Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: R+CKznHLXjrFd0YYs1A/ulHdzu1izGE9T66EK0UU8Jc=
Subject key identifier: 54:06:50:A4:B7:4D:90:0B:7D:F5:B7:8B:9D:A4:40:CA:6C:BF:94:69
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 019E1F47B1A527A5671578A4D1FE6896B355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1500
Signing time: Wed 13 May 2026 03:00:52 +0000
Manifest this update: Wed 13 May 2026 03:00:52 +0000
Manifest next update: Thu 14 May 2026 03:00:52 +0000
Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: iCpfwMdUDNiajOOkuZgwzr51Djz7n3qgDLdY2112fFI=)
2: aHNCfZJ-9wQZxvNMw3DS1H21hCo.roa (hash: 2DGefUYW6AHzEy+ZIacwyGwUVxEFyzaT1n0vrc2KxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:b1:a5:27:a5:67:15:78:a4:d1:fe:68:96:b3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: May 13 03:00:52 2026 GMT
Not After : May 14 03:00:52 2026 GMT
Subject: CN=540650a4b74d900b7df5b78b9da440ca6cbf9469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:e6:1a:8f:de:40:0a:49:bc:70:7b:1e:02:
96:9a:49:1f:fc:1d:cd:97:e8:40:db:e3:11:dc:b0:
e2:b1:7b:5e:47:47:04:0f:80:11:14:c5:70:f9:d8:
2c:26:0c:29:c8:ca:6a:84:c7:1e:3a:da:53:31:7e:
78:ae:c9:3f:c6:ac:6a:ca:6b:10:92:a8:aa:ef:18:
af:04:5e:29:fe:a1:9c:4d:67:96:da:9b:71:e5:88:
02:47:6a:6b:2f:af:7f:a8:1f:75:3f:ce:7f:2c:fc:
8b:c1:2f:ff:7e:43:6b:86:1e:9d:f9:66:f4:ac:26:
f0:3a:3d:9a:69:1f:12:59:db:7c:33:e2:7f:0f:70:
25:dc:e2:1f:ab:19:ed:d4:f8:08:2f:f6:df:c0:ab:
7e:2c:3e:4f:6c:b3:98:e9:56:d8:42:62:7c:b8:3a:
cb:b9:bd:58:3c:e3:09:87:fc:f6:61:e4:ee:67:f1:
81:6a:d7:3e:fe:89:8e:24:2a:b5:0f:f5:87:da:6d:
02:b8:19:20:5c:20:20:ff:71:dd:cb:6d:e0:db:15:
7a:cb:92:7e:23:53:f7:b0:06:8b:7a:21:84:25:d7:
8c:34:ca:46:6c:8a:73:66:08:f2:0b:31:ba:09:84:
20:a1:d9:ad:dd:79:45:c6:54:df:55:c0:40:e7:36:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:50:A4:B7:4D:90:0B:7D:F5:B7:8B:9D:A4:40:CA:6C:BF:94:69
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:11:25:b2:19:79:78:a2:cc:b4:bc:40:cc:5f:4a:6f:1d:c6:
4b:d9:99:3a:b6:2a:09:01:a3:05:e3:c7:c6:a6:bb:ad:05:35:
d1:9a:76:2d:0f:28:23:3b:45:4a:d3:ed:4c:c0:51:8a:32:5a:
01:b4:03:a3:b2:14:18:8d:10:0a:f1:1d:e0:d6:10:7f:f4:bd:
bf:e5:c1:65:ef:b6:55:a0:5b:42:ea:ad:13:96:0b:f6:27:48:
f5:a6:8f:99:f5:dd:ac:bd:c3:e5:36:ad:2b:5a:4a:dc:62:bd:
e2:03:1b:01:90:d1:b1:b1:f1:28:4a:56:cc:de:70:9e:5e:73:
53:12:76:e3:e4:6e:70:03:38:9a:8d:d6:d1:8c:2f:be:6e:22:
9c:5f:f1:57:3d:bf:6f:b5:ef:2f:a7:f1:cc:7c:aa:c1:cc:5e:
bc:71:af:15:ee:75:82:99:b5:14:58:dd:86:a6:d1:db:2d:bb:
0c:a7:ee:b0:60:21:2e:ba:93:e2:0f:e2:96:ca:2b:1b:1a:60:
d2:32:c7:8c:e4:5d:25:d2:5f:95:3c:b8:00:5f:a3:86:cc:e7:
6c:43:52:04:4a:c9:ac:64:f4:17:cb:bb:10:d6:d7:91:69:17:
ef:a3:ba:52:21:fc:0a:28:5a:79:93:f1:e6:4b:10:67:84:de:
c0:f4:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:41:44 2026 by rpki-client