Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: nm1vhWigTCs1hFRzlGGtbfOYbxKXgkd6Qs0aryNzDwc=
Subject key identifier: 33:3A:C1:B1:D6:9E:60:AC:12:18:99:F8:7A:0F:FD:62:6B:C4:7E:A7
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019E22492091C7B8EE60A356912FF06B4AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 17:01:18 +0000
Manifest this update: Wed 13 May 2026 17:01:18 +0000
Manifest next update: Thu 14 May 2026 17:01:18 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: 63OZGpZZXEAe3rz6zjddo8fGe05naW1GTdZphWjGJfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:49:20:91:c7:b8:ee:60:a3:56:91:2f:f0:6b:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: May 13 17:01:18 2026 GMT
Not After : May 14 17:01:18 2026 GMT
Subject: CN=333ac1b1d69e60ac121899f87a0ffd626bc47ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:97:7a:cb:95:20:bd:ec:f9:e0:34:76:e5:
3e:ad:41:cc:4f:f9:1e:77:f0:74:59:c2:ec:5c:d3:
fa:3f:dd:1d:09:dd:18:bb:1c:4d:6e:c2:42:b8:e8:
43:c9:fa:e2:5d:01:90:7b:e4:4c:e4:91:73:26:30:
62:0e:db:c9:4a:12:90:97:57:72:67:07:3f:c6:92:
58:ff:5e:60:c4:a2:07:9c:c6:c7:13:92:f0:8d:de:
11:77:e0:46:81:f6:c7:17:f5:bf:0e:ac:31:cc:b9:
8b:eb:87:81:f8:c3:36:59:f2:ca:fc:62:be:c4:c5:
a2:bb:0e:4d:14:4c:8e:f4:34:ff:b4:b2:d4:0c:9b:
f4:d5:47:47:ef:e6:7a:72:36:fd:ce:ff:64:f5:3c:
77:d2:73:e1:13:f0:aa:75:b4:5c:0a:2e:df:83:32:
9f:6f:cf:b9:42:01:96:06:ef:b2:40:44:e0:85:2a:
98:7e:ec:de:95:8e:06:19:ff:98:51:7b:d6:b1:f8:
11:5d:75:35:a7:b4:96:db:13:09:f4:cf:5f:6f:c4:
d1:17:fe:9c:b6:35:e5:dd:a7:01:74:13:e2:d4:bc:
87:fe:df:4a:bf:d5:52:5c:81:3c:48:b7:94:2e:90:
74:9d:33:83:f4:ed:dd:a3:d8:27:2b:b8:60:1d:4e:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3A:C1:B1:D6:9E:60:AC:12:18:99:F8:7A:0F:FD:62:6B:C4:7E:A7
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a3:c0:2a:54:d9:31:20:05:54:a7:e3:50:45:8b:fe:de:bc:
2a:21:d2:4e:bf:fc:fa:ca:bf:a3:09:98:d1:cf:04:f1:84:d3:
e3:cf:ff:d9:b5:06:f2:37:35:70:43:a2:36:6c:1f:2c:b8:0d:
7b:0f:e2:19:a3:61:48:48:e5:0e:65:6b:31:12:87:aa:fe:5b:
0f:e0:5d:08:84:e2:48:e6:25:44:65:ed:71:e8:6b:ec:b3:08:
c4:54:79:ee:76:ea:94:82:30:0b:06:01:be:ea:78:92:15:13:
42:98:11:48:6d:47:ea:78:84:a6:56:1c:e5:5d:64:6d:9f:35:
36:9f:7c:99:cb:36:b5:f3:9f:b0:db:68:b1:71:28:f9:9d:93:
60:5f:d1:fa:1b:b4:a0:ac:0c:a6:9a:49:2a:ff:d6:74:2a:54:
da:64:6c:a9:06:ac:48:c7:51:f5:2d:66:98:36:c3:4d:bb:34:
0c:6b:1d:a7:42:90:ef:f2:08:d4:c9:2a:18:56:d2:b8:16:77:
5f:38:c1:b0:75:41:c5:9d:c5:39:4f:2e:60:d2:35:8e:3b:1a:
d5:5e:a6:36:87:5b:86:fe:a0:34:5e:59:29:8e:f2:93:81:e3:
f6:8a:0e:2d:49:85:19:1a:d0:c6:96:23:94:6d:7d:85:ab:ac:
07:55:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 02:30:00 2026 by rpki-client