Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
File: ZfaZywqf4QlubWiLmxNlstPBQIE.mft (raw, json)
Hash identifier: fBUS2+M3J4yng5fVpn6zHwIMyKEpu6vtWFZk7c41w+4=
Subject key identifier: F1:6F:63:FC:57:9C:46:FB:97:62:7B:CF:83:A3:0E:41:6B:86:77:37
Authority key identifier: 65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
Certificate issuer: /CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Certificate serial: 019FF646B6A8712269889E67C83B350A7E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
Manifest number: 4D
Signing time: Wed 12 Aug 2026 14:00:57 +0000
Manifest this update: Wed 12 Aug 2026 14:00:57 +0000
Manifest next update: Thu 13 Aug 2026 14:00:57 +0000
Files and hashes: 1: 4kefMU7_dHh0pjF04I0GNuOZzgw.asa (hash: Dg793cyO+GCKIEjFm8zI8tkDaVZ6JxafokaSOxdxvjg=)
2: ZfaZywqf4QlubWiLmxNlstPBQIE.crl (hash: 5uvPEVgir6w653tyhILz0OMtD1B3mh1aGAYdnIOoCQU=)
3: yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa (hash: RGL/uaPbj1P9rnlKrXMsj0QrwOf5G6N6ob7tSgI7xu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:46:b6:a8:71:22:69:88:9e:67:c8:3b:35:0a:7e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Validity
Not Before: Aug 12 14:00:57 2026 GMT
Not After : Aug 13 14:00:57 2026 GMT
Subject: CN=f16f63fc579c46fb97627bcf83a30e416b867737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:73:71:46:1f:15:d2:94:3f:fd:3c:41:7e:
b4:ba:79:f7:01:d0:bf:d4:5f:33:9c:4b:6c:fd:ab:
82:27:5f:2d:dd:68:b0:90:25:12:05:00:bf:b0:93:
43:0e:78:7d:c0:61:04:7e:5f:b6:91:e4:54:2b:62:
a9:20:3e:88:15:a4:c5:41:4f:6b:ba:f5:35:3a:80:
98:eb:18:ea:de:e0:62:b1:cd:3d:a7:1c:c5:d8:91:
f4:43:f2:42:a7:e3:78:10:35:11:1c:52:33:bf:bf:
3b:3c:41:fb:2b:cf:92:3b:1d:ab:25:ca:06:9f:87:
4b:9b:21:2c:51:f8:fe:98:59:3c:52:5a:68:ac:c0:
3d:32:f4:4a:34:b9:7a:e8:34:dd:db:38:2d:55:f7:
83:8c:89:d5:94:8f:ae:44:5d:42:0c:91:3a:ee:9c:
05:9f:fb:95:ad:25:26:d4:e7:7c:b8:83:0e:69:13:
da:f8:44:d0:0b:1f:ab:63:4c:11:73:48:35:3f:2e:
22:fd:f9:62:8c:da:8b:9f:65:26:0d:64:1c:7a:40:
77:cd:19:ac:56:9c:65:0f:6f:5c:27:27:43:74:bd:
b9:38:23:e5:17:29:d4:dc:9c:b8:f9:d8:b8:3b:63:
19:d9:6b:0e:f7:58:16:9d:c5:f9:71:7e:45:dc:bc:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6F:63:FC:57:9C:46:FB:97:62:7B:CF:83:A3:0E:41:6B:86:77:37
X509v3 Authority Key Identifier:
keyid:65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1e:3d:9f:a1:9a:14:fa:5d:b7:50:7a:4a:11:7f:93:6c:06:
67:63:21:6d:5d:7c:97:a7:90:30:68:ee:fb:bf:ff:36:36:0f:
db:d3:80:6c:1d:22:49:94:73:58:28:f0:03:e2:92:c5:8d:51:
7b:ed:9d:55:6a:69:6e:42:14:f4:44:1b:7f:36:a1:fc:f8:f7:
b4:79:95:8b:72:ea:84:e5:fa:6a:03:fa:8a:40:d6:3f:b3:11:
61:85:e5:50:8d:12:ec:45:f7:bb:18:6b:18:30:cc:e8:78:26:
ca:85:37:84:95:16:e1:8b:a8:8a:de:8c:e9:25:39:ba:4f:27:
28:7a:ab:fe:98:62:bd:1a:cf:62:e6:bd:a9:f6:1c:e3:06:e1:
ac:ea:b5:e6:38:f8:af:1d:57:79:62:62:1d:88:f2:63:62:86:
7f:78:04:e7:37:0c:22:7b:b0:60:08:09:ef:60:df:ee:1c:a7:
83:b6:fe:d9:85:ae:c4:a0:b5:80:5e:41:9b:e5:bb:52:2d:5c:
8f:d2:74:2f:4b:c4:00:f3:96:2a:e6:d8:76:6d:d0:e2:68:68:
50:77:cf:f2:ca:f8:0f:ff:7d:3b:38:ff:af:2e:cc:7f:32:4f:
86:23:0b:fb:1f:84:41:19:25:37:1e:5d:da:f9:06:fb:a8:66:
4f:2e:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:17:31 2026 by rpki-client