Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: JuQEa1/+41Ty8vPBrYH6pNvzRdkYrCRfSHb2h83DZ8g=
Subject key identifier: FF:A8:2C:EC:6C:A5:89:CB:B7:E7:85:76:40:05:BA:83:BC:BA:BD:D4
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 019D2816652A0F15FEFE62116B7C62AF7C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1480
Signing time: Thu 26 Mar 2026 03:00:49 +0000
Manifest this update: Thu 26 Mar 2026 03:00:49 +0000
Manifest next update: Fri 27 Mar 2026 03:00:49 +0000
Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: ASOWChrs2l2LwbC6dRQIpdFLeNx1M16kabWGNXz6rpo=)
2: aHNCfZJ-9wQZxvNMw3DS1H21hCo.roa (hash: 2DGefUYW6AHzEy+ZIacwyGwUVxEFyzaT1n0vrc2KxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:65:2a:0f:15:fe:fe:62:11:6b:7c:62:af:7c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Mar 26 03:00:49 2026 GMT
Not After : Mar 27 03:00:49 2026 GMT
Subject: CN=ffa82cec6ca589cbb7e785764005ba83bcbabdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:54:0d:67:ff:7a:b1:b5:88:9b:c6:f4:07:
f7:00:81:4e:80:43:70:98:7a:91:47:2a:d2:35:0a:
58:32:9b:b9:8c:8e:0d:c8:de:a9:3a:d4:95:55:45:
8c:da:0d:3a:c8:fb:0b:bd:a8:e6:c9:1a:77:e9:e7:
77:49:b0:41:43:16:d8:18:a0:f7:ac:ff:aa:51:67:
de:1b:c1:72:ba:69:c7:ee:a7:a7:d4:be:0f:de:ee:
6c:c7:98:af:dd:5b:89:c9:b6:df:28:a6:ca:9c:07:
1f:84:73:e9:53:88:82:1b:35:ee:a7:c8:72:fa:11:
d8:51:10:d3:18:16:36:f7:cc:97:52:d8:10:4a:24:
4f:0d:b9:c4:69:30:56:b9:ef:e7:0f:ca:c1:55:a5:
77:40:0f:0c:74:a8:45:a7:d5:db:da:e7:b7:59:03:
23:28:ab:d3:68:eb:d7:25:2e:5d:83:1d:e5:43:88:
16:30:19:e4:e1:00:93:10:b6:24:c3:aa:55:3b:43:
27:f2:69:f7:97:9c:cc:0f:a4:8a:08:09:4c:5f:e3:
c7:c9:54:2e:39:31:3a:71:85:72:86:ce:08:f2:9b:
34:01:d3:9a:39:88:7d:88:07:4b:03:ba:8d:af:a1:
cd:e8:e3:eb:4f:24:bc:84:a3:93:64:e5:71:78:b0:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:2C:EC:6C:A5:89:CB:B7:E7:85:76:40:05:BA:83:BC:BA:BD:D4
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:07:f4:f3:61:22:3f:3d:3a:03:1d:d0:de:08:38:5c:7a:cb:
31:b1:82:ae:e9:a1:e0:84:a5:10:bf:64:30:61:e0:81:fa:da:
2b:15:17:42:85:29:3f:ac:4c:77:59:88:31:3e:ed:2a:15:ad:
4c:30:78:76:69:46:ce:56:64:15:f6:4e:cb:2d:51:b4:60:ff:
c3:6a:b1:97:29:3c:bc:06:b6:a8:c1:2e:98:87:71:f7:6a:f3:
01:06:89:f1:4c:93:44:db:72:04:3b:a6:f7:d1:a6:df:05:71:
90:23:99:0d:6a:91:c3:ce:5e:d0:01:5d:a4:f1:e7:1b:93:82:
e3:f3:8b:4d:58:26:3e:e3:95:d2:a4:56:3e:b5:bf:85:95:09:
f7:71:b0:64:20:07:74:d7:5c:a8:c8:cc:e5:4d:57:a1:25:01:
bc:0c:c9:41:af:40:11:0d:ee:71:e8:27:30:82:cb:9e:e6:82:
c4:bd:b3:3b:d5:3e:a9:38:05:d4:90:10:3a:79:5f:b4:18:81:
90:67:65:e1:aa:c3:1f:16:70:68:2d:d0:ed:dd:43:b4:f9:a0:
4d:00:18:23:87:c3:c5:8a:8b:90:ad:85:f7:07:d2:72:4b:ad:
e7:11:c6:a5:51:48:82:e9:18:01:27:d3:8b:18:28:0b:01:91:
20:3a:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:03 2026 by rpki-client