Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: ExBN8w8LPCmafDEUrOpoaP9Ml1FPrSmC8sH2NES64nk=
Subject key identifier: 38:14:B0:6E:C6:4F:FE:F2:0A:D4:91:81:EA:28:C9:F1:05:5A:0A:EC
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019FA89A568159DF9E180CFF242EF5DF51C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 021D
Signing time: Tue 28 Jul 2026 12:01:54 +0000
Manifest this update: Tue 28 Jul 2026 12:01:54 +0000
Manifest next update: Wed 29 Jul 2026 12:01:54 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: Z9sUUGA64I+F/Xk8bY3LYxRVTfrPizHR2nQP9Sod6go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:56:81:59:df:9e:18:0c:ff:24:2e:f5:df:51:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Jul 28 12:01:54 2026 GMT
Not After : Jul 29 12:01:54 2026 GMT
Subject: CN=3814b06ec64ffef20ad49181ea28c9f1055a0aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:e2:02:00:21:ee:76:90:3c:50:58:d6:e9:
a3:6d:57:c1:ce:fe:da:84:d5:15:e2:e6:8c:c4:a4:
d1:85:a1:af:33:a1:06:aa:7c:3a:ee:b0:bd:9b:eb:
f9:f7:41:76:7b:1e:b4:0c:b0:f6:7e:9b:c2:d2:ad:
fe:b8:41:86:4d:6a:93:e9:25:64:66:41:fd:ce:d6:
23:e3:bc:33:fc:6a:ec:84:4b:01:fa:bf:4a:e5:ed:
12:e9:e0:7c:97:fa:dc:f9:c1:16:d1:af:e8:53:df:
5e:ce:d0:ec:27:c5:41:8f:0d:9f:7e:4b:f4:ee:bf:
e3:c1:54:e4:61:fe:2b:b3:c6:40:a8:46:b0:a3:ff:
52:b9:a6:ca:21:cb:b4:ed:36:19:a4:88:01:f3:c5:
42:45:48:5c:e2:26:7a:a6:28:03:fe:85:53:78:70:
f8:b4:9b:3e:30:9f:82:d6:2a:b3:fd:e3:d0:76:cb:
ba:24:46:c3:9b:51:e2:b2:6f:0e:f5:00:8b:1c:bf:
da:d5:7a:4d:3e:fa:27:ee:81:e1:2e:0d:fa:f0:5a:
d8:9a:bb:4b:35:18:bc:64:b7:bf:fa:44:39:2e:f9:
68:c3:35:f1:b0:86:8f:0e:85:dd:0c:37:a5:ba:21:
41:0b:fc:46:ac:cf:c4:1a:81:be:50:7c:c0:c3:f4:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:14:B0:6E:C6:4F:FE:F2:0A:D4:91:81:EA:28:C9:F1:05:5A:0A:EC
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9d:c3:ee:80:83:32:e5:03:af:3e:c7:4d:24:cb:eb:77:f6:
0b:ef:b3:95:59:03:f8:de:87:24:29:62:0d:fb:22:aa:e7:ac:
bd:dd:28:40:8e:96:1a:7d:59:54:42:d2:8d:4f:f8:b5:bf:3f:
ef:15:8d:20:87:db:47:df:c3:f2:d4:8a:c0:bb:b6:32:e1:70:
cb:15:8b:1f:94:f4:01:18:54:eb:9e:e9:a0:cc:86:84:d2:06:
e9:76:30:79:2c:67:bb:db:95:76:36:1e:2d:3c:a8:7d:08:b5:
2e:65:c3:63:6c:e0:43:77:99:2f:b6:71:93:cf:5f:84:bd:48:
b0:08:4d:07:61:c2:9b:89:89:26:55:97:8d:0f:73:fd:85:4c:
05:26:54:7a:96:54:84:6a:9f:9a:0e:08:6a:9f:2f:1f:7c:fb:
77:f2:2d:02:f6:a6:2c:c1:8e:f6:fb:d3:66:4f:11:ea:b9:42:
96:c1:d6:b7:76:a5:f9:0d:ab:46:79:04:ec:51:31:a0:bb:40:
2b:a9:fb:f6:2c:a4:62:1b:17:af:f8:8e:70:70:0b:49:a2:64:
d3:15:17:2f:0c:11:60:8e:9b:da:88:88:dc:95:4f:85:d1:f8:
bf:01:2c:07:ee:41:b2:69:7c:81:73:53:6c:82:ce:6d:85:40:
ad:47:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:34 2026 by rpki-client