Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: zwAb2BblzuzQEUUXlt72kFp6LsxS7PPANBKcl5IZ9lQ=
Subject key identifier: EF:98:07:B4:68:98:CD:CD:39:51:AA:58:AF:F0:4E:82:81:5D:1C:20
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 019D28BB290CE84D70C665D40D12671E4A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 029A
Signing time: Thu 26 Mar 2026 06:00:47 +0000
Manifest this update: Thu 26 Mar 2026 06:00:47 +0000
Manifest next update: Fri 27 Mar 2026 06:00:47 +0000
Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: pdOOLm7PWHBQbhYCA7vvh8oDLT31gPkTH3lkQmg7EC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:29:0c:e8:4d:70:c6:65:d4:0d:12:67:1e:4a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Mar 26 06:00:47 2026 GMT
Not After : Mar 27 06:00:47 2026 GMT
Subject: CN=ef9807b46898cdcd3951aa58aff04e82815d1c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:a1:c2:b5:77:45:59:78:04:43:65:c8:3b:
ab:69:e9:29:e3:8c:5c:96:0e:34:1d:f8:da:1f:40:
8f:91:cf:f4:af:ba:43:34:63:81:a8:76:c1:4d:a3:
d7:bf:cf:73:d2:5d:8b:fb:32:11:c4:49:f5:2a:70:
02:da:80:d3:03:0d:be:ae:42:05:62:ca:fe:5a:84:
11:22:28:89:7f:cc:5c:10:e4:db:24:74:b8:1e:38:
bf:09:b4:81:88:9d:39:bf:0f:50:05:96:b9:a1:23:
74:c1:df:49:e6:7c:00:8c:77:47:1b:18:d4:f0:6e:
84:ef:b1:c9:6a:07:96:b9:17:44:88:63:77:71:31:
ec:f3:a4:2d:91:99:d2:98:fe:a7:cd:15:2d:b7:09:
5b:2b:02:91:4e:3f:27:30:6c:df:e6:19:c8:21:55:
d2:56:4e:f4:e5:d4:90:f5:95:13:a5:06:e0:84:d1:
6d:b9:f8:a6:42:11:21:0d:66:c2:92:0e:62:33:f4:
20:8c:2d:42:bd:2a:87:cb:90:51:f8:9b:e3:21:6c:
31:80:4b:fd:55:e6:d9:ef:95:e4:a5:b2:52:26:f6:
67:96:b6:b2:5b:9e:03:89:b8:0a:9c:a3:2e:7e:68:
32:d6:17:2d:6a:f1:85:2e:ab:7f:b6:9b:08:81:ca:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:07:B4:68:98:CD:CD:39:51:AA:58:AF:F0:4E:82:81:5D:1C:20
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:52:b7:0e:b6:f2:79:16:70:f5:76:a1:a5:93:a1:9e:2d:fc:
44:b1:bf:9f:6c:1d:ca:84:0b:d8:dc:e5:31:bc:37:fe:7b:fc:
da:77:15:9d:34:0b:48:08:04:c3:07:cf:28:e3:74:68:a0:38:
70:97:a0:1e:a3:d7:7a:22:81:29:b5:51:e5:ec:23:9a:4e:a1:
43:b3:c9:30:33:af:d7:a2:4a:d7:39:58:a8:ef:ab:b0:f3:00:
ab:38:6d:29:e8:c6:4a:78:6e:d6:74:21:ce:be:df:e6:46:4f:
62:c7:0c:ce:98:67:3e:a8:e2:ee:d9:1d:1b:01:d0:4c:49:90:
70:95:45:82:1d:d8:45:a4:1e:df:6b:c2:f6:a0:45:28:fa:48:
cc:43:76:74:ff:c7:7a:f1:59:85:61:4d:34:a2:11:2a:84:df:
ca:17:93:27:df:7e:b2:9e:8d:1a:7d:97:f7:dd:68:20:c0:48:
e7:d0:d2:4c:e7:c1:ce:fc:1b:ec:bc:04:d2:5e:fb:c2:d6:f9:
41:d7:49:1b:54:67:8e:c5:c8:a6:bd:e9:c2:df:9b:8e:32:2b:
67:01:de:f2:81:1b:6f:f7:c0:f8:35:e4:e4:a6:59:31:6e:6f:
f2:cc:aa:30:a1:96:00:9e:f2:75:6b:12:b7:fc:26:60:b1:f3:
e9:31:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:17 2026 by rpki-client