Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: shUGZKh5+yJrQkhPPgpOylGtYis+Lw8NvlEhtP3BvjQ=
Subject key identifier: 57:50:3D:44:7A:66:7F:EC:41:D5:FC:54:F0:95:2A:B8:0B:E0:CC:11
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019DCF3E2E3A56380EBC88030152ADF9998C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 11AB
Signing time: Mon 27 Apr 2026 14:00:51 +0000
Manifest this update: Mon 27 Apr 2026 14:00:51 +0000
Manifest next update: Tue 28 Apr 2026 14:00:51 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: oIGHByLDm8MPPSm5Ah0bEOC3yxKt3hX1kdlDpSJ5dKY=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:2e:3a:56:38:0e:bc:88:03:01:52:ad:f9:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Apr 27 14:00:51 2026 GMT
Not After : Apr 28 14:00:51 2026 GMT
Subject: CN=57503d447a667fec41d5fc54f0952ab80be0cc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:09:8e:40:04:1c:66:f1:9b:42:32:61:0c:
a7:f7:76:cb:93:66:80:9e:12:fa:a9:20:57:05:19:
a5:9d:c3:af:9c:95:d1:f8:40:ce:22:2f:2c:eb:f6:
83:a9:5b:0b:df:e8:d6:b0:e3:6c:15:41:d5:5b:58:
16:4b:70:11:17:ee:f8:a6:9f:b0:4c:c3:e2:e1:30:
49:3d:b0:9f:29:00:b3:62:14:c0:2b:e0:96:5f:c6:
c3:ef:9c:b9:a0:a8:40:f7:3a:c6:18:02:08:0e:4a:
b0:72:df:d3:23:bb:4e:67:b3:f9:f6:60:22:bc:63:
36:5a:d6:50:96:c3:f2:e8:de:c1:70:4a:47:3b:bf:
11:b8:87:67:a5:fd:5a:60:c5:fe:a1:7d:32:ee:3f:
4b:6c:67:49:67:f3:00:03:f9:a1:7d:46:6b:d0:93:
b2:18:12:53:94:f6:ef:88:96:cf:69:ef:5e:1f:e3:
b6:7b:4d:6a:a9:34:6b:d2:37:9c:b0:f0:97:88:41:
9b:43:2d:53:6f:af:f0:30:26:63:e3:46:f8:be:8b:
f9:0a:40:30:46:95:9a:5f:41:12:c0:1f:53:b3:91:
ef:08:0c:9c:d0:b1:96:0d:5b:b2:d9:6c:a3:ba:cf:
8e:b7:e7:ae:94:65:b5:78:32:54:06:ee:0d:b1:4c:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:3D:44:7A:66:7F:EC:41:D5:FC:54:F0:95:2A:B8:0B:E0:CC:11
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:de:ed:c3:31:ca:91:9a:b5:01:0b:92:4f:f0:3f:92:ce:92:
61:c6:57:7a:ca:41:1a:9f:65:23:f8:a4:62:1e:23:8b:dc:23:
72:17:5d:11:5e:e1:4c:3a:ea:91:1d:09:61:aa:58:75:6c:0e:
68:48:5b:bd:d8:c8:95:e2:94:4e:6c:0a:6b:47:75:f7:fc:19:
68:ee:6a:c2:93:5d:f6:32:46:f5:57:5c:c0:af:be:79:e5:c3:
5c:c2:11:a8:06:09:8d:66:df:6e:89:bb:e8:b8:3d:d0:16:19:
84:71:31:2b:c7:89:b4:ec:d7:7b:ce:d8:3d:40:32:1d:23:bb:
e1:34:61:28:9f:4f:61:e3:e3:b4:d9:71:48:08:71:ba:8c:af:
7f:60:08:dc:68:27:7a:82:87:6e:e4:52:75:b9:19:5e:e4:21:
31:1a:46:ba:04:64:e5:a3:4c:6d:f9:9a:b6:e3:aa:e2:0a:91:
be:2c:04:79:92:e8:bd:80:18:92:03:0b:dd:42:bd:6e:c8:68:
fe:cc:13:57:ef:68:0e:70:67:65:a5:8d:4d:d6:60:eb:b4:7e:
69:8c:95:cd:4a:90:fe:59:b9:4c:20:39:0c:72:c3:d0:ca:04:
07:74:30:d1:12:37:96:af:be:e4:69:aa:30:ec:82:52:83:5a:
bf:55:c6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:56 2026 by rpki-client