Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
File: ZfaZywqf4QlubWiLmxNlstPBQIE.mft (raw, json)
Hash identifier: TtE8ol2YNLWf4bDDVmclchB3hlt3OOb7DqHTP8bNXLA=
Subject key identifier: 7E:CA:B0:DD:D7:81:4C:02:1E:88:63:43:E6:DE:56:72:49:7B:69:4E
Authority key identifier: 65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
Certificate issuer: /CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Certificate serial: 01A0F155A577F4088E582DC1934725A2FBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
Manifest number: CF
Signing time: Wed 30 Sep 2026 08:01:56 +0000
Manifest this update: Wed 30 Sep 2026 08:01:56 +0000
Manifest next update: Thu 01 Oct 2026 08:01:56 +0000
Files and hashes: 1: 4kefMU7_dHh0pjF04I0GNuOZzgw.asa (hash: Dg793cyO+GCKIEjFm8zI8tkDaVZ6JxafokaSOxdxvjg=)
2: ZfaZywqf4QlubWiLmxNlstPBQIE.crl (hash: bkCl/HVxBcanKE9hswx/Mtq/gXZcFcsF8G2SJqdtff8=)
3: yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa (hash: RGL/uaPbj1P9rnlKrXMsj0QrwOf5G6N6ob7tSgI7xu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 08:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:a5:77:f4:08:8e:58:2d:c1:93:47:25:a2:fb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Validity
Not Before: Sep 30 08:01:56 2026 GMT
Not After : Oct 1 08:01:56 2026 GMT
Subject: CN=7ecab0ddd7814c021e886343e6de5672497b694e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:00:c6:36:5d:cd:56:e9:dc:82:0b:b6:ed:
19:a8:44:6b:78:79:30:80:11:ed:28:0b:80:bb:1c:
66:b0:30:3e:b9:db:ca:d5:69:91:64:88:d1:1a:dc:
ec:d8:5e:26:8b:df:a9:96:c3:cf:01:94:7d:7b:2c:
24:77:08:09:95:b6:99:4a:91:2f:f4:91:f0:5e:17:
ef:54:76:fd:13:20:a4:92:12:00:d4:b3:48:5a:8e:
e3:79:03:39:aa:b7:e6:a0:35:6c:af:03:cd:70:47:
ae:9b:6e:c0:02:f8:9e:52:cd:8c:0e:b6:c3:56:83:
a9:c1:bb:54:0a:f1:b9:a9:6d:ff:39:17:8b:a0:4b:
2b:a9:b7:26:b8:bb:e9:df:07:c9:dc:27:e4:b6:1b:
ab:80:00:94:9d:83:4f:4b:c9:a9:f4:69:a4:09:5d:
82:89:ba:79:b1:f8:0b:18:05:95:35:da:39:fa:ef:
9d:2d:40:83:1e:9c:5c:e8:4c:1c:cc:98:77:5e:00:
3c:ea:94:ab:e3:e5:49:7d:93:da:d9:35:06:60:82:
0f:cd:fb:e9:98:02:e7:67:ab:39:eb:2d:4d:92:88:
41:44:21:96:14:d4:0c:3a:f9:c2:4a:fe:b3:41:9c:
6b:24:df:45:f9:84:f0:2b:92:e2:9f:e1:5f:35:5e:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CA:B0:DD:D7:81:4C:02:1E:88:63:43:E6:DE:56:72:49:7B:69:4E
X509v3 Authority Key Identifier:
keyid:65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:74:a8:94:75:9d:4c:76:72:83:b2:66:e1:d1:47:03:3d:75:
50:dc:3c:a6:1a:d3:13:80:d1:8d:ca:3c:6a:1a:e4:c8:11:80:
9c:a6:1d:eb:5d:13:50:ff:8e:a9:dc:12:e2:18:0f:cb:53:79:
93:68:ef:4c:5a:ad:bd:80:6b:ca:30:1a:aa:75:cc:84:71:ee:
39:5b:f6:d1:b1:39:3e:6d:02:e0:70:2f:35:fd:d3:be:26:2b:
09:81:53:51:f3:e4:e7:48:20:ee:ed:aa:47:16:08:4f:c9:75:
10:fc:a4:9e:fd:93:68:c4:d9:8e:cc:11:d3:e4:d5:be:52:3c:
af:d4:17:54:44:e8:11:d5:6e:8a:83:b4:61:a2:df:60:d3:d6:
17:2d:96:eb:a1:6c:a1:f1:2f:5a:35:b5:81:ee:a3:bc:40:9e:
12:25:6d:16:bf:8c:22:fa:de:85:16:71:f1:92:d6:cb:85:0a:
6c:56:f3:3d:96:5b:b0:4f:0b:b2:15:a1:91:7d:00:51:61:ac:
a8:dc:89:37:74:e5:6f:9c:5e:4b:a4:9b:9d:fb:a6:17:1f:8b:
50:6a:da:8c:13:f4:63:62:bc:0f:fe:78:cc:11:f3:28:cf:6d:
4f:1c:9d:1d:11:ae:e3:de:ed:76:54:50:88:d9:41:f9:65:a8:
b3:40:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:52:06 2026 by rpki-client