Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: nNSfURc9op9G0uQtpp127PsffmsSxYuKplqT3hDCC9k=
Subject key identifier: 98:60:29:10:F6:7B:D1:81:21:E5:50:77:B3:7B:A3:16:D1:A2:94:D7
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 01A12A31B9DC970AFF4F3AB608AA0A71DAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 04AD
Signing time: Sun 11 Oct 2026 09:01:04 +0000
Manifest this update: Sun 11 Oct 2026 09:01:04 +0000
Manifest next update: Mon 12 Oct 2026 09:01:04 +0000
Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: KKiWwAG5D8XqsXCgz1Zfgqyu6asks3F4JNVJvlkTkBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:b9:dc:97:0a:ff:4f:3a:b6:08:aa:0a:71:da:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Oct 11 09:01:04 2026 GMT
Not After : Oct 12 09:01:04 2026 GMT
Subject: CN=98602910f67bd18121e55077b37ba316d1a294d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:ad:c7:9f:40:e9:49:59:d7:52:f3:da:4a:
e3:76:2b:40:cf:93:f1:02:69:cf:1e:c3:5d:20:59:
13:8c:b2:f9:dc:18:d0:e3:93:68:0c:32:0c:0b:7e:
56:ab:79:97:56:a8:d1:cc:69:18:d4:6c:de:5f:46:
5e:9b:2e:74:26:5a:8b:03:0f:35:95:f1:89:e8:15:
cc:cd:4f:39:52:87:17:b5:67:f1:64:18:9a:26:73:
d0:6b:c7:64:2b:cc:74:43:53:22:1f:60:9f:97:e7:
12:71:b1:3c:91:7c:56:1f:69:ce:3a:67:2b:6c:d1:
a9:20:b5:07:2f:b0:1e:55:bb:91:68:25:53:76:6c:
b5:99:e8:b6:60:b7:ab:05:20:8f:a3:a1:01:a7:8a:
07:0b:36:2f:50:18:85:bd:76:92:b0:af:1b:76:02:
5d:b7:cb:60:76:0f:0a:6f:17:2d:c2:ff:63:7f:0b:
f3:b8:78:50:49:9b:e0:39:6f:92:f7:f6:fb:a2:5c:
66:b5:77:ba:f5:8d:41:30:d0:e7:d2:a7:66:eb:5d:
0e:1a:33:d2:40:b9:8a:a4:c2:f8:a5:ce:a7:61:05:
8e:24:68:2c:1f:01:37:e3:7f:6a:4c:de:30:88:3f:
7c:4f:bc:7c:6d:09:ba:23:49:ed:c5:fb:0c:40:93:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:29:10:F6:7B:D1:81:21:E5:50:77:B3:7B:A3:16:D1:A2:94:D7
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5c:d7:66:f5:09:d8:3f:9e:f8:a5:99:bf:0f:b4:88:70:d8:
35:8a:74:7d:97:b8:ae:98:d4:25:ab:26:c1:a6:ba:16:bc:69:
d7:b4:0e:ff:88:2e:c2:af:2a:cb:23:b2:c6:34:3d:3e:b4:1c:
64:f5:3e:9b:dd:05:19:e9:e5:cc:96:08:3c:b1:84:a9:b1:8a:
2d:a6:00:0d:ea:27:a8:80:8f:d0:bb:16:b5:c8:65:14:22:1f:
91:ea:73:ff:da:42:90:d4:9d:30:d8:68:b4:eb:a7:cd:27:64:
b2:55:c9:8c:3d:83:0b:9a:76:b6:80:8d:cd:d9:24:a5:2c:2d:
dc:30:12:4c:d5:02:d8:1a:98:10:c9:5e:ce:e9:f4:a9:c3:f7:
b8:10:65:15:fe:0f:09:0f:27:15:81:2e:7e:9f:57:32:01:23:
bd:2a:d2:da:30:5e:4f:d3:66:a9:dd:21:d4:de:9f:55:6d:de:
c8:10:64:1c:dc:6d:f9:63:98:0e:d9:6a:91:67:fd:d8:82:1c:
b3:63:f3:7b:f8:9e:7c:43:b3:2c:d6:87:14:9e:ed:b9:13:8e:
77:e5:02:f7:12:cd:68:69:d6:5c:52:8d:1e:6f:11:5b:5e:01:
72:12:48:c0:d4:82:10:97:9d:67:5a:9a:9f:a1:0a:7d:7f:4f:
57:8f:69:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:26:57 2026 by rpki-client