Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: lfT5IqVrJfu9wL8Znwd5kRLPFk+M7nGv8iCPu6qtKrM=
Subject key identifier: D9:5C:5E:6A:7F:0F:11:E6:8C:61:F7:A3:84:B0:35:EB:BE:B6:5A:9B
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019CAD22608A20EB12AD75B78F270E2B45FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 11B6
Signing time: Mon 02 Mar 2026 06:00:37 +0000
Manifest this update: Mon 02 Mar 2026 06:00:37 +0000
Manifest next update: Tue 03 Mar 2026 06:00:37 +0000
Files and hashes: 1: ADv4rCmboNdJeRdSNFNoC66NFcI.asa (hash: skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: ZF0Ab1zsLxRK5uaT6NkUwYNZ6W/Qheq2gqSVzV9Psd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:60:8a:20:eb:12:ad:75:b7:8f:27:0e:2b:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Mar 2 06:00:37 2026 GMT
Not After : Mar 3 06:00:37 2026 GMT
Subject: CN=d95c5e6a7f0f11e68c61f7a384b035ebbeb65a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:9d:29:22:86:49:ef:eb:d5:f5:3b:c0:fa:
99:30:c5:19:a7:8e:72:1e:7c:63:a0:f5:52:92:3f:
91:7f:5f:68:f2:4b:65:13:fc:96:ae:4f:ba:c6:1b:
9c:a9:88:bf:cc:7c:7d:4b:51:60:77:69:33:e5:2e:
0e:48:b5:29:94:2d:bf:ee:c0:d5:bf:ca:49:d5:c0:
fe:f8:f3:ff:de:e7:b7:e9:83:6b:4f:f1:53:a7:ed:
85:12:b5:53:e6:a5:f6:8f:b3:32:60:94:e7:5b:77:
06:d8:88:a3:2a:46:fc:ca:c9:e0:cf:b8:e0:32:00:
c1:2a:67:0a:33:f9:be:bf:2b:27:bf:6c:77:8e:57:
d1:60:59:6e:50:7f:aa:8c:b7:e1:c5:27:b4:bb:8a:
68:fd:27:b7:76:00:ff:ab:dc:9a:a3:32:68:98:79:
cf:1f:f4:b8:5f:d2:23:36:c9:f3:7e:6d:d7:a7:c8:
bd:cf:9b:85:f8:28:36:dd:76:db:30:83:bc:62:df:
3f:77:f2:07:5d:18:4c:80:92:18:e4:ab:7e:6a:29:
27:62:ad:f0:32:16:a1:e9:a7:71:e8:52:99:bc:8b:
f2:c7:ca:0f:c3:91:1b:3b:d2:0b:be:02:d6:e6:4e:
1c:b9:85:d3:ee:09:fd:0c:19:fe:16:f2:b8:d9:e2:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:5E:6A:7F:0F:11:E6:8C:61:F7:A3:84:B0:35:EB:BE:B6:5A:9B
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:03:08:43:b0:41:b7:be:12:0f:a8:aa:24:de:56:48:7a:4a:
bc:75:79:66:0d:e4:4d:cc:69:c1:a0:df:fb:79:3f:e9:0c:52:
74:f9:a2:9d:a4:4f:73:ea:88:f6:58:71:5f:18:60:69:c0:c5:
f6:0a:e0:96:74:44:ab:1d:87:ff:ca:fd:c1:32:5f:cd:0f:45:
f2:32:46:2a:c1:df:33:dd:dd:d7:23:cf:45:fc:95:df:4e:0b:
a2:98:e7:3b:4d:76:f9:1d:6a:a3:66:58:5b:16:6f:07:c6:07:
2a:dd:b6:44:ca:fe:c0:65:0b:27:78:78:1c:02:8d:7f:89:96:
11:11:a2:28:53:3a:34:02:d3:93:cf:67:1d:71:58:5c:ad:34:
73:f8:50:6f:96:06:a3:d6:88:a7:ac:fe:47:62:fa:7b:22:34:
80:79:1b:f5:9a:6b:2a:7a:60:05:c2:77:4e:02:39:b7:95:1d:
10:5a:79:cd:dd:74:07:45:5a:69:ba:49:2c:7e:37:50:8c:3d:
50:8a:d4:e6:f5:65:50:4e:0d:d9:47:68:ed:7e:eb:63:20:3c:
aa:6e:5e:cc:a8:d5:cc:fd:2b:20:d7:24:b4:35:bd:99:f3:49:
05:33:53:25:26:4a:47:07:dd:d9:10:d9:db:b3:c8:b2:65:70:
51:d0:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:28 2026 by rpki-client