Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: qEvlZWW6omgUmvulDGyMbjMBFmPhbJJ0ar+msrfBJN4=
Subject key identifier: 6D:39:3E:F6:C7:08:94:9C:90:58:AC:6E:A9:8C:35:5F:D5:5E:53:83
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 01A08B312A435BA0E6A73F258864732459C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1641
Signing time: Thu 10 Sep 2026 12:00:50 +0000
Manifest this update: Thu 10 Sep 2026 12:00:50 +0000
Manifest next update: Fri 11 Sep 2026 12:00:50 +0000
Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: LWqOzgboz78KHITzqFbIQRwaCdMwQonLuOQEB8ltzeM=)
2: aHNCfZJ-9wQZxvNMw3DS1H21hCo.roa (hash: 2DGefUYW6AHzEy+ZIacwyGwUVxEFyzaT1n0vrc2KxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:2a:43:5b:a0:e6:a7:3f:25:88:64:73:24:59:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Sep 10 12:00:50 2026 GMT
Not After : Sep 11 12:00:50 2026 GMT
Subject: CN=6d393ef6c708949c9058ac6ea98c355fd55e5383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:97:8c:1e:c6:66:53:72:5d:ab:e7:6c:15:
2e:64:4e:74:fe:a9:24:61:7d:aa:18:b7:dc:5f:34:
a8:e1:58:c0:82:67:8d:e8:5f:be:c0:87:7f:16:5f:
11:5c:58:bf:3a:ff:91:14:86:7d:c4:68:3e:b9:fc:
b0:8d:54:61:44:66:52:14:f7:90:79:ef:51:22:db:
4c:0d:18:99:da:12:bc:36:51:7f:ac:a2:f2:31:1d:
d8:1b:e2:8c:b7:f9:1f:39:6f:5e:85:78:1f:45:11:
b9:7d:05:b7:53:e8:93:66:8b:3f:41:21:85:b4:d8:
ba:f1:55:1c:97:9a:66:7c:4d:68:fb:18:d2:4b:bc:
fe:aa:e1:48:13:10:9b:16:48:cf:ea:9f:dd:ac:0b:
67:ca:09:b4:3c:17:cb:1f:bc:94:a9:32:01:e7:74:
7d:af:05:79:db:dd:4c:8b:66:ae:52:3c:4b:59:52:
f1:02:bb:0d:1c:09:99:1b:de:41:94:22:9c:95:f7:
86:50:b2:f2:b0:a9:e0:be:92:43:1a:98:4b:32:0a:
bb:70:29:7d:4d:70:28:21:2e:3e:b2:9a:95:0b:6b:
08:72:ac:b6:49:60:41:ed:72:27:f0:90:39:88:ee:
56:24:fe:07:7d:b4:0d:41:03:6b:9d:8e:58:fb:87:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:39:3E:F6:C7:08:94:9C:90:58:AC:6E:A9:8C:35:5F:D5:5E:53:83
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e6:6c:bc:ab:08:e3:1a:79:5f:21:5c:23:4c:b4:66:8b:e6:
17:80:65:2c:da:34:ad:66:8d:3f:50:b4:d8:e0:46:db:5d:a4:
e1:d3:02:ce:d1:ed:68:75:cf:de:8f:3c:59:f7:e4:86:0a:a5:
bc:7d:76:82:34:66:a3:db:4b:51:31:75:23:d7:46:f8:aa:32:
62:87:e5:7c:56:f7:81:c2:bf:86:5b:65:4d:f7:37:2b:ce:da:
42:28:c8:4d:76:d2:8d:12:69:7a:51:26:2a:22:cb:13:dd:3b:
51:50:f8:9d:b3:43:fb:ac:a5:ca:be:b0:55:e3:9e:e3:ca:21:
82:21:c5:df:f7:e5:e5:6c:bf:e8:37:6b:9f:73:ec:c0:67:77:
3d:7d:22:8a:9d:86:f0:ad:fa:10:42:1a:bb:8a:ee:6e:f4:20:
0e:45:a0:bd:c2:1c:c4:4f:e6:9d:98:57:f1:08:36:14:86:c1:
81:62:c5:4b:cf:b4:27:d2:df:7d:b9:e4:3f:67:06:48:f6:04:
bd:12:8a:7c:16:31:0b:9e:cf:53:4f:11:da:42:b2:45:2a:6a:
16:64:23:31:34:b0:72:f0:40:49:18:38:3a:30:fd:11:2f:57:
ae:08:81:2b:6c:c0:a3:04:1f:1f:b5:bf:02:a7:a5:55:49:3a:
56:62:0c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMSpDW6Dmpz8liGRzJFnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli
MmE1MDQwHhcNMjYwOTEwMTIwMDUwWhcNMjYwOTExMTIwMDUwWjAzMTEwLwYDVQQD
Eyg2ZDM5M2VmNmM3MDg5NDljOTA1OGFjNmVhOThjMzU1ZmQ1NWU1MzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOSXjB7GZlNyXavnbBUuZE50/qkk
YX2qGLfcXzSo4VjAgmeN6F++wId/Fl8RXFi/Ov+RFIZ9xGg+ufywjVRhRGZSFPeQ
ee9RIttMDRiZ2hK8NlF/rKLyMR3YG+KMt/kfOW9ehXgfRRG5fQW3U+iTZos/QSGF
tNi68VUcl5pmfE1o+xjSS7z+quFIExCbFkjP6p/drAtnygm0PBfLH7yUqTIB53R9
rwV5291Mi2auUjxLWVLxArsNHAmZG95BlCKclfeGULLysKngvpJDGphLMgq7cCl9
TXAoIS4+spqVC2sIcqy2SWBB7XIn8JA5iO5WJP4HfbQNQQNrnY5Y+4dGjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG05PvbHCJSckFisbqmMNV/VXlODMB8GA1UdIwQY
MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct
ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz
LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOZsvKsI
4xp5XyFcI0y0ZovmF4BlLNo0rWaNP1C02OBG212k4dMCztHtaHXP3o88Wffkhgql
vH12gjRmo9tLUTF1I9dG+KoyYoflfFb3gcK/hltlTfc3K87aQijITXbSjRJpelEm
KiLLE907UVD4nbND+6ylyr6wVeOe48ohgiHF3/fl5Wy/6Ddrn3PswGd3PX0iip2G
8K36EEIau4rubvQgDkWgvcIcxE/mnZhX8Qg2FIbBgWLFS8+0J9LffbnkP2cGSPYE
vRKKfBYxC57PU08R2kKyRSpqFmQjMTSwcvBASRg4OjD9ES9XrgiBK2zAowQfH7W/
AqelVUk6VmIM8A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:36 2026 by rpki-client