Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: UM64rzfQvsryO0K5aDYEnf8rMOsfcdSKOZHth+n535s=
Subject key identifier: 8A:6C:18:97:63:FB:70:7A:B7:17:33:F2:C4:57:2E:49:D2:1B:7E:50
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019EBEEC84D851455B8EEC7BCF63BD2F647E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 01A4
Signing time: Sat 13 Jun 2026 03:00:31 +0000
Manifest this update: Sat 13 Jun 2026 03:00:31 +0000
Manifest next update: Sun 14 Jun 2026 03:00:31 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: mOevpLh5WguIrnF+f7Q1qhi7hS3ORKbBHBh+FD2vguY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:84:d8:51:45:5b:8e:ec:7b:cf:63:bd:2f:64:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Jun 13 03:00:31 2026 GMT
Not After : Jun 14 03:00:31 2026 GMT
Subject: CN=8a6c189763fb707ab71733f2c4572e49d21b7e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:bb:c2:4e:6f:b1:ff:43:98:22:f4:e8:ed:
0f:cc:27:9c:ba:71:dc:61:0d:0c:44:fe:f0:ae:86:
17:33:50:e7:be:d0:2a:89:e3:7f:1a:4a:9c:40:a7:
89:3b:8c:c4:d4:e7:75:e4:ff:c6:8f:d6:a7:f5:e7:
06:f4:ea:35:c3:7a:71:8f:6a:4a:29:fb:f6:71:61:
34:d0:62:72:3e:46:99:09:d6:43:aa:20:f5:50:e6:
7b:23:03:fd:8c:fb:50:9d:84:ea:40:79:02:cd:44:
13:8d:06:56:4a:a1:6f:cb:d1:93:9d:cc:26:b2:1d:
d8:ba:6e:3d:29:7f:8d:43:38:de:b1:51:6f:56:26:
66:32:ad:f2:77:d6:c6:e3:9e:51:76:39:92:68:37:
d6:7f:8f:60:05:9e:29:54:09:f1:f3:d2:eb:44:27:
1b:8a:02:b2:b1:0c:f4:bd:5d:60:a5:7e:7c:a5:19:
7c:16:de:43:56:1c:f8:9c:16:a3:b8:cb:17:1c:38:
b3:54:a9:ff:75:ae:05:30:ee:dc:2c:ac:e6:e1:f9:
c6:f8:25:c9:d9:2e:70:7d:23:2a:db:7d:11:5e:6a:
47:a4:17:e4:a6:76:10:b5:a9:5f:ba:4b:6d:e9:d4:
86:06:ef:3a:30:8e:b7:a1:79:2d:9b:bb:89:29:f8:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6C:18:97:63:FB:70:7A:B7:17:33:F2:C4:57:2E:49:D2:1B:7E:50
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:53:66:eb:32:f7:e1:c5:96:ec:e0:e6:a4:74:fd:d9:15:2d:
51:02:b1:59:61:80:4d:dd:73:d0:4d:bf:6c:4c:af:ad:79:25:
ca:1d:1e:03:d0:39:f9:6e:04:05:b2:2e:d7:25:a5:54:b6:90:
31:97:4f:4c:06:8e:1c:28:c5:b6:77:20:99:a6:2d:15:46:6a:
9a:46:ee:54:f5:8c:aa:11:eb:4e:c8:10:5d:dc:4f:c6:71:4a:
96:80:1f:d3:84:8f:0b:a5:be:a6:7d:fc:57:fc:a1:08:0a:ad:
af:7a:c2:f0:4e:7c:b2:65:27:14:53:ee:bf:97:70:40:f9:fb:
4e:e2:6e:70:16:e2:71:1f:cb:08:14:69:f5:64:4c:02:cc:5d:
7e:9a:cc:86:bc:d6:33:65:94:4c:64:54:22:5f:a6:a7:29:2f:
35:00:cb:a1:0b:a7:dd:d9:a3:02:38:9c:87:d9:e2:37:21:cf:
f1:40:e9:0e:21:23:a0:49:19:c2:ba:91:91:ed:cc:17:92:65:
d7:d1:f2:35:84:ed:80:90:6d:a6:bd:c6:92:80:7e:9b:16:7b:
69:b8:fc:92:e6:fc:0e:15:51:fb:52:5b:73:cc:71:40:a1:71:
7d:d4:cd:2c:ef:d8:cb:a9:45:4d:e2:d2:95:6f:89:27:e1:1d:
f7:06:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:07 2026 by rpki-client