Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: UKSWBiplo83SS7c69rD34gKxkevrFc8PhR8CEdmvuew=
Subject key identifier: 83:D0:84:A4:62:BA:B1:2D:6D:F8:67:C1:AD:F3:87:D0:20:AA:42:F4
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 01A00FCF710EA5D04CBA67979A8AD557627A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1A11
Signing time: Mon 17 Aug 2026 13:00:48 +0000
Manifest this update: Mon 17 Aug 2026 13:00:48 +0000
Manifest next update: Tue 18 Aug 2026 13:00:48 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: mNwihnxpU3NGWBvY9/LkVGrrVKoZFUV5r28nwr/5QLA=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:cf:71:0e:a5:d0:4c:ba:67:97:9a:8a:d5:57:62:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Aug 17 13:00:48 2026 GMT
Not After : Aug 18 13:00:48 2026 GMT
Subject: CN=83d084a462bab12d6df867c1adf387d020aa42f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:c8:ed:4b:4c:91:2d:48:73:1b:54:16:2c:
92:a9:78:b5:73:7a:5d:97:f6:de:78:d9:a8:ce:e2:
61:9f:04:db:44:5f:c4:f8:53:f7:96:74:ca:48:c1:
16:6e:62:35:e1:b6:01:8c:93:87:c4:d9:10:a2:dd:
24:ff:af:95:b9:68:cc:7e:08:fb:a1:9d:0a:80:81:
35:be:45:75:f0:95:6b:9e:42:c1:80:8e:62:40:31:
cb:ab:3e:c8:cc:49:df:b6:f9:57:1d:6c:b4:a6:4b:
8d:33:0b:84:48:e7:75:91:20:57:cf:c1:e6:38:4f:
6f:eb:99:a9:70:7c:49:fe:2e:f2:e4:09:36:87:30:
39:f6:6e:a7:58:03:05:aa:63:8c:2b:86:29:4a:e1:
d0:65:c0:38:90:b0:fb:f2:8d:c4:4c:c4:29:96:ce:
e9:00:d5:ee:29:79:8f:3e:b2:06:3c:e6:78:c8:cd:
5c:72:6e:2a:e3:1c:e3:61:f5:ef:68:aa:dd:97:28:
ef:7c:b1:a3:08:45:be:02:fb:a8:b7:e4:0a:de:99:
39:ac:b3:78:5a:98:4e:76:98:e7:71:c8:07:9d:34:
c8:97:94:dc:3a:bf:96:4f:60:dd:19:4e:76:61:60:
8e:1f:9e:55:2c:14:22:9a:66:0f:0d:35:75:8a:c2:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D0:84:A4:62:BA:B1:2D:6D:F8:67:C1:AD:F3:87:D0:20:AA:42:F4
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3b:7c:0f:0b:99:8a:f5:d6:56:25:c0:ca:7e:48:f1:6b:ec:
02:43:4b:7e:8f:61:2f:56:1c:75:34:a8:94:e0:84:ba:af:c2:
b1:d7:a7:6c:07:18:ac:b1:3f:ee:18:be:c9:4d:27:f7:f6:da:
a3:5d:a1:54:4d:76:f8:5b:c3:fa:f5:ab:aa:8d:7c:bf:89:11:
04:ab:33:74:bf:3f:64:a7:d7:3a:d5:9d:ba:0c:8f:9a:96:72:
e4:65:e5:90:9b:a0:42:6f:0b:07:03:7e:d9:db:cc:b4:b4:97:
49:b4:bd:45:fa:3e:06:cb:f7:ce:12:b4:96:dc:3a:6b:44:ea:
bf:b0:78:f3:3c:f2:e1:fe:93:d8:52:6b:63:7d:32:2f:e7:d4:
65:59:c2:69:b3:3c:62:bf:fa:20:04:26:7f:92:87:09:f1:77:
68:2e:3e:8e:62:96:ef:ea:5b:d1:1a:4b:ac:bc:45:71:e8:70:
d6:43:e7:a8:18:3a:ff:f4:09:7d:e9:19:85:df:5e:12:31:ac:
e0:d9:91:ae:40:21:51:5e:c3:93:d3:3d:f2:21:4b:c8:32:ff:
5e:59:e3:9f:69:39:2a:7d:3b:f0:a5:69:06:52:ac:49:ec:aa:
b5:33:21:e3:aa:f5:08:b4:63:17:d5:72:cf:3f:e3:dc:c3:3b:
5e:96:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:16:48 2026 by rpki-client