Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: NVvYFJ3jZqopvZuJT10yMO61/7qKc4bERa61RNu1z0w=
Subject key identifier: 3E:B3:1D:F3:81:DB:85:A6:6D:D2:9A:60:56:AA:B6:8C:40:E7:11:07
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019D9AABB43D3FD2882AB36CB1B36D4E9E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 1231
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: ADv4rCmboNdJeRdSNFNoC66NFcI.asa (hash: skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: KYx2V3DGoFj/ZyN3UU73U3YzcQCVPoyTDixvRFWV7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b4:3d:3f:d2:88:2a:b3:6c:b1:b3:6d:4e:9e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=3eb31df381db85a66dd29a6056aab68c40e71107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:39:25:ce:1a:8e:3e:8e:e2:7b:44:bf:91:
19:af:01:90:c5:ed:7e:a9:bc:6c:cd:67:95:d9:4b:
8e:f2:8a:c3:39:83:42:16:21:fd:43:90:4d:7f:58:
5e:a3:e9:30:f0:6d:58:a6:5e:4e:78:eb:b8:02:78:
b1:b3:f6:59:05:f5:d3:14:cd:f4:3c:e8:54:d6:a6:
36:20:94:e7:47:47:73:b9:8f:fc:a1:1e:5d:f0:d9:
9a:df:b5:df:b7:26:97:16:2d:7c:2c:11:93:93:c1:
dd:53:7f:d3:12:d5:38:4b:99:5a:43:ab:fb:cd:35:
79:2e:94:f8:54:e8:a9:87:31:53:56:f7:5a:08:ff:
ee:d9:83:7e:0d:e1:41:cb:fe:80:47:08:c2:d0:5c:
2d:c2:fe:c1:d4:33:cd:4d:8f:90:39:9e:57:89:15:
4b:b1:75:f4:12:2c:7e:d3:be:14:b2:c0:2d:a1:b4:
20:a0:d0:a4:49:e3:4f:ab:e7:f8:b1:82:4e:8a:e6:
ca:21:9c:aa:0a:09:32:95:ec:7e:dd:f2:c6:3f:a6:
80:c1:6f:56:fd:11:53:10:14:4c:ac:fd:83:57:1c:
20:f9:5e:fb:f5:ef:f3:2f:c3:a2:55:e0:95:f9:7e:
8f:df:71:9b:40:7d:26:8e:57:f8:53:8e:ee:52:60:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:1D:F3:81:DB:85:A6:6D:D2:9A:60:56:AA:B6:8C:40:E7:11:07
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:aa:2d:ec:f5:1f:22:09:92:79:e6:8a:c6:50:47:3b:1a:
5d:16:51:e9:aa:5d:15:f8:75:a2:2e:77:60:7c:3c:86:64:fc:
92:43:89:48:42:f2:b4:3c:ff:4d:bc:3b:a4:18:59:79:68:e8:
32:ad:7e:45:d9:8f:91:aa:13:a3:c5:e5:b5:a7:b5:e0:5d:9c:
18:52:45:3c:07:2f:0f:19:8c:90:78:73:92:e2:0d:f0:52:ff:
f6:5d:2d:2a:cc:c1:19:6b:60:9d:d7:3a:df:29:1f:84:05:27:
41:16:e0:da:35:a6:55:31:49:31:86:19:23:e2:c1:4d:27:6a:
e1:51:c5:5b:58:e8:e6:eb:55:7c:18:8e:77:7d:e2:42:96:07:
32:95:0c:d8:af:39:07:62:79:1a:bb:f7:eb:9b:2b:da:27:aa:
6d:7e:f4:f0:fa:1b:87:76:af:36:b4:ec:4f:d9:1d:43:a7:b3:
4d:43:41:4f:b3:1d:3f:43:72:3f:e1:56:dd:bf:4e:f7:a7:20:
5d:9c:3a:0f:00:f9:21:e0:0c:e2:78:62:f5:da:ad:76:2f:9e:
d9:b9:56:92:39:f1:95:7d:24:db:af:c7:e6:e8:0d:25:e2:c3:
70:3e:da:1c:59:fc:46:cb:08:11:e9:2e:f9:a6:e8:c5:a1:13:
c6:80:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:49 2026 by rpki-client