Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: YO0abFMX1aXQrmJybTqnYcVO+VAQR59bxp/N7zBG/Hk=
Subject key identifier: D4:08:EF:BA:4F:D7:2E:26:06:FB:04:D2:8D:C8:B0:64:33:06:F1:E8
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 01A115609BA462BB2B3ADBC091F14248ACC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1A8F
Signing time: Wed 07 Oct 2026 08:00:15 +0000
Manifest this update: Wed 07 Oct 2026 08:00:15 +0000
Manifest next update: Thu 08 Oct 2026 08:00:15 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: GJ8jA8Hx2VrJHwzWD/vwvItTILGAXBqbxAe98zCTjUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:60:9b:a4:62:bb:2b:3a:db:c0:91:f1:42:48:ac:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Oct 7 08:00:15 2026 GMT
Not After : Oct 8 08:00:15 2026 GMT
Subject: CN=d408efba4fd72e2606fb04d28dc8b0643306f1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:d4:01:92:d6:92:d3:a5:e7:6b:51:8a:6e:
ab:50:0f:ac:08:08:33:63:88:76:07:28:6e:d5:8f:
68:a2:c5:74:e6:c7:65:d1:d9:60:ff:08:b1:c1:5f:
88:26:ef:ee:4a:d6:db:16:b9:b3:70:4f:73:60:7b:
fa:f7:5b:8d:72:e3:20:26:c7:39:38:a5:fb:4a:7b:
18:df:39:47:ce:0d:4c:74:1c:46:9b:9c:ca:bd:7d:
f7:84:65:74:aa:47:49:43:41:95:89:f4:6c:70:64:
29:ec:56:3d:96:9e:b4:53:32:94:58:9b:08:ae:0c:
0c:c7:56:8e:7e:41:71:62:41:c4:de:93:6e:7c:04:
e0:41:5a:0a:77:b4:2e:f8:34:80:2c:e2:c4:1e:aa:
ec:57:de:e7:d3:68:a2:aa:ec:6b:b5:e8:3c:24:1f:
2b:33:de:dd:fd:fb:68:07:92:ca:31:a0:e1:47:07:
84:66:62:b6:29:88:15:17:b9:2e:73:41:8f:8d:f8:
cf:73:59:7a:d6:29:18:85:1b:3f:10:02:9e:14:ad:
4c:4c:0b:b4:40:c6:0c:7b:29:82:53:74:9e:09:7e:
26:54:78:2e:14:c0:b3:87:07:af:eb:19:14:ed:51:
1f:0f:e3:35:78:b2:c0:23:48:24:30:02:03:5b:bc:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:EF:BA:4F:D7:2E:26:06:FB:04:D2:8D:C8:B0:64:33:06:F1:E8
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:aa:b2:16:a6:72:9e:98:c7:b1:cf:1b:8b:d4:da:94:cf:c8:
94:50:07:75:58:06:be:ed:99:56:7e:68:be:5c:7a:bf:7b:11:
2a:90:e6:82:6d:cf:38:89:81:d6:02:c9:ff:74:01:f8:5d:13:
29:ab:ba:ef:5d:d0:59:d0:9f:5a:39:5c:db:19:4d:d5:f0:15:
31:24:6d:c2:00:43:cb:40:4e:ab:cb:2d:9d:3c:04:7f:13:52:
32:22:b9:9c:e8:54:89:02:db:4e:78:f3:14:5c:d9:db:b9:50:
6b:28:7b:e3:9e:d0:1f:8c:e5:2b:f6:82:7b:12:2b:8c:d0:97:
48:28:4e:ea:7b:37:37:50:29:69:75:9d:3f:e3:20:e6:5b:d0:
4e:33:cd:5d:9e:13:a3:5e:1c:80:89:2e:48:50:96:3a:dd:29:
a2:62:fd:99:80:0a:91:bb:d7:3d:2c:24:fa:f3:22:e1:0a:f7:
3a:f8:04:19:76:52:5e:79:54:e8:47:e2:87:fe:66:e0:c0:be:
41:46:f5:bb:35:99:ed:17:fd:f3:e3:4f:bd:cb:8a:64:fe:7e:
13:ef:12:d7:95:9c:ba:b9:12:35:a6:de:82:23:3c:81:22:d5:
f0:e1:26:12:18:72:26:b3:65:7e:f7:72:5e:39:a6:27:d5:23:
f2:6b:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 16:05:34 2026 by rpki-client