Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: K5HyogNaFX/1HJNfIQTSDcW2gQnTfSKlE7s5GRbAGqQ=
Subject key identifier: 7A:91:34:D4:D4:08:84:50:D8:35:7E:39:2E:6D:10:5D:15:CD:9B:9B
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019CA7FC21064B24B72972FB48089BC8DE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 8F
Signing time: Sun 01 Mar 2026 06:00:44 +0000
Manifest this update: Sun 01 Mar 2026 06:00:44 +0000
Manifest next update: Mon 02 Mar 2026 06:00:44 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: yWLBWAMjytRF+tqzhWj5yqf+cxrH/S/6Bf/mtta/cao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:21:06:4b:24:b7:29:72:fb:48:08:9b:c8:de:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Mar 1 06:00:44 2026 GMT
Not After : Mar 2 06:00:44 2026 GMT
Subject: CN=7a9134d4d4088450d8357e392e6d105d15cd9b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:de:06:c6:e3:80:7d:32:ae:39:8f:0d:8a:
82:65:9a:a3:5f:92:bb:8d:51:d9:b5:5e:16:b4:f7:
85:b3:c9:d5:a8:93:e8:b9:14:40:a0:67:f2:5d:02:
42:c3:0f:5a:0b:e0:a9:7e:05:1f:9c:8d:d7:52:35:
15:6d:d5:25:dd:10:a5:25:70:09:e9:78:c8:28:1d:
6a:ef:f7:98:72:fe:17:0d:41:3e:b2:1d:b2:d4:1c:
2f:fa:14:76:3a:ee:31:c9:fd:58:71:c1:54:5c:6e:
75:ab:e5:6f:52:c5:f2:e4:c6:cd:08:16:13:77:c9:
94:0d:aa:aa:25:6b:ee:2e:c9:bf:f3:5a:7f:6f:93:
6b:26:51:80:30:da:94:06:8c:92:40:3d:68:06:32:
5f:1e:bf:da:05:92:ce:4b:14:84:5e:66:47:30:81:
7b:d2:34:76:fb:6a:fe:f2:4b:1a:c4:26:44:66:63:
67:16:e5:a8:53:61:38:71:b7:b8:69:44:56:3c:fa:
9a:ce:07:7c:a0:5e:b1:09:7c:aa:04:9f:3b:d4:7b:
0b:c5:3b:2b:61:5a:01:13:35:25:81:90:e8:f6:e1:
ab:b9:a1:87:0e:bc:04:61:07:2a:39:6d:7b:10:3d:
84:51:fd:15:7c:40:19:b4:d8:53:66:00:9b:12:25:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:91:34:D4:D4:08:84:50:D8:35:7E:39:2E:6D:10:5D:15:CD:9B:9B
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:24:26:c3:b6:79:cc:93:20:e1:fc:5d:1c:70:a4:43:7f:
98:c6:9f:c1:34:f7:7c:36:7c:49:35:d7:78:be:18:8b:48:32:
f8:1b:48:a9:8d:fc:83:5f:b5:21:8d:bf:d2:74:c5:a8:de:16:
f4:a8:9a:9d:45:95:c9:21:8e:e4:46:67:f3:78:d9:df:e2:28:
ec:f3:13:98:6a:4f:9d:dc:51:81:64:6b:1c:6e:13:1a:37:51:
31:47:63:0f:19:f0:dd:7e:7f:91:8a:a6:d7:7c:a9:0d:ed:b0:
f3:e8:5c:e2:8b:1c:2a:4e:27:61:92:3a:1e:ff:40:95:0d:ff:
4f:82:cc:ae:84:8d:3e:84:87:37:18:b6:82:31:e9:74:9e:9b:
4b:05:34:f4:11:9d:e2:7d:c1:c5:22:41:ac:1a:71:04:dc:b9:
14:5f:6c:bf:d6:91:03:5e:4a:5d:f3:0f:8c:d5:3a:64:cc:33:
ca:7c:b2:e6:70:86:cb:ff:f9:35:a9:8b:75:8f:6b:02:36:bb:
f5:bd:27:54:9d:10:7d:74:12:59:47:69:ad:94:6b:d0:7b:64:
20:ca:32:25:03:4d:7c:cb:77:b2:69:19:91:de:1b:02:bb:dc:
74:d6:cf:db:dd:54:1f:d3:cb:26:06:d5:32:fe:44:63:0b:ec:
de:52:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:15 2026 by rpki-client