Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: 6NQBLJJTUakXWljwvXHPC5aTZO3LwUfnsAObPDbraGY=
Subject key identifier: C0:D1:BC:A6:42:9C:35:80:3A:EC:43:3A:9D:F5:CA:BF:35:49:41:11
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019DA4F8FE44E43858868D065A0D0174AF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 0112
Signing time: Sun 19 Apr 2026 09:01:14 +0000
Manifest this update: Sun 19 Apr 2026 09:01:14 +0000
Manifest next update: Mon 20 Apr 2026 09:01:14 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: ID7y7dJHcAZpqDK5kwI7H+vKDXTwWsWALXeCKVyaAKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:fe:44:e4:38:58:86:8d:06:5a:0d:01:74:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Apr 19 09:01:14 2026 GMT
Not After : Apr 20 09:01:14 2026 GMT
Subject: CN=c0d1bca6429c35803aec433a9df5cabf35494111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:e0:3a:f7:3b:bc:3a:89:b0:81:cf:04:ec:
27:9a:e0:39:40:92:38:c0:d1:81:aa:de:85:63:8c:
cc:9d:a5:87:52:cd:02:27:40:2a:b7:85:4a:d4:b2:
e0:d2:6b:4a:c5:5c:55:81:38:11:55:9a:30:e8:17:
0a:2f:eb:78:9a:c6:0a:11:9f:cb:53:15:10:34:89:
b7:a9:46:f9:03:97:c2:6e:bf:2e:e3:53:c6:12:58:
34:ef:0d:a6:64:65:79:27:19:05:10:97:1b:21:e3:
73:86:85:c8:f3:6b:2a:28:99:b5:dc:a6:0c:4a:bc:
f1:38:ac:5b:3d:17:62:93:d6:bf:74:21:b5:eb:73:
21:50:91:a7:85:e4:d4:64:d8:d6:9c:a0:c2:0b:2f:
ff:5a:97:a5:f6:8e:af:a6:a8:f3:98:f3:d8:65:87:
38:eb:e9:b8:a6:69:22:95:a1:d7:3d:9c:b0:95:9c:
68:fd:db:bc:5e:05:1e:86:4a:b8:3e:6f:bb:53:a2:
60:1c:9c:a2:28:47:32:9c:e3:17:af:27:ec:fc:87:
4d:d4:f1:99:84:00:e0:b4:cf:e5:25:16:0d:6f:55:
47:0b:99:9c:4f:48:55:c9:d5:77:09:63:7d:1c:58:
b9:28:3f:f1:f4:0f:33:ec:e2:c5:98:c1:7b:13:09:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D1:BC:A6:42:9C:35:80:3A:EC:43:3A:9D:F5:CA:BF:35:49:41:11
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:12:8b:cc:52:9d:bd:b2:85:fb:8f:c0:71:df:f6:af:bb:4f:
00:fc:62:bc:b4:7e:57:0f:0b:57:8b:45:5b:bc:3d:9b:18:e0:
99:26:04:4c:75:d9:be:56:58:5c:d6:8f:1c:f3:f1:41:d3:95:
15:10:d8:cf:27:99:70:3b:cc:29:85:5c:74:7e:e3:4f:55:af:
28:be:ba:5f:13:83:d4:c7:ba:e4:83:7b:09:ea:af:db:7c:ff:
43:a4:4b:c0:4e:ec:aa:e3:7e:dc:42:52:9c:4d:71:26:c9:9e:
a8:ef:6b:61:7c:59:e4:9c:d4:32:37:20:9a:19:45:23:e9:53:
3c:c0:42:10:d3:2d:98:f4:9d:1c:06:cf:7e:c0:5d:40:b8:16:
7b:28:53:93:45:d3:83:df:b8:9b:15:31:bc:97:c4:cd:ea:aa:
bf:98:20:1b:5c:7a:93:93:c1:6e:f1:02:22:31:37:1f:87:70:
42:f4:92:0e:09:b2:af:16:ff:11:45:aa:de:2a:cf:13:92:f0:
51:b4:dc:b8:a4:2d:a8:01:e7:f2:eb:dd:45:1b:0b:2d:49:a3:
a6:58:42:32:30:69:ce:b3:f2:4f:57:c0:a9:c2:7e:d6:a4:0f:
24:ad:5c:75:6f:fb:62:b4:99:ee:b4:8a:13:b0:49:c6:d8:e2:
45:1f:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:13:59 2026 by rpki-client