Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: qu28/OULAiftSzh5DjM16V2QiNiHI0UUxRTTH3pt9F4=
Subject key identifier: 7A:87:F7:3B:5E:FE:60:29:1F:F9:B7:30:4B:E8:0F:90:D9:DC:16:D3
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 01A00326DA5291BE6306040601FFB044F191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1A01
Signing time: Sat 15 Aug 2026 02:01:12 +0000
Manifest this update: Sat 15 Aug 2026 02:01:12 +0000
Manifest next update: Sun 16 Aug 2026 02:01:12 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: DP4s/5Gpeh7PVQXYfCAioe0rWz5lnYAgqXGoe0ZA5KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:da:52:91:be:63:06:04:06:01:ff:b0:44:f1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Aug 15 02:01:12 2026 GMT
Not After : Aug 16 02:01:12 2026 GMT
Subject: CN=7a87f73b5efe60291ff9b7304be80f90d9dc16d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:43:72:37:ff:66:85:64:92:d7:19:9e:54:
14:90:e3:57:2e:1b:85:14:a1:84:03:36:d6:c2:fa:
3b:02:e9:00:ef:75:8e:c4:c8:9f:bf:80:5e:03:92:
79:f5:48:24:47:f9:34:1d:62:55:95:67:40:a8:fb:
71:9d:84:cb:38:d2:57:15:28:19:3a:5a:76:3c:6d:
3d:c0:d8:be:26:42:16:2f:c8:78:88:8a:bf:83:ab:
36:cc:ac:32:85:4d:71:0f:20:86:00:cd:d6:c2:5c:
7f:61:b9:2b:6f:5b:c4:9b:7b:4e:5f:a7:80:8b:35:
1a:e8:ea:c8:70:b9:c3:9c:45:31:c6:1c:05:0b:ba:
68:36:ec:f7:91:2b:9b:ba:85:93:3c:5e:ea:37:23:
1d:7e:46:d9:a9:0c:7e:87:97:44:42:98:24:6a:e9:
9e:e8:12:9a:50:5f:08:f8:b6:e5:39:f2:b9:cb:f6:
b7:9c:bd:a6:65:25:b6:11:03:44:f6:36:01:ba:f0:
01:09:e4:5e:8e:5c:36:42:39:ac:64:7b:79:36:5b:
f4:50:6e:5b:a9:f3:f3:45:07:ab:9c:bf:05:ab:96:
79:40:89:de:08:b2:78:b4:e5:86:03:80:37:9d:c5:
df:0b:0e:77:e8:72:05:ae:8d:17:6b:1f:5a:ee:28:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:F7:3B:5E:FE:60:29:1F:F9:B7:30:4B:E8:0F:90:D9:DC:16:D3
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d4:b7:b8:3b:98:40:fd:1e:31:64:4f:c6:6f:96:17:8b:cd:
d6:1e:5c:56:c5:18:54:5d:fe:1b:ba:44:02:18:3f:6c:3e:2d:
5e:f0:7e:d8:9c:f5:cf:cc:de:b9:0c:35:ae:fa:31:85:d7:93:
b3:41:50:c0:2b:a1:2d:24:b8:7c:ee:e2:fb:c7:01:60:ab:50:
24:aa:8c:0d:59:b1:bf:de:5d:70:c5:9b:8b:60:7b:b4:3d:e9:
48:67:ca:23:67:f8:35:1b:47:55:42:fd:51:d4:86:3e:53:8e:
5a:db:ef:49:4f:08:75:a8:a7:20:dd:0f:9a:f0:29:d4:ab:85:
de:6d:6b:3b:4d:24:d9:1e:d9:55:5e:99:ba:2b:04:1b:84:74:
f5:e0:02:e9:0e:2e:1f:e9:7d:af:a7:8e:a7:9d:90:2d:16:4d:
f3:af:c4:17:51:be:ac:85:fc:73:1f:1e:5b:a8:55:11:ac:99:
4c:45:e2:cc:34:3f:33:ea:49:6f:f5:c3:74:7c:1e:25:6a:45:
51:d5:9a:b7:d5:b5:5d:f9:18:03:20:e6:d2:2c:cf:4c:53:42:
43:6e:43:f6:68:d9:55:e1:72:a7:81:d6:cd:bb:6e:a8:d6:bc:
27:fa:43:5a:fd:c1:31:87:9e:f1:da:cc:27:a6:26:a3:be:dd:
58:24:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:29 2026 by rpki-client