Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: 3cv/Z3H0iq97y8G2t5HPbk0t1XU/DhEtTL8hfwjKvJQ=
Subject key identifier: 04:FC:84:F8:B2:44:A3:A7:D0:89:08:65:B7:F5:6E:63:48:6B:83:39
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 01A0CE234E751F8B02CD04FD3DB5F8CA1542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 02B5
Signing time: Wed 23 Sep 2026 12:00:15 +0000
Manifest this update: Wed 23 Sep 2026 12:00:15 +0000
Manifest next update: Thu 24 Sep 2026 12:00:15 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: I7LHs80IpFKo/Cj/PQ6kVrFn66UKgljXYAg/8v4GAIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:4e:75:1f:8b:02:cd:04:fd:3d:b5:f8:ca:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Sep 23 12:00:15 2026 GMT
Not After : Sep 24 12:00:15 2026 GMT
Subject: CN=04fc84f8b244a3a7d0890865b7f56e63486b8339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:7b:00:af:91:a4:e7:f2:7b:58:fb:6a:af:
ad:bf:ad:40:da:33:5c:48:4f:73:8b:a9:d1:ab:03:
10:03:7e:9a:b0:e9:86:24:2d:80:18:b8:52:28:48:
fc:fa:1a:61:79:f7:22:aa:5b:2d:2b:6f:a7:25:72:
f9:a1:5c:7f:d0:41:da:be:65:74:50:9b:e3:cd:0b:
91:19:3c:a3:7c:07:9b:49:bc:f7:12:c1:c4:4e:0b:
87:5a:70:6a:d7:d8:f3:98:07:76:65:80:d2:01:04:
47:bf:94:a4:c8:89:fa:6a:9f:90:fa:81:17:25:46:
62:26:48:0c:2d:f9:8c:7b:95:96:83:92:f9:4d:04:
23:e2:4d:65:de:68:7d:a9:be:45:30:2b:94:dd:b1:
4b:9e:a1:61:67:d8:ca:0d:7e:c0:ed:7c:1f:1a:65:
2e:9a:57:ba:c3:b2:ff:03:f3:40:ba:93:c8:fb:ab:
6e:ad:8b:56:74:23:de:7f:17:08:d9:2b:e3:4f:ff:
5d:ca:c6:95:f5:f3:a5:c8:16:bb:b6:9a:6a:35:ac:
1d:02:b3:f3:fa:7d:9e:fe:bd:34:e4:1c:58:14:66:
1c:c0:9f:0e:ea:7f:24:29:92:d5:a5:9c:2b:e6:9a:
e2:9e:2d:44:de:a7:cb:b5:84:de:4f:3b:0d:e6:95:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FC:84:F8:B2:44:A3:A7:D0:89:08:65:B7:F5:6E:63:48:6B:83:39
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:39:7b:4b:5b:a6:e4:22:0d:a1:4b:7f:d3:e2:6d:c2:ad:0f:
8d:8a:5d:94:71:85:85:81:98:93:a5:9a:4e:81:e7:3b:57:83:
fd:a2:7b:5b:31:29:66:6a:df:58:75:75:cf:6e:ee:64:d5:ba:
d0:6f:23:2f:af:0c:af:2e:f0:a2:1a:0f:a1:98:3c:ac:73:2c:
09:65:ba:86:e5:39:d1:2a:17:8d:48:f9:9c:3f:57:6d:c8:24:
0d:5c:e4:b0:b4:d6:d2:2d:91:2e:5d:d9:0b:72:46:86:e3:ba:
aa:06:ee:df:a1:63:be:a5:14:52:44:b3:13:3c:cd:56:5f:94:
f0:bf:eb:e0:14:73:f2:47:14:0f:24:f0:50:a3:0e:ee:24:e5:
46:7a:60:3c:fb:2e:e0:90:49:18:a8:33:fe:23:6e:55:8a:5c:
0e:a2:bf:ea:cb:e9:a4:12:af:35:f0:2d:a6:9b:50:46:6d:71:
ee:18:ff:50:3d:02:c2:ac:0e:40:e3:82:56:47:cb:ea:d2:37:
87:ba:d6:82:51:70:1a:4f:7b:e2:ba:67:ce:25:d2:68:96:b8:
a0:dc:52:0d:19:aa:f1:a6:82:57:83:54:49:e0:1a:d1:ba:54:
d1:54:e1:18:02:22:45:af:2c:0b:a7:70:4d:ae:15:27:47:0f:
70:6f:b9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI051H4sCzQT9PbX4yhVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWRjNWZhMGRiNmMyNjdjMGI5ZDk2ZTRkZTcwOTRiMzE1
NjYyZjgwHhcNMjYwOTIzMTIwMDE1WhcNMjYwOTI0MTIwMDE1WjAzMTEwLwYDVQQD
EygwNGZjODRmOGIyNDRhM2E3ZDA4OTA4NjViN2Y1NmU2MzQ4NmI4MzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cd7AK+RpOfye1j7aq+tv61A2jNc
SE9zi6nRqwMQA36asOmGJC2AGLhSKEj8+hphefciqlstK2+nJXL5oVx/0EHavmV0
UJvjzQuRGTyjfAebSbz3EsHETguHWnBq19jzmAd2ZYDSAQRHv5SkyIn6ap+Q+oEX
JUZiJkgMLfmMe5WWg5L5TQQj4k1l3mh9qb5FMCuU3bFLnqFhZ9jKDX7A7XwfGmUu
mle6w7L/A/NAupPI+6turYtWdCPefxcI2SvjT/9dysaV9fOlyBa7tppqNawdArPz
+n2e/r005BxYFGYcwJ8O6n8kKZLVpZwr5prini1E3qfLtYTeTzsN5pXr/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT8hPiyRKOn0IkIZbf1bmNIa4M5MB8GA1UdIwQY
MBaAFMwdxfoNtsJnwLnZbk3nCUsxVmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZGVhNzItNmUxMS00NzFlLWFhZTIt
ZDhmYzYxNDdiNTA0LzEvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ZGVhNzItNmUxMS00NzFlLWFhZTItZDhmYzYxNDdiNTA0
LzEvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzl7S1um
5CINoUt/0+Jtwq0PjYpdlHGFhYGYk6WaToHnO1eD/aJ7WzEpZmrfWHV1z27uZNW6
0G8jL68Mry7wohoPoZg8rHMsCWW6huU50SoXjUj5nD9XbcgkDVzksLTW0i2RLl3Z
C3JGhuO6qgbu36FjvqUUUkSzEzzNVl+U8L/r4BRz8kcUDyTwUKMO7iTlRnpgPPsu
4JBJGKgz/iNuVYpcDqK/6svppBKvNfAtpptQRm1x7hj/UD0CwqwOQOOCVkfL6tI3
h7rWglFwGk974rpnziXSaJa4oNxSDRmq8aaCV4NUSeAa0bpU0VThGAIiRa8sC6dw
Ta4VJ0cPcG+5pA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:23:44 2026 by rpki-client