Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: m/dR8RuH9F9hMxHgosRV+xBViYLHHF/7H2fzseP4MVw=
Subject key identifier: E6:97:9B:A5:D1:EB:12:C3:F7:7D:33:B5:0A:8E:88:F5:51:71:99:5A
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 01A179CCB063B5E56B3D7BA0206E8DC8B367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 1391
Signing time: Mon 26 Oct 2026 20:00:19 +0000
Manifest this update: Mon 26 Oct 2026 20:00:19 +0000
Manifest next update: Tue 27 Oct 2026 20:00:19 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: vc+u0Z3ZCTaABFpKOKYgIXwpR6KRY8TDacfB5JjPNDs=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:b0:63:b5:e5:6b:3d:7b:a0:20:6e:8d:c8:b3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Oct 26 20:00:19 2026 GMT
Not After : Oct 27 20:00:19 2026 GMT
Subject: CN=e6979ba5d1eb12c3f77d33b50a8e88f55171995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:37:25:6a:ac:e0:cc:78:17:a3:f8:e6:68:
6a:42:b5:ae:36:c7:27:3d:d0:96:5b:92:d6:4f:be:
0f:fb:fb:d5:49:68:da:0d:ef:fa:dd:02:d4:88:d9:
02:ae:35:7b:60:c8:77:de:ab:58:78:41:70:db:d8:
e9:0e:a6:ef:3b:c4:76:76:5c:c0:79:08:00:bc:0a:
da:a6:7b:a3:db:15:fc:64:27:99:d3:eb:1c:a7:b6:
62:16:aa:c8:f0:8a:5a:70:e0:89:94:4d:ab:aa:e6:
81:6e:f3:18:9d:ec:84:27:d5:c7:62:f8:b7:fc:64:
36:68:6f:b3:9f:35:a0:77:dd:0f:0f:be:bb:9f:ac:
4f:fe:b3:d2:0d:21:f9:96:d9:39:c0:7f:f6:73:37:
7c:45:96:16:e7:17:b0:bd:2a:50:2c:e6:40:90:a6:
57:35:22:33:db:8c:7f:04:af:1e:7d:16:6c:70:89:
32:3f:86:87:2b:de:9c:5c:b2:e3:c9:7b:08:d6:98:
2a:62:1d:b0:9e:49:d6:94:bf:a3:aa:a5:5e:38:2f:
bc:91:f9:12:c8:83:6b:7c:5b:94:33:df:a2:74:43:
ba:42:84:08:4d:83:b1:83:3e:77:ce:25:5f:aa:cd:
74:39:a6:2c:b8:29:4c:7a:e8:af:5e:47:d8:0e:74:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:9B:A5:D1:EB:12:C3:F7:7D:33:B5:0A:8E:88:F5:51:71:99:5A
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8e:b9:fa:28:85:70:56:02:e6:3d:6e:77:83:0f:ec:90:af:
48:a4:b4:54:f3:6e:f5:f2:55:fd:3e:ff:66:ac:5e:57:db:a9:
6f:df:bb:22:ad:0c:94:48:95:c6:8e:6d:bd:9a:71:6f:e9:18:
51:ba:b6:06:fc:a5:53:8e:5d:37:ef:55:55:aa:f6:a7:60:21:
fb:f7:bd:18:a7:b2:34:10:0a:5e:4c:3b:60:24:d2:63:7c:60:
9e:f9:76:d1:ea:d3:49:13:b5:77:9c:fa:3e:5a:2a:5c:c7:d2:
1c:10:73:40:29:22:2e:ce:26:06:92:47:51:18:67:4c:c6:d0:
c6:72:c6:08:f7:06:b7:77:62:cd:c9:46:63:67:68:d8:99:ae:
c8:a8:3e:02:0b:07:e7:97:4e:5d:8e:70:0e:c0:06:c0:ae:93:
3c:fb:04:63:a4:36:e5:2a:29:39:38:ba:2e:3b:c7:50:13:81:
17:2e:f4:d6:25:63:dd:be:0c:9e:df:c7:79:5a:2c:ec:93:2f:
60:8a:4b:41:56:80:37:29:19:c0:a7:63:8b:a1:8e:a5:0f:06:
b1:49:4b:3d:c9:e0:a9:df:d8:d1:8b:12:de:3c:0f:7f:cd:2c:
1e:5c:2f:d7:a3:7f:fe:2e:62:e3:d9:f2:15:9e:95:ac:c0:a2:
c3:7d:39:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:56:37 2026 by rpki-client