Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: ZlNrqJ1qL0Nq9aboHurd4jMSRKVlV10qBL2mwJug+RY=
Subject key identifier: 06:29:78:1F:4D:C8:5D:F1:06:47:48:8E:FE:DC:E5:02:8E:04:0F:33
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019E1C7DFCD0ECB1E7807035929B01C03308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 11D3
Signing time: Tue 12 May 2026 14:01:19 +0000
Manifest this update: Tue 12 May 2026 14:01:19 +0000
Manifest next update: Wed 13 May 2026 14:01:19 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: XGv4NPyKh3B2QF3meOY/1sqt25rIDxWG9n753mRj9g4=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:fc:d0:ec:b1:e7:80:70:35:92:9b:01:c0:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: May 12 14:01:19 2026 GMT
Not After : May 13 14:01:19 2026 GMT
Subject: CN=0629781f4dc85df10647488efedce5028e040f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:04:7f:16:f3:5a:d2:59:8d:50:95:9b:05:
47:71:44:81:11:34:ea:70:02:f5:5d:ef:c8:ed:48:
8d:de:7a:b8:08:16:c0:20:9f:cd:54:e0:d4:4b:15:
0f:9b:73:e4:71:34:89:42:01:4b:a1:23:dc:71:0d:
11:ba:3b:2a:12:0e:56:73:c0:4b:74:8a:7c:0e:a8:
4a:68:98:da:1a:48:f7:38:0c:40:5c:3c:27:c4:65:
b7:8a:c5:3b:77:fe:72:8a:7e:d3:d7:f4:6c:2b:f1:
b1:cf:94:69:c1:05:d8:22:be:7f:c6:2f:d6:a0:8f:
9e:98:d6:a3:5f:b4:5e:d5:9b:95:78:17:ca:71:9b:
ff:f4:24:f9:62:ab:05:42:d3:88:6d:10:be:3c:e5:
4d:39:9e:79:f1:0f:3f:a4:58:f2:33:58:09:00:01:
79:31:87:db:33:b2:2a:83:a7:82:b4:e2:b8:d4:fc:
27:63:83:06:1f:2c:36:d6:8b:dc:27:53:d5:8a:47:
8e:74:72:6b:b1:43:94:1c:dc:3e:2e:3c:c1:2c:c0:
0b:c1:cc:5b:fd:cd:7a:f5:34:67:b4:83:cb:c8:be:
0b:87:7c:66:a1:cf:ae:e1:10:9c:45:6c:40:de:5f:
35:20:c4:83:98:ca:95:65:0e:78:a6:be:3a:86:5e:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:29:78:1F:4D:C8:5D:F1:06:47:48:8E:FE:DC:E5:02:8E:04:0F:33
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c4:e0:16:8c:c0:58:29:29:ff:28:99:42:6e:1e:f6:6f:c4:
5a:2a:39:37:67:0b:74:45:23:79:d6:2c:fc:bd:33:1a:46:80:
90:05:f6:78:5d:2b:23:80:78:4d:90:97:57:ef:f4:23:c9:f1:
b3:fd:e7:e9:8a:1e:f9:3e:42:1f:25:bd:85:78:df:72:0b:cd:
b4:7e:27:c1:2a:c5:aa:93:c9:e7:3d:09:60:72:5e:e1:2a:1c:
f3:15:60:2d:b4:c1:fe:67:99:57:95:6d:9d:05:c6:8d:e4:c3:
0e:70:74:d0:4a:fe:cd:6d:6c:96:52:1f:ad:ab:bd:f7:5d:92:
20:f2:00:11:f2:ca:b3:2a:ec:a1:68:f9:5a:fa:f0:13:14:9b:
6f:8e:c6:6e:82:dd:4e:cb:c4:fa:70:38:ef:20:65:82:dc:6a:
27:f7:6b:4e:25:f0:6d:ff:10:21:49:ed:37:e9:c7:be:24:8c:
2d:2e:10:c3:98:e7:40:f7:1b:80:c9:d2:b3:3e:91:5c:ad:1e:
0d:af:56:1b:85:f1:a5:0a:8d:62:6c:c8:95:50:8f:6f:a8:9b:
aa:7d:5c:1b:50:19:6f:d7:08:f5:45:50:8f:fc:e4:7b:dc:a5:
13:74:eb:e0:3c:de:29:e4:8d:3e:6b:bf:97:aa:22:00:6c:ca:
2a:a2:5a:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cffzQ7LHngHA1kpsBwDMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3
MTVkYzkwHhcNMjYwNTEyMTQwMTE5WhcNMjYwNTEzMTQwMTE5WjAzMTEwLwYDVQQD
EygwNjI5NzgxZjRkYzg1ZGYxMDY0NzQ4OGVmZWRjZTUwMjhlMDQwZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JUEfxbzWtJZjVCVmwVHcUSBETTq
cAL1Xe/I7UiN3nq4CBbAIJ/NVODUSxUPm3PkcTSJQgFLoSPccQ0RujsqEg5Wc8BL
dIp8DqhKaJjaGkj3OAxAXDwnxGW3isU7d/5yin7T1/RsK/Gxz5RpwQXYIr5/xi/W
oI+emNajX7Re1ZuVeBfKcZv/9CT5YqsFQtOIbRC+POVNOZ558Q8/pFjyM1gJAAF5
MYfbM7Iqg6eCtOK41PwnY4MGHyw21ovcJ1PVikeOdHJrsUOUHNw+LjzBLMALwcxb
/c169TRntIPLyL4Lh3xmoc+u4RCcRWxA3l81IMSDmMqVZQ54pr46hl7bywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYpeB9NyF3xBkdIjv7c5QKOBA8zMB8GA1UdIwQY
MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt
M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh
LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsTgFozA
WCkp/yiZQm4e9m/EWio5N2cLdEUjedYs/L0zGkaAkAX2eF0rI4B4TZCXV+/0I8nx
s/3n6Yoe+T5CHyW9hXjfcgvNtH4nwSrFqpPJ5z0JYHJe4Soc8xVgLbTB/meZV5Vt
nQXGjeTDDnB00Er+zW1sllIfrau9912SIPIAEfLKsyrsoWj5WvrwExSbb47GboLd
TsvE+nA47yBlgtxqJ/drTiXwbf8QIUntN+nHviSMLS4Qw5jnQPcbgMnSsz6RXK0e
Da9WG4XxpQqNYmzIlVCPb6ibqn1cG1AZb9cI9UVQj/zke9ylE3Tr4DzeKeSNPmu/
l6oiAGzKKqJaUA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:34:47 2026 by rpki-client