Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: xGEgfvg1dJgDSWkcFqsYFiGd1RiOFGTKpwEr5FzyMt0=
Subject key identifier: A6:04:DF:75:EE:B4:A7:1E:15:20:44:10:78:FF:1D:AF:00:FD:9D:6A
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 019D38666BCFA9D0356705EB57198EF8F043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0EE4
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: uX2uYpnBG91Y0Cye/0kV9LMHDJ4qoWEXdrjGBX8ALwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6b:cf:a9:d0:35:67:05:eb:57:19:8e:f8:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=a604df75eeb4a71e1520441078ff1daf00fd9d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:ea:07:b3:fe:1d:57:94:f2:31:54:32:7f:
9a:c0:49:94:f3:78:5b:9a:81:d9:ba:59:94:12:f6:
8d:69:0f:dc:91:ba:fa:58:f2:0c:fc:54:d5:7d:cf:
26:7c:9c:f2:b2:4c:4f:a9:f2:8c:1b:1a:cd:bd:70:
25:93:e1:7a:b8:1f:3f:87:58:c5:7b:88:43:45:c4:
16:eb:26:2a:82:e3:b0:d5:37:ac:5d:d0:2e:c8:19:
97:6e:68:26:78:b0:d4:2c:39:cc:2b:a7:51:35:57:
f6:53:ef:65:23:64:97:aa:bb:24:28:de:88:cc:82:
24:1d:22:a8:d9:80:cc:4f:f1:d1:83:29:96:5f:ad:
6f:93:5b:08:ea:31:68:d8:02:c5:43:bd:07:83:90:
ed:08:9e:9d:b3:55:be:b0:55:41:70:12:67:69:72:
bb:28:e4:e8:a4:33:9f:2f:9a:96:bb:07:fc:1d:da:
43:ce:38:48:fc:9e:a8:a8:0f:de:d5:50:71:d7:b4:
8d:29:45:04:f8:86:03:1e:5e:f9:ed:e2:8b:da:ca:
37:2a:97:d4:45:59:0e:08:1e:27:dc:99:d1:11:58:
f2:5c:11:8f:28:66:68:ac:34:9d:e0:36:98:8f:b2:
2d:0e:b8:64:41:33:99:b0:ea:16:43:b9:79:8d:2c:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:04:DF:75:EE:B4:A7:1E:15:20:44:10:78:FF:1D:AF:00:FD:9D:6A
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d3:17:54:8e:63:ee:b1:2b:1f:31:63:11:6e:d1:0c:74:76:
41:07:92:b5:2f:d2:af:5c:20:56:68:63:c9:cc:74:da:98:5f:
c4:78:bf:65:d2:17:f0:4a:43:e7:27:e3:0b:8e:2b:7f:b4:14:
a4:81:f5:9a:88:76:41:87:2d:ed:84:19:74:40:0b:2a:cc:f1:
61:f9:09:b7:c8:22:e3:dd:38:da:52:b0:a4:b0:ad:37:31:86:
64:97:66:a2:f4:75:29:a8:a3:4d:39:97:51:ec:33:9a:0b:28:
35:a7:28:aa:aa:5b:d9:a0:ac:da:71:fd:07:82:27:e2:02:6b:
48:8f:e2:d3:4d:4a:fd:8a:ac:67:0a:6d:c6:32:e6:c5:d5:8f:
5c:5a:2d:7d:bc:cd:85:1f:9b:b7:a1:a2:ae:92:e6:c0:3f:12:
51:c2:df:bc:a4:72:1d:bb:cb:0a:ea:6e:fe:c2:37:b9:f3:2d:
df:a0:db:86:b7:28:e0:25:3d:68:6e:6c:80:70:0b:03:7b:df:
2d:59:9a:01:e9:92:30:3a:06:af:e2:e2:14:d4:84:a0:1d:6c:
64:4f:81:c0:d6:07:5c:92:63:f0:25:c2:42:f5:75:a5:6d:bd:
58:2b:5f:57:e6:df:39:e9:f2:0d:79:22:30:7e:e9:09:aa:4a:
fa:ab:a2:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZmvPqdA1ZwXrVxmO+PBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj
MTc2M2IwHhcNMjYwMzI5MDcwMjA5WhcNMjYwMzMwMDcwMjA5WjAzMTEwLwYDVQQD
EyhhNjA0ZGY3NWVlYjRhNzFlMTUyMDQ0MTA3OGZmMWRhZjAwZmQ5ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodzqB7P+HVeU8jFUMn+awEmU83hb
moHZulmUEvaNaQ/ckbr6WPIM/FTVfc8mfJzyskxPqfKMGxrNvXAlk+F6uB8/h1jF
e4hDRcQW6yYqguOw1TesXdAuyBmXbmgmeLDULDnMK6dRNVf2U+9lI2SXqrskKN6I
zIIkHSKo2YDMT/HRgymWX61vk1sI6jFo2ALFQ70Hg5DtCJ6ds1W+sFVBcBJnaXK7
KOTopDOfL5qWuwf8HdpDzjhI/J6oqA/e1VBx17SNKUUE+IYDHl757eKL2so3KpfU
RVkOCB4n3JnREVjyXBGPKGZorDSd4DaYj7ItDrhkQTOZsOoWQ7l5jSyOGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYE33XutKceFSBEEHj/Ha8A/Z1qMB8GA1UdIwQY
MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt
ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0
LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdMXVI5j
7rErHzFjEW7RDHR2QQeStS/Sr1wgVmhjycx02phfxHi/ZdIX8EpD5yfjC44rf7QU
pIH1moh2QYct7YQZdEALKszxYfkJt8gi49042lKwpLCtNzGGZJdmovR1KaijTTmX
UewzmgsoNacoqqpb2aCs2nH9B4In4gJrSI/i001K/YqsZwptxjLmxdWPXFotfbzN
hR+bt6GirpLmwD8SUcLfvKRyHbvLCupu/sI3ufMt36Dbhrco4CU9aG5sgHALA3vf
LVmaAemSMDoGr+LiFNSEoB1sZE+BwNYHXJJj8CXCQvV1pW29WCtfV+bfOenyDXki
MH7pCapK+quidg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:08 2026 by rpki-client