Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: uqRTo3Nlz+TK951DpInOZJ9EIEjtsOS+vrVU9wj5C8A=
Subject key identifier: 22:C3:D8:64:78:17:2E:65:A0:74:A5:D2:BB:AA:A6:DF:C3:F7:B2:8B
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 019E1FEC6BC53277E70827591236A5425F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 031A
Signing time: Wed 13 May 2026 06:00:48 +0000
Manifest this update: Wed 13 May 2026 06:00:48 +0000
Manifest next update: Thu 14 May 2026 06:00:48 +0000
Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: AZYv0d2NYR5FsLbVYo0bhCAty2xZNq2izC/hapNcvyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:6b:c5:32:77:e7:08:27:59:12:36:a5:42:5f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: May 13 06:00:48 2026 GMT
Not After : May 14 06:00:48 2026 GMT
Subject: CN=22c3d86478172e65a074a5d2bbaaa6dfc3f7b28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:f0:97:cc:ca:89:94:ca:39:f3:58:cd:53:
67:b3:cd:b5:86:5c:49:6c:a4:40:6d:4f:1a:88:2e:
14:3b:46:3c:18:57:e9:cb:00:a7:78:30:68:ab:2b:
c8:d0:b4:59:a8:76:c7:f7:50:f5:0d:39:f4:a3:3d:
80:86:a9:80:aa:65:8d:8b:46:d2:70:6b:23:e0:ca:
38:a2:a5:11:10:4f:c2:4d:10:99:fb:94:2f:88:2f:
4e:19:e5:1c:c2:56:4f:ca:3a:6b:3c:d6:fb:5c:15:
32:f4:5b:ce:c5:ec:de:0b:98:f7:c8:65:06:3c:fe:
89:ed:7c:ec:46:58:61:fc:05:fc:e3:06:17:be:d4:
47:8d:1d:9e:0b:4a:b8:9b:43:f5:ad:c8:9d:9e:48:
ad:da:75:91:82:08:ab:2e:34:3e:93:87:31:f9:a8:
42:a3:ff:26:d4:9e:73:2b:66:05:f7:29:15:86:28:
cf:82:a8:91:4a:26:0d:0d:67:1f:4b:78:d6:e8:71:
8f:a0:53:f6:42:f1:55:2e:c3:15:2d:fd:88:d4:be:
5b:f9:13:3c:16:f5:9a:ff:55:c3:84:ed:b6:4d:06:
73:60:d7:29:03:29:bd:2f:49:d6:4a:62:46:1a:3f:
2e:9d:86:68:80:5e:8c:7d:aa:08:26:47:31:2f:c5:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:D8:64:78:17:2E:65:A0:74:A5:D2:BB:AA:A6:DF:C3:F7:B2:8B
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:01:25:85:0d:38:aa:e7:05:93:8c:72:eb:5d:8c:e5:ae:af:
76:37:11:4f:ff:5c:97:11:52:a0:46:35:42:52:21:94:d4:29:
d7:ae:59:a3:92:43:8b:06:05:b3:d6:ad:37:f8:d4:84:b5:b9:
38:40:6e:3d:7e:14:5a:0c:88:09:a8:ae:10:28:e2:1c:3e:a4:
6f:03:fc:7d:9a:38:19:ee:ef:48:f6:9f:d3:c1:65:9a:76:ca:
a6:a8:b5:a2:b5:ab:da:43:40:e4:f9:43:16:24:91:0e:de:1f:
9c:49:d5:cc:e1:5c:b7:aa:ef:83:32:19:2b:af:04:0c:ca:3e:
52:d8:03:0e:9e:bd:eb:3d:e2:b6:6a:6f:78:9a:98:5b:38:96:
43:6c:db:f8:eb:a8:e6:bf:ef:21:6d:2d:91:87:f5:09:2d:44:
b2:eb:9c:b7:5d:e6:84:e1:b0:b9:7a:c0:ee:eb:55:2f:cb:05:
f1:f4:d2:9b:2c:0b:bf:81:b0:14:26:ac:95:5f:6d:d7:15:af:
71:b4:7e:12:2d:9a:08:98:ac:e0:67:97:18:c3:d1:27:51:dd:
ed:c5:e6:a2:07:d5:17:33:11:c7:32:da:a7:1e:cb:5c:8a:0a:
98:00:ab:8a:e3:a1:47:f5:3e:98:4d:8d:ca:3e:1a:4a:69:07:
e7:a8:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:22:39 2026 by rpki-client