Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: WTrTZLWM3RVZMnudUIZNM4oBv0ubA+U+gqOgi6d8tAQ=
Subject key identifier: BC:0E:B3:EC:26:A6:73:81:57:6B:48:E6:E9:28:61:9B:88:BE:B0:77
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 019CE66D4EE91AAC0DB12DEA20C1BBC7CE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 145E
Signing time: Fri 13 Mar 2026 09:00:48 +0000
Manifest this update: Fri 13 Mar 2026 09:00:48 +0000
Manifest next update: Sat 14 Mar 2026 09:00:48 +0000
Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: UW4I+Ay3w8XoX3h+y3lPtRAv17v8lCQQUBqWJ6sGvHI=)
2: aHNCfZJ-9wQZxvNMw3DS1H21hCo.roa (hash: 2DGefUYW6AHzEy+ZIacwyGwUVxEFyzaT1n0vrc2KxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:4e:e9:1a:ac:0d:b1:2d:ea:20:c1:bb:c7:ce:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Mar 13 09:00:48 2026 GMT
Not After : Mar 14 09:00:48 2026 GMT
Subject: CN=bc0eb3ec26a67381576b48e6e928619b88beb077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:04:df:b7:d0:bb:df:5e:cc:a3:18:67:c8:
72:b6:07:d4:09:9d:75:04:24:94:57:ce:36:cb:e4:
ec:ba:9b:33:f5:51:d2:6a:43:9a:ac:c0:9f:65:e5:
b6:81:21:5e:33:b1:cd:61:cb:e4:3f:81:f1:13:7c:
6e:bc:25:26:b2:91:8f:bd:c6:d0:43:fa:8f:b0:35:
01:6b:6a:19:45:33:99:93:1c:80:f4:8b:f3:cd:a9:
6a:8d:16:12:d5:22:b2:a9:23:37:9c:fc:40:38:b9:
ed:22:7e:44:82:cd:c1:1c:7c:97:2b:6c:37:a0:a4:
16:f7:b4:99:31:39:b4:cc:70:43:70:71:7f:6b:b8:
e0:83:c3:c0:82:9f:2d:4a:0d:d7:77:12:b4:19:43:
9d:84:8c:45:7f:f8:44:ee:e8:1a:c5:1a:5f:61:6a:
65:ca:b1:50:7b:79:d8:16:12:be:7a:c6:2d:d1:04:
a6:af:cb:e3:40:e0:4a:ac:2e:c9:49:4e:d6:fc:bf:
44:2c:74:f0:1d:de:4c:61:de:9d:94:06:47:f1:1c:
cc:80:33:88:ca:89:58:75:81:69:43:50:95:59:2c:
7b:34:a2:5e:ab:42:4b:d0:fd:21:03:7f:75:0f:ba:
75:ae:db:ee:eb:32:73:c6:a0:8f:fe:e2:09:54:aa:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0E:B3:EC:26:A6:73:81:57:6B:48:E6:E9:28:61:9B:88:BE:B0:77
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:56:ca:d0:1a:f2:b8:8a:c5:55:08:8c:e4:75:e6:6c:5b:47:
86:0c:41:12:48:0a:af:28:c7:4c:b7:cd:7f:b7:4f:b4:f6:5f:
8c:d8:74:f2:f1:5e:00:b0:91:c6:74:c1:07:ed:c2:2e:cc:09:
fd:76:af:c2:ea:d5:da:e8:42:d5:14:e8:2b:5a:7d:1d:77:b5:
1e:d6:05:f1:0b:a5:f5:ef:a9:46:6c:1e:f4:ea:d7:96:46:90:
f2:f5:aa:25:72:13:19:36:6b:03:38:c8:b2:bb:5f:6d:c1:61:
2a:8e:62:8e:9c:e9:22:ff:63:dd:83:ac:1a:be:c5:b6:36:3a:
97:67:3b:50:aa:49:6c:4b:f1:61:7d:b8:e7:f8:2b:e1:d4:48:
11:8a:f9:52:c0:d6:8a:95:81:be:f6:cb:83:74:cc:03:3c:46:
72:9a:6c:2f:74:8c:0a:37:e7:d9:62:66:c6:8c:6f:8d:72:6c:
98:06:8a:8d:fe:3e:74:1b:60:0f:5d:b7:0c:7e:68:b3:d4:26:
21:64:f7:d4:68:6b:96:9c:75:f2:84:2e:ff:c2:d3:ab:48:a8:
2b:f4:32:b0:2f:11:be:2d:62:d5:dd:57:99:de:fd:6f:91:da:
bb:06:f0:a1:f0:bc:1a:20:65:59:39:28:64:c3:ff:36:9f:ba:
eb:c0:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:31 2026 by rpki-client