Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: t2N3qGaLZQ8h05LOZMvr8nQWq6YiC6xOMcVi+epvEZ8=
Subject key identifier: AC:D0:E5:F5:A3:79:45:86:7C:75:07:DD:3D:BD:48:B4:B1:1F:B3:FE
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 019D9A74B4F9E61357B561AA77D51F783030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 105B
Signing time: Fri 17 Apr 2026 08:00:32 +0000
Manifest this update: Fri 17 Apr 2026 08:00:32 +0000
Manifest next update: Sat 18 Apr 2026 08:00:32 +0000
Files and hashes: 1: Gaonav40tTJpKCNRA2Pgw8c6CJI.asa (hash: qQGsDuLfuc8HGPjQosjqKzgl1S/2LQUHdjWbkc+kEYQ=)
2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: 5DK8j+cUpu8I2QWTWC4Nmn20U2xElT0JO8sDof+sfqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b4:f9:e6:13:57:b5:61:aa:77:d5:1f:78:30:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Apr 17 08:00:32 2026 GMT
Not After : Apr 18 08:00:32 2026 GMT
Subject: CN=acd0e5f5a37945867c7507dd3dbd48b4b11fb3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:08:87:24:8e:65:75:d2:ea:6c:d3:2c:a5:
41:ec:b3:16:5d:8f:f3:f3:00:a6:49:97:4a:84:5b:
da:26:b0:d7:35:01:f4:5d:6d:5f:a6:e7:d2:65:f1:
93:66:0f:8b:62:ee:78:f4:6a:6b:66:21:36:c1:96:
ed:c5:27:69:f5:24:61:be:7d:45:1b:cb:64:38:47:
d4:40:0b:69:ad:ca:55:24:88:fc:9e:f0:f1:76:bd:
e2:92:88:c3:5b:5e:dd:2e:44:a9:c3:88:65:b2:14:
a6:40:ae:14:d6:54:50:4f:4e:25:00:06:72:70:da:
c1:ec:c0:f9:9e:f4:92:7e:ab:53:1c:94:bd:f6:b2:
d9:85:46:9d:0c:15:51:93:a9:ef:dc:47:71:92:72:
60:9e:f0:79:f4:51:73:72:84:bb:37:32:d9:70:49:
08:70:68:e7:c8:90:db:47:bc:f5:5a:88:14:b4:2e:
ed:67:ec:56:70:6e:c0:b7:d8:00:5b:dd:d7:c3:e5:
83:9d:cc:4f:38:bc:62:49:6f:6b:16:02:1a:96:18:
43:ed:fa:25:47:6d:6f:7d:f0:a7:1c:fa:8b:5f:57:
56:bd:dd:94:b4:f4:dd:f8:d2:db:57:ab:47:6f:5a:
e1:ab:e8:6f:a6:ca:f3:c1:c4:e5:c0:c0:e5:79:ce:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:E5:F5:A3:79:45:86:7C:75:07:DD:3D:BD:48:B4:B1:1F:B3:FE
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ce:94:66:9b:1e:d7:eb:73:0f:1d:cf:96:55:7e:bd:b3:11:
3e:61:05:d4:dd:d9:ca:be:88:1c:29:63:bc:d6:64:cb:4c:90:
ba:08:2c:52:6b:50:a6:9d:eb:67:d4:d4:3d:dc:75:c1:0f:33:
b0:e5:b7:46:b4:59:fd:04:90:39:ce:ae:4b:fa:6e:1e:8c:86:
c0:e4:33:17:db:6d:a0:74:f2:6d:de:7c:5e:ff:bd:82:3a:13:
70:c2:12:91:47:42:51:dc:90:04:0a:fc:e8:61:dc:38:71:7c:
73:a6:e5:e4:61:7f:40:23:bf:ef:91:4f:b2:1f:4a:ff:00:8d:
1a:50:8f:52:68:f8:1d:8d:9e:ca:75:ba:15:ed:46:5f:bf:83:
6e:0b:98:b9:73:96:86:7e:71:18:ea:6d:bf:0d:43:bc:c3:f7:
99:e9:85:9a:53:36:87:83:b4:8a:4a:54:04:28:ed:a7:ab:fa:
e2:f4:6c:f5:25:94:ae:47:0e:71:bb:48:74:1b:69:64:ca:c6:
2b:cf:68:db:9c:91:d4:86:40:c7:a6:14:7f:86:91:e8:7c:20:
de:fd:cc:eb:2a:8f:c2:4d:05:d4:24:ff:a3:f6:81:b7:92:05:
8e:e2:00:d4:55:33:6c:22:a6:b2:e7:61:29:b5:01:a6:16:bd:
cc:fa:26:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:35 2026 by rpki-client