:85:be:ad:18:63:34:6a:81:33:c7:b7:ff:9d:5e:10:8c:
21:6d:50:ae:57:e8:b5:1f:b3:97:a6:67:26:07:15:4a:70:e4:
c3:28:91:6e:2f:69:40:cb:47:62:74:fc:82:b6:72:fd:a2:22:
5f:82:b7:65:c9:4b:c1:c6:72:f9:97:9f:5f:7b:21:68:41:5b:
fa:f7:e4:42:ef:cd:9a:08:83:92:53:0e:a0:cd:82:24:09:5c:
27:2e:35:28:f2:6b:b2:9c:82:e1:b7:be:42:0e:1b:d9:b9:cc:
bd:45:31:5a:38:3f:b0:da:62:6b:45:29:d2:3d:00:60:f6:8a:
23:fb:1f:57:9e:94:61:8e:dd:5f:8b:40:a9:2c:fa:2f:40:2b:
c0:7d:1a:59:ab:fc:85:92:f1:ef:8c:22:62:80:7f:79:5f:6d:
65:6c:3e:eb:bd:64:df:98:d0:30:07:30:ca:e0:33:69:21:86:
1f:0f:8a:f9:74:fb:2b:37:95:de:0e:fb:2e:97:32:95:62:b0:
3f:15:32:fc:44:1b:a9:d1:b2:26:1e:92:04:2f:41:18:bf:63:
38:4c:62:1d:17:b7:99:43:6e:39:60:bd:fa:1b:85:06:1b:e5:
93:31:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:38 2026 by rpki-client