Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: 1Pa5IOimm42+0VhWAeyR43GtoAADXS53PHTG0XtQx78=
Subject key identifier: DD:B7:2C:28:F6:89:C7:0F:73:90:BF:C3:81:9E:55:D6:8D:C7:47:4C
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 019F92B681D27BFA5B8E5860F9603CD60763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 03DA
Signing time: Fri 24 Jul 2026 06:01:02 +0000
Manifest this update: Fri 24 Jul 2026 06:01:02 +0000
Manifest next update: Sat 25 Jul 2026 06:01:02 +0000
Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: a8YVmT2Y3VponNYlIqwwn8jZY8fm1X/CfBlgnnGM+sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:81:d2:7b:fa:5b:8e:58:60:f9:60:3c:d6:07:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Jul 24 06:01:02 2026 GMT
Not After : Jul 25 06:01:02 2026 GMT
Subject: CN=ddb72c28f689c70f7390bfc3819e55d68dc7474c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:76:fd:39:75:ae:dd:4e:cc:39:9d:19:0d:
96:9b:55:ed:13:37:7a:a1:b0:17:46:41:1d:e4:81:
ed:78:f3:66:8b:0d:f4:f8:e9:89:41:48:e3:c5:18:
9b:8f:b4:f8:5f:c4:0c:c8:51:5c:02:f3:cd:47:d8:
42:41:79:42:67:e9:37:78:9f:31:ae:6f:66:59:ec:
81:26:8c:2f:b8:86:55:dd:1a:17:16:76:0f:52:d4:
b8:54:2c:b0:28:a0:17:8f:ab:45:e3:cd:78:a8:0f:
31:47:d4:a1:40:75:40:c7:33:80:3a:7f:68:1b:b6:
80:11:32:21:cf:5c:46:a7:46:20:7d:84:c9:65:1b:
7c:7f:f0:f5:77:c8:5f:fe:9a:93:21:d7:46:c1:84:
04:9e:41:ec:f8:e8:b1:bc:7e:7c:09:25:eb:7c:5c:
cd:c8:13:82:02:b7:e5:34:26:54:ef:29:f5:54:3f:
c5:44:70:bd:f5:67:6d:eb:5d:52:4a:5d:b0:52:a0:
fb:6d:5e:71:22:f9:a1:0a:e1:b6:e6:3f:6c:2d:19:
71:f5:c8:79:89:6a:98:f5:2b:40:a2:22:be:82:05:
0d:cc:aa:4a:de:e3:e7:0f:7b:d1:9a:36:53:a2:21:
d3:ef:f3:01:b3:71:d0:c9:28:e1:bf:85:a0:27:28:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:2C:28:F6:89:C7:0F:73:90:BF:C3:81:9E:55:D6:8D:C7:47:4C
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2b:bf:bc:89:e7:f4:15:f3:96:a5:8c:6d:78:80:eb:67:3b:
79:eb:01:28:2c:e8:24:97:e4:62:e2:b1:68:7e:9c:ab:f1:0d:
ae:22:2f:a1:f1:17:67:ea:79:52:73:75:17:98:f6:79:77:95:
3a:e9:6a:38:1e:46:1e:ca:76:f1:eb:e4:8a:16:27:7b:5e:8c:
ff:a5:0f:7e:0f:b4:67:96:8e:f6:78:c2:2f:60:9d:52:d0:42:
78:df:5e:20:c8:a1:08:81:26:db:88:a1:53:86:12:ce:c3:aa:
12:04:81:25:e6:cc:bb:2b:d9:95:48:34:51:a5:64:f2:ef:68:
26:bc:58:fe:98:00:a6:3f:b7:ce:0d:2c:10:26:ce:f8:7e:95:
0a:25:9c:b7:26:b8:5c:4a:15:c6:98:aa:16:a8:ed:0e:2f:94:
e0:6b:0d:20:4c:ae:f1:28:40:48:38:7d:08:35:51:e6:a9:0e:
e3:a5:de:c8:26:e7:27:99:02:40:c0:84:5a:fd:b2:ae:68:e8:
99:2c:ad:30:d6:36:8d:06:b1:8c:23:37:0c:12:0d:03:a3:6e:
9c:02:6b:f5:9e:2d:df:b7:04:87:7e:e7:8c:1b:11:d7:df:40:
35:9c:8d:19:76:8d:fb:aa:83:78:6f:8a:74:75:4e:29:9a:11:
ec:ed:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:00 2026 by rpki-client