Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: U7i4Gy9//7mSLb6U8XwD4DJnKWvoRVQNXgD/x55RXZM=
Subject key identifier: 45:58:AA:5E:A5:16:61:5D:77:0B:D0:B4:45:FF:44:0C:22:CF:F8:E6
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019F197A2EA4009619B0DB5BD49D98292A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 17:01:05 +0000
Manifest this update: Tue 30 Jun 2026 17:01:05 +0000
Manifest next update: Wed 01 Jul 2026 17:01:05 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: Fv1rYazLggJeRvmYW/gI/XTYvGtSy9yc0dFpvOy3l9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:2e:a4:00:96:19:b0:db:5b:d4:9d:98:29:2a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Jun 30 17:01:05 2026 GMT
Not After : Jul 1 17:01:05 2026 GMT
Subject: CN=4558aa5ea516615d770bd0b445ff440c22cff8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:2e:36:1e:2a:7e:e3:5f:16:1d:cb:39:f5:
9e:3b:79:a1:19:8d:c5:4f:c8:77:6b:47:e4:0c:f5:
13:c0:97:ab:be:d2:c6:84:d4:8b:8b:3f:8d:2a:72:
9c:bb:90:0f:1a:d5:f5:e0:25:f3:6d:26:eb:6b:18:
a0:4e:bd:b6:85:7c:37:a2:25:9a:ad:46:08:b0:3c:
1d:41:d5:42:cf:98:94:18:bd:d2:75:d9:fe:fc:09:
ab:a6:80:64:2d:a1:f5:4b:cb:38:77:fe:4c:d9:6d:
56:9e:a6:39:96:93:c9:ca:13:f0:46:6f:f9:e8:30:
81:ac:18:53:33:1d:d9:b0:8d:80:37:29:68:a4:85:
b8:f6:1d:01:70:69:c9:e7:f1:39:4f:42:6a:b7:6c:
5d:e1:43:07:db:eb:98:c3:a4:50:ae:b9:1e:ba:52:
20:81:86:9d:c9:0b:da:90:97:a7:00:23:e0:9e:e8:
4d:4f:ae:85:18:ee:d0:ab:ae:63:f7:24:51:6f:ff:
fe:42:3e:52:28:45:e2:c4:74:f9:00:a2:01:2e:db:
23:51:2f:6f:7f:86:42:8b:29:3b:35:1b:28:f9:8e:
5f:4e:2c:0b:47:a8:f5:ca:a9:9c:fb:06:46:35:0f:
62:37:7e:9a:12:d6:61:22:a5:c7:85:58:7c:36:ad:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:58:AA:5E:A5:16:61:5D:77:0B:D0:B4:45:FF:44:0C:22:CF:F8:E6
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:48:1a:e8:b8:52:05:b3:eb:98:0e:69:38:15:7a:57:06:b1:
5a:0a:0f:ce:8a:f5:db:86:5c:67:a6:fa:25:f0:af:3c:bb:f9:
33:bb:fc:88:6e:c4:e4:0b:9f:8d:40:39:4e:e7:59:d7:ec:af:
a5:df:0e:22:4e:3f:ca:fa:db:4f:4d:a5:89:64:72:f8:b7:47:
c4:17:36:dc:d6:50:74:be:8a:17:2a:8c:4d:f2:cc:07:7b:28:
dc:85:be:31:e8:81:18:44:f7:7e:56:b0:37:16:f6:15:75:6f:
b2:00:2b:4d:4c:29:e1:82:8a:7c:9a:1c:31:15:f0:78:2b:22:
9a:91:c8:94:50:5f:1d:dd:b8:a0:56:ab:f4:97:e8:69:eb:7b:
33:af:bd:0b:b5:f0:a9:cd:48:d4:1e:4e:d2:6e:25:f5:2d:f5:
96:0c:dd:9a:87:03:0c:54:12:bb:41:ab:65:bf:7a:f7:c0:8f:
25:d8:a2:ff:be:d7:96:a4:a7:50:25:d0:dd:46:50:3b:bd:bc:
bf:37:be:c6:96:61:9c:a9:61:c9:0d:ed:5d:3d:08:5a:12:58:
ef:46:c8:b3:ca:c2:ec:37:36:fd:fd:2a:e5:f8:ad:74:79:d5:
9d:60:30:be:e7:61:67:1a:c8:70:8d:92:db:73:01:28:69:63:
9a:7a:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:43:13 2026 by rpki-client