Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: V/bkLAyQSB0dAzUadUAk0acBA+rUxp7+qOpX89Hz7jo=
Subject key identifier: 08:4D:C0:59:6C:98:B7:25:6F:71:48:BD:E4:B1:82:4F:1D:16:23:39
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 01A16BDA3FF82D3BA8BF5CCFCEC5F98BDF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 04CF
Signing time: Sat 24 Oct 2026 03:00:27 +0000
Manifest this update: Sat 24 Oct 2026 03:00:27 +0000
Manifest next update: Sun 25 Oct 2026 03:00:27 +0000
Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: HAQ17kVKUeUj/iWm3BGXC5/bgu66oITPqtBY5m2CQr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:da:3f:f8:2d:3b:a8:bf:5c:cf:ce:c5:f9:8b:df:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Oct 24 03:00:27 2026 GMT
Not After : Oct 25 03:00:27 2026 GMT
Subject: CN=084dc0596c98b7256f7148bde4b1824f1d162339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:3f:fc:dd:00:46:9c:85:9a:ed:02:a2:40:
35:19:bb:df:68:fa:02:45:72:7e:a5:53:7f:4b:65:
d2:e0:6a:17:2f:06:72:72:1b:8d:3f:30:07:f2:e3:
f4:c5:a8:2c:e9:ee:36:b8:16:71:a2:d2:e9:6d:e6:
d3:9a:27:3d:2e:e0:90:f2:35:9e:f8:c0:4f:21:e8:
ea:c4:ca:28:96:83:57:a9:31:e4:91:35:bf:a0:2d:
36:2b:6b:53:da:97:42:eb:bb:14:cc:41:74:7c:ef:
bd:df:6d:ab:d0:55:cb:74:66:50:03:66:e4:b1:ab:
e7:2b:bc:76:e5:21:c0:26:82:65:40:20:d7:86:bd:
79:23:57:9e:28:a6:16:0e:79:0c:8a:85:6f:e2:ef:
51:c7:a8:69:b5:dd:49:b8:ca:9d:1b:31:0b:cf:27:
ba:97:ea:ea:2e:1f:6e:48:6c:47:7e:03:2c:81:d5:
c8:f4:77:46:d0:3e:35:c7:32:db:32:aa:5b:39:e1:
6f:d3:d0:06:56:95:23:6e:4e:93:cd:9a:c3:4f:1f:
a6:08:4e:3b:0d:a9:3b:cd:18:6c:ec:40:4c:f4:8d:
27:01:8f:0e:05:a5:dd:d6:44:a3:20:ab:bb:79:34:
c3:f1:ae:36:15:39:3e:74:c5:85:a1:2c:aa:07:2e:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4D:C0:59:6C:98:B7:25:6F:71:48:BD:E4:B1:82:4F:1D:16:23:39
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:38:e3:80:ea:fd:e6:54:25:c1:e5:36:d6:00:f5:4f:6e:f6:
ca:27:1e:da:95:6a:b4:a1:06:42:22:25:53:4d:3c:6a:e0:5a:
f4:8f:5d:d9:17:57:85:fb:89:98:63:f4:80:b7:0e:82:cb:cd:
43:d6:8a:c3:33:39:50:55:d1:80:56:62:26:b4:21:63:e5:d7:
0b:e7:d4:7d:7a:de:78:c5:3c:dc:3e:37:fc:d5:94:e1:55:db:
59:ba:a7:61:10:f2:cb:1c:d5:75:c6:f4:c6:27:b5:f2:12:56:
45:c2:70:7d:ce:ee:ca:01:46:95:dd:25:67:fe:aa:cf:fb:05:
86:cc:42:f4:b4:42:8e:d0:f6:aa:a2:48:d0:ba:4c:d1:30:1e:
87:07:36:0b:6b:2d:21:8f:b4:40:16:e1:84:49:e0:34:73:f1:
18:b4:89:c6:0c:ec:21:3d:e1:8f:fd:cb:72:2b:08:8b:cc:b2:
8c:28:9d:21:0d:ab:ba:6c:3d:41:15:2d:28:4e:5a:b2:ed:64:
c5:bc:0d:eb:58:7a:77:33:6e:3a:35:33:60:28:5d:c5:e0:30:
81:5e:da:25:b9:6a:a3:5d:0d:82:37:cd:c3:a4:f0:c9:3a:8c:
d0:81:53:52:89:41:aa:88:08:3d:79:30:e9:84:6b:bf:48:66:
e9:7a:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:30:06 2026 by rpki-client