Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: R/gB3xfQOvVNQ93UATT7gFN+0ouTUQKhx5S7+p4lS+Q=
Subject key identifier: 23:D8:80:17:83:FC:D2:75:B7:85:30:5D:25:8F:5B:B2:FA:E8:22:62
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019FA296FE5058A6B0A34C5D909F5A875CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 129D
Signing time: Mon 27 Jul 2026 08:00:32 +0000
Manifest this update: Mon 27 Jul 2026 08:00:32 +0000
Manifest next update: Tue 28 Jul 2026 08:00:32 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: bfbmXn4KiRZ1H6WZmLdZjw5/mByl0Laa8ITBsr7pUAs=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:fe:50:58:a6:b0:a3:4c:5d:90:9f:5a:87:5c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jul 27 08:00:32 2026 GMT
Not After : Jul 28 08:00:32 2026 GMT
Subject: CN=23d8801783fcd275b785305d258f5bb2fae82262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:0f:27:39:f4:69:f5:82:a2:40:98:e6:11:
03:2f:b8:12:30:e2:e4:88:be:36:b4:63:c0:04:d8:
6f:33:b7:6f:e0:85:a5:37:29:02:87:b0:73:75:a9:
5a:ee:ac:4e:46:69:2b:12:91:b3:14:19:18:67:62:
27:50:d5:75:36:2e:f8:e4:5f:d8:f4:9b:c5:03:d9:
bf:86:79:7d:f1:f5:25:b1:4d:aa:db:5b:65:59:23:
33:41:ab:e9:a2:99:cc:67:27:e5:d8:b2:af:d4:29:
db:3f:86:0e:6c:7b:99:1c:7c:b0:46:ae:4d:58:a5:
e1:85:ad:46:68:4f:83:20:e5:c1:33:2f:df:60:d7:
c2:3a:4b:01:bd:e1:36:28:23:10:e6:df:32:9d:8e:
29:f9:c3:33:b9:90:e3:a1:8f:bb:6f:d8:74:1a:70:
ee:60:9c:5a:e2:53:c7:ff:57:9a:7e:bd:4d:75:b2:
10:1b:57:cb:06:b0:1e:83:12:ed:55:5c:6e:fa:1e:
36:2b:60:5c:46:2b:76:e8:4c:57:7f:fc:8f:1d:d7:
5c:f3:e3:a8:cc:65:59:03:27:d4:29:99:32:a6:bc:
7c:aa:e2:54:36:40:d5:02:ff:f3:01:66:87:89:8d:
7d:56:7c:cf:27:e5:54:5e:29:92:52:bd:78:41:5a:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D8:80:17:83:FC:D2:75:B7:85:30:5D:25:8F:5B:B2:FA:E8:22:62
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:55:ab:e8:97:83:ba:e9:ba:37:8d:cd:56:b4:dd:27:3a:2c:
20:db:12:10:c5:ac:f3:6d:a3:30:a0:e4:49:9f:36:b7:81:39:
1e:a8:f7:02:1b:ab:91:ed:1a:7e:d9:90:67:a9:35:3a:ef:eb:
42:0a:15:d0:0f:82:d7:a3:d0:bc:6b:88:2e:57:d8:29:84:d1:
e0:11:21:f4:b8:96:3a:16:dc:f7:a0:bb:c4:d0:68:18:64:50:
c2:af:61:71:fe:ce:ec:8a:c7:ec:00:e5:d6:03:eb:67:5d:37:
a9:20:9d:6b:bd:52:88:43:c5:e3:64:b3:96:d7:ef:34:92:ba:
57:30:1a:89:e2:4f:ad:79:04:71:97:9d:72:f0:fe:d2:ce:9f:
fd:4b:d3:a8:12:ea:b6:ff:1e:99:35:94:e1:ba:d7:8e:b4:eb:
3c:f2:e5:c2:7c:b4:9f:49:da:6f:7c:79:21:e3:35:ed:d0:fa:
86:ab:f6:fe:a9:87:32:dd:52:33:92:2f:9f:0b:ad:3a:ce:44:
c9:43:fb:95:07:dd:78:ef:35:61:c0:cc:cc:86:a8:01:ef:cc:
23:a1:b2:1f:e1:c2:e8:b2:a0:20:4f:26:1c:1e:0d:71:47:e8:
94:d4:5b:60:9e:24:0e:f4:e3:1b:76:e2:06:17:83:6d:14:04:
9d:ca:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:34 2026 by rpki-client