Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: Qf7Eu2vTYKpvjvQ7MlIQANLq95cb24YhiBhZ1xNLMEI=
Subject key identifier: F9:E0:AF:03:15:54:27:BC:FC:F5:1B:F4:9D:C2:24:F2:87:FE:45:FB
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019EC03632F16D6B74AF50A2BA74E41656CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 12C9
Signing time: Sat 13 Jun 2026 09:00:37 +0000
Manifest this update: Sat 13 Jun 2026 09:00:37 +0000
Manifest next update: Sun 14 Jun 2026 09:00:37 +0000
Files and hashes: 1: ADv4rCmboNdJeRdSNFNoC66NFcI.asa (hash: skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=)
2: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (hash: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=)
3: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: F+1yp573DSnjPzIof0QsI/mhTnCEj/Ojq1Zjo27kIS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:32:f1:6d:6b:74:af:50:a2:ba:74:e4:16:56:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jun 13 09:00:37 2026 GMT
Not After : Jun 14 09:00:37 2026 GMT
Subject: CN=f9e0af03155427bcfcf51bf49dc224f287fe45fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:03:87:39:87:3c:23:ec:ec:2e:e4:3d:0a:
8f:5d:87:f8:de:0c:f6:9e:fc:28:39:61:b9:e7:1d:
11:f2:94:62:ff:6a:d9:ea:d2:91:ac:e8:f9:7e:7e:
80:05:0f:fb:f2:df:90:df:aa:37:b8:cd:fb:4e:42:
5a:37:4b:b6:be:52:4e:98:52:22:ea:47:41:e2:86:
6f:64:c4:77:8a:68:40:c3:b8:ac:a6:7a:2d:69:06:
2b:30:28:65:8b:54:32:04:d7:a9:ba:53:9e:d0:39:
7f:83:4c:c9:15:e3:73:5e:69:c4:1f:18:55:4e:40:
ea:72:0e:8b:ee:2d:a3:b0:59:e9:2f:3b:5f:20:0d:
85:cf:28:32:62:72:97:4f:0c:f6:8b:de:14:ad:90:
34:cd:6b:2b:e4:47:ee:ae:da:38:4e:b9:49:6c:bf:
5d:49:f2:12:e6:13:0d:3e:c4:48:84:9b:38:be:32:
6f:d8:8b:fb:af:ce:44:29:0b:2b:00:8a:9a:1f:54:
8c:56:12:90:ab:cb:80:8e:b9:86:e8:5a:06:16:02:
99:79:a2:c9:f6:14:9e:c3:38:5f:f6:87:be:75:c1:
ad:46:8b:e5:71:94:1d:9e:e3:64:04:84:d9:0e:4f:
98:7d:16:ea:9f:d8:e9:d2:7a:ff:ec:d7:6a:8f:dc:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:AF:03:15:54:27:BC:FC:F5:1B:F4:9D:C2:24:F2:87:FE:45:FB
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:ea:08:14:53:ff:ce:39:5b:23:8d:67:a0:dd:06:e9:3d:
be:b6:15:cc:9a:0b:7c:0c:85:ea:2e:c7:74:c6:2b:52:e5:d7:
df:bf:7e:9f:30:af:8e:31:10:57:d6:e0:91:01:fd:a0:65:0f:
0c:67:e8:4b:b6:59:a5:1e:d9:d3:a1:f5:8d:22:53:d1:11:e4:
0f:e5:81:3b:24:0c:97:0c:2f:af:0c:d2:fb:44:d0:2e:98:df:
c4:bc:55:42:e4:9d:4a:68:53:41:8e:3b:dc:b8:fb:c4:51:19:
19:fa:4f:59:02:1e:9a:77:bb:eb:a6:10:c1:5a:f8:66:09:dc:
58:91:f1:5f:dc:04:5f:4e:7a:6b:4f:7d:dc:69:32:2c:11:10:
0d:2f:d7:01:96:be:d9:6c:dc:53:e3:a1:9e:19:81:c0:92:17:
71:0a:fb:18:f4:5b:a0:38:0b:6b:17:54:de:fa:1f:8d:88:fb:
62:e5:a6:d1:11:58:18:2e:56:ff:65:47:1a:16:03:ea:1e:df:
99:dc:e1:a1:04:7b:20:e2:fc:57:f9:5f:47:d0:0c:c1:2f:d2:
b4:63:03:38:99:92:23:c5:36:6c:3e:6a:55:c9:32:5e:ee:da:
69:9c:d0:95:fc:de:67:dd:1d:81:c4:2a:59:10:4f:ae:ae:e3:
24:03:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:43 2026 by rpki-client