Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: pv180ZrPyItGis/7w+5rsWOGYQphzDjEGyGsNQRLelw=
Subject key identifier: 0A:FA:E1:02:2C:28:F7:F3:A5:4A:56:AE:13:6D:A2:06:0A:B8:A7:AB
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 019EB9C5E7BD33040BB10DD25141E21173CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1550
Signing time: Fri 12 Jun 2026 03:00:15 +0000
Manifest this update: Fri 12 Jun 2026 03:00:15 +0000
Manifest next update: Sat 13 Jun 2026 03:00:15 +0000
Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: 4wYt9k1NdH5jn5fEsy2lBOq/FAH6S6B+zu5yg2tcnuI=)
2: aHNCfZJ-9wQZxvNMw3DS1H21hCo.roa (hash: 2DGefUYW6AHzEy+ZIacwyGwUVxEFyzaT1n0vrc2KxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c5:e7:bd:33:04:0b:b1:0d:d2:51:41:e2:11:73:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jun 12 03:00:15 2026 GMT
Not After : Jun 13 03:00:15 2026 GMT
Subject: CN=0afae1022c28f7f3a54a56ae136da2060ab8a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:65:80:b2:76:32:f5:7c:17:ae:a8:89:93:
21:c6:70:c9:5b:9e:e2:91:a5:61:a2:43:5f:32:a5:
01:53:f5:57:b1:de:c5:e3:8c:f6:a3:49:3f:42:d8:
8a:cf:07:15:93:33:e5:6e:4c:30:ca:c5:6e:fc:0a:
10:b2:4e:22:62:b7:3c:ab:af:68:7c:7a:72:2d:a5:
1d:26:44:1b:99:e9:6d:53:11:78:77:df:2d:74:eb:
5f:ce:76:24:92:c8:86:eb:37:7d:c4:9e:fe:da:17:
ea:f2:f9:d4:20:41:39:1a:78:cc:1e:24:0a:64:33:
00:6f:42:91:ba:43:44:7c:83:8f:b7:40:de:48:ee:
4f:a4:1d:0c:f1:d0:92:15:de:d2:a5:a2:95:13:30:
a4:ec:5e:ff:80:36:43:b0:8e:a0:19:a0:c1:52:fc:
af:e8:b5:e0:b3:8b:13:82:b3:b8:22:1f:ae:e5:5d:
9f:e1:58:8d:be:03:04:40:04:81:f9:16:5c:cb:72:
4d:8f:f7:7a:a6:5a:ac:f1:5a:8f:c2:96:eb:81:a3:
9c:44:c2:24:9f:2e:90:00:68:6a:92:9a:7a:9c:2c:
c8:8f:b8:07:61:a8:b8:a8:a7:0e:2c:dc:ff:3f:6d:
b0:31:aa:74:40:5c:ac:a2:1b:fa:39:e7:cf:6b:c6:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FA:E1:02:2C:28:F7:F3:A5:4A:56:AE:13:6D:A2:06:0A:B8:A7:AB
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d1:64:0c:47:b8:d9:2f:e3:a9:2a:44:4c:18:63:06:25:dc:
41:42:fd:a5:8f:85:40:21:4e:e9:b2:96:e0:fd:9d:f7:10:a0:
80:65:6e:46:88:1d:6a:38:de:63:57:e5:7c:03:f1:87:94:c9:
1b:c3:c5:36:e2:0c:72:3f:ca:9e:fc:57:9f:08:76:1f:c3:c2:
3c:dc:47:b1:81:85:ea:3d:37:a3:b2:88:96:4f:a1:af:d0:7c:
78:41:15:d0:51:42:d8:12:63:f7:9e:79:ca:84:f7:25:02:43:
e1:b3:fc:07:8e:db:ac:ee:9e:1a:11:a5:ae:a4:3b:63:a9:7c:
58:bb:13:51:85:c4:90:2b:4a:c6:d3:5d:54:f1:6c:bd:83:db:
da:a1:6d:cc:15:3d:9c:d0:f4:40:17:0f:83:ca:ee:1a:b2:a9:
d0:10:30:f5:18:35:83:e1:b3:99:7c:45:22:e2:4e:4b:4f:4b:
23:63:b5:bf:c8:86:03:ed:a3:ec:34:35:72:c6:92:86:14:3b:
64:bc:24:22:16:33:aa:b1:b1:92:69:26:c7:78:79:fe:94:02:
b4:28:65:8a:a3:df:bf:41:6b:0e:5a:2f:94:4a:ce:f0:bc:d6:
c6:f4:98:16:74:14:0e:9e:03:30:35:a3:32:d9:53:7e:4b:b0:
54:da:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:10 2026 by rpki-client