Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: XN+CbaEqg5vX+TMZCy3JYPA0ZeVrZ4iHE7s4bzHI8Qs=
Subject key identifier: 8C:21:C5:94:1C:71:AB:70:17:FF:8F:83:01:03:21:30:64:A4:BF:1B
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019CA9460B98C52B63E43E00DE9077819CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 11B4
Signing time: Sun 01 Mar 2026 12:01:05 +0000
Manifest this update: Sun 01 Mar 2026 12:01:05 +0000
Manifest next update: Mon 02 Mar 2026 12:01:05 +0000
Files and hashes: 1: ADv4rCmboNdJeRdSNFNoC66NFcI.asa (hash: skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: WbPMkqFuHPgvSDOlYg1oVVfuHJSmw/cCEzoHynSWeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:0b:98:c5:2b:63:e4:3e:00:de:90:77:81:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Mar 1 12:01:05 2026 GMT
Not After : Mar 2 12:01:05 2026 GMT
Subject: CN=8c21c5941c71ab7017ff8f830103213064a4bf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:93:52:6d:a5:09:69:a0:fb:76:c9:cd:ca:
11:0a:33:e8:73:a9:26:83:83:47:37:a1:a6:cd:fa:
86:f3:3b:f8:d8:7b:08:e2:ea:e0:d0:f4:9b:99:96:
44:53:4b:dd:98:a4:ed:98:00:f3:e7:f7:ae:7b:ac:
3a:7e:c6:f9:3b:b6:13:79:04:11:32:94:b3:76:21:
97:47:1a:b5:bf:df:c7:86:5f:63:1b:84:20:66:69:
d3:6a:75:60:ca:87:50:44:52:14:0e:b5:ae:9c:e2:
8c:81:be:aa:d3:2d:2b:cb:d3:fc:3f:3b:5a:d8:08:
5d:30:a9:37:f1:b6:fa:60:45:76:d3:d4:72:ea:49:
13:b2:31:3b:49:25:e5:75:36:3b:49:86:f3:ba:92:
dd:3a:78:00:5f:58:aa:93:45:a5:cf:ed:04:46:44:
65:2a:f8:f1:ca:7c:5e:23:f1:72:4c:a2:d0:a7:85:
29:49:fd:be:68:75:48:f9:f1:2f:7b:ea:57:73:63:
c6:c5:b4:12:2c:e0:4b:3f:4a:98:b1:ca:9c:6c:7f:
6f:16:ea:c3:e1:ab:1e:43:6c:db:21:f0:ac:96:ba:
17:1e:55:93:2d:94:67:29:df:95:eb:36:47:04:19:
98:ac:84:23:5d:09:05:56:1d:7d:a0:1a:16:6b:8a:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:C5:94:1C:71:AB:70:17:FF:8F:83:01:03:21:30:64:A4:BF:1B
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:11:13:b3:c3:de:3d:3f:65:2f:d9:04:26:11:10:45:88:dc:
c6:a5:60:78:46:ef:69:0b:d7:85:74:55:26:f8:73:81:80:28:
60:13:df:22:36:c2:d2:4f:5d:51:65:ad:3c:c9:5b:f4:8a:02:
5a:f7:4f:f4:c4:3a:60:b1:c2:67:58:bc:19:ee:82:7f:1e:ee:
1b:33:30:4e:9f:62:98:c9:e9:3b:12:da:ea:0c:e8:ab:58:ab:
dd:aa:79:95:e6:cf:2f:1f:bd:82:8a:80:4f:c1:d1:12:6f:e3:
43:9f:61:c0:df:9b:a8:36:96:6e:04:9c:f9:60:51:9e:90:56:
8c:4a:95:7e:98:7c:7a:22:66:01:f7:f2:03:40:7e:ac:a0:12:
b1:a5:4c:f2:b7:18:cf:ee:ed:71:b1:83:c8:59:61:bd:ce:43:
ca:da:6f:d7:ee:ce:ef:5a:cb:f2:cd:fc:7d:21:3d:41:c2:ec:
00:b4:75:c0:9d:41:3c:e4:49:4f:5f:f1:bb:27:91:d2:d8:6c:
8c:93:45:d0:c0:ad:ed:42:96:25:5f:ff:13:66:e7:4d:0b:c0:
43:ab:b2:5d:ee:7d:1f:08:81:5f:91:38:aa:7c:63:6b:99:7e:
5a:f0:ba:85:5f:da:31:2b:d9:c6:2f:5a:58:bf:59:a7:92:9f:
1d:64:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:43 2026 by rpki-client