Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: EY6s5azSOdXVyCE//YvVil7J5VYNKwlEynA3XTvvLdw=
Subject key identifier: 7D:05:9E:56:AA:A2:75:0D:CE:83:40:ED:4B:48:E0:B9:5B:FD:B2:53
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019EB8EA80289AD47910C9C4DB8C2684B1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 1224
Signing time: Thu 11 Jun 2026 23:00:36 +0000
Manifest this update: Thu 11 Jun 2026 23:00:36 +0000
Manifest next update: Fri 12 Jun 2026 23:00:36 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: lHXCKJveyrtYRbripAHK0x8+MGvgd1NTkUW8RhMJck4=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:80:28:9a:d4:79:10:c9:c4:db:8c:26:84:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jun 11 23:00:36 2026 GMT
Not After : Jun 12 23:00:36 2026 GMT
Subject: CN=7d059e56aaa2750dce8340ed4b48e0b95bfdb253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:c1:dd:ec:03:c9:6d:80:39:b8:3e:11:b1:
b6:74:5e:f0:c7:a6:20:23:fc:3e:06:53:88:43:75:
3d:0b:48:15:1e:fd:24:7a:59:55:41:fc:71:d6:17:
22:f3:2e:3c:13:94:db:bc:5b:ca:78:b7:52:1e:e9:
e1:c0:87:69:d8:1f:8c:9d:53:31:91:cb:3f:56:aa:
55:4e:20:15:ac:df:8f:be:0f:99:44:01:19:c4:27:
bc:1b:a0:21:54:35:58:12:cd:39:4b:3f:9f:c0:5e:
69:68:ae:ba:71:ed:0a:00:2d:ba:65:25:e7:78:29:
9c:61:c1:11:0d:70:12:75:bc:ab:13:c5:82:aa:71:
60:27:86:81:97:f3:c2:0d:5d:dc:08:2d:ee:a0:ec:
2e:4d:98:4e:a0:62:39:6a:6e:56:28:cf:f8:42:1f:
da:82:85:02:7e:e7:f9:3b:ab:29:36:59:67:2e:c7:
86:b1:6c:4a:50:75:96:1f:d1:01:a2:1b:08:e9:85:
f2:00:d1:e1:51:61:16:39:56:94:23:b3:56:74:26:
b7:09:92:bb:a7:81:7c:2f:33:ba:85:36:9c:5b:4c:
fc:53:af:e9:ce:7e:19:6e:7f:43:ef:3c:54:c8:0d:
7c:40:38:95:7d:e2:dc:51:69:bc:29:22:09:e7:ff:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:05:9E:56:AA:A2:75:0D:CE:83:40:ED:4B:48:E0:B9:5B:FD:B2:53
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:13:fd:62:70:cb:ef:f9:7f:d6:6c:f3:c3:b7:67:24:9b:57:
62:b4:57:aa:23:90:1d:ba:fe:d0:41:d8:8f:3e:96:ab:0b:2a:
0d:d4:a1:5d:29:da:58:14:04:3c:e8:2b:ba:d3:d6:01:bb:c7:
c3:2a:ab:37:a0:6a:77:9f:1d:7f:0d:82:15:5d:7b:1d:f3:d8:
c6:aa:a6:e6:04:d4:f8:98:bd:85:d9:f4:78:df:e1:a7:7c:fb:
04:30:10:a6:31:b2:66:61:fc:e7:ef:73:07:0d:85:4c:55:17:
32:f6:c8:98:a6:e7:db:92:a8:cd:e8:e1:3c:35:07:04:c9:3b:
d1:3f:51:18:d3:4f:d8:96:7a:0a:62:a5:e9:73:23:70:c2:0e:
4b:1d:6d:16:e2:5b:7b:ca:db:f8:b7:44:ae:77:db:f1:93:e5:
8f:cc:33:b5:42:fe:b2:f5:4c:0d:d5:03:5e:0e:bd:c5:d5:0a:
cb:9a:f3:6e:9d:ab:71:fd:1f:d7:df:65:6f:97:e7:e2:1f:b5:
ef:4a:3f:66:8e:fb:be:ad:d4:c8:3f:4c:2b:7c:a6:7a:fe:ae:
99:cb:53:69:60:46:ca:38:50:42:14:ea:29:5b:76:3e:67:e3:
27:1a:9f:10:a1:17:1f:21:6e:9f:9c:0b:05:46:91:e8:15:26:
e2:5c:30:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646oAomtR5EMnE24wmhLHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3
MTVkYzkwHhcNMjYwNjExMjMwMDM2WhcNMjYwNjEyMjMwMDM2WjAzMTEwLwYDVQQD
Eyg3ZDA1OWU1NmFhYTI3NTBkY2U4MzQwZWQ0YjQ4ZTBiOTViZmRiMjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjbB3ewDyW2AObg+EbG2dF7wx6Yg
I/w+BlOIQ3U9C0gVHv0kellVQfxx1hci8y48E5TbvFvKeLdSHunhwIdp2B+MnVMx
kcs/VqpVTiAVrN+Pvg+ZRAEZxCe8G6AhVDVYEs05Sz+fwF5paK66ce0KAC26ZSXn
eCmcYcERDXASdbyrE8WCqnFgJ4aBl/PCDV3cCC3uoOwuTZhOoGI5am5WKM/4Qh/a
goUCfuf5O6spNllnLseGsWxKUHWWH9EBohsI6YXyANHhUWEWOVaUI7NWdCa3CZK7
p4F8LzO6hTacW0z8U6/pzn4Zbn9D7zxUyA18QDiVfeLcUWm8KSIJ5/9akwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0FnlaqonUNzoNA7UtI4Llb/bJTMB8GA1UdIwQY
MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt
M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh
LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxP9YnDL
7/l/1mzzw7dnJJtXYrRXqiOQHbr+0EHYjz6WqwsqDdShXSnaWBQEPOgrutPWAbvH
wyqrN6Bqd58dfw2CFV17HfPYxqqm5gTU+Ji9hdn0eN/hp3z7BDAQpjGyZmH85+9z
Bw2FTFUXMvbImKbn25KozejhPDUHBMk70T9RGNNP2JZ6CmKl6XMjcMIOSx1tFuJb
e8rb+LdErnfb8ZPlj8wztUL+svVMDdUDXg69xdUKy5rzbp2rcf0f199lb5fn4h+1
70o/Zo77vq3UyD9MK3ymev6umctTaWBGyjhQQhTqKVt2PmfjJxqfEKEXHyFun5wL
BUaR6BUm4lwwTg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:40 2026 by rpki-client