Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: NT0hGMumjrotRYErduxXMTC9d1ippjNg7mHx0gi0O+k=
Subject key identifier: 08:DD:28:4C:94:9A:25:00:A5:6E:68:F8:73:C8:49:92:8F:2A:93:A0
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019D273B03D0ECE0890BA6CD3AA974B002C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 1154
Signing time: Wed 25 Mar 2026 23:01:12 +0000
Manifest this update: Wed 25 Mar 2026 23:01:12 +0000
Manifest next update: Thu 26 Mar 2026 23:01:12 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: KRqjw6cFY8XxdC5mlwGMPPEVc/W2kndEPtywuplS3Pg=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:03:d0:ec:e0:89:0b:a6:cd:3a:a9:74:b0:02:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Mar 25 23:01:12 2026 GMT
Not After : Mar 26 23:01:12 2026 GMT
Subject: CN=08dd284c949a2500a56e68f873c849928f2a93a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:96:47:50:1c:01:09:59:be:04:fd:ac:8b:
c7:16:dd:77:c2:eb:00:20:f0:33:0b:82:48:74:58:
8b:37:99:68:ed:fb:80:53:83:8a:9e:82:94:ae:24:
95:bc:81:9d:c7:0f:31:7b:08:12:39:27:56:09:e7:
e1:e0:f8:b8:0a:59:78:9a:92:dd:a6:f1:ca:53:8c:
5b:86:00:0e:80:ff:21:55:21:5c:cf:1d:37:2f:f2:
9f:c0:a4:73:9f:ea:df:16:79:20:49:23:6f:f2:8b:
0c:34:00:21:e2:b8:5f:c3:41:84:f1:00:d1:26:ca:
dc:f6:cc:9b:dd:a6:7a:cf:0e:61:2e:c4:66:cc:d7:
50:66:95:e9:78:b5:b1:0d:5e:18:52:c2:f4:19:00:
ce:fb:11:d4:02:ca:4c:7a:ec:fd:c2:be:d7:bb:9b:
ed:eb:09:8a:81:80:63:59:c1:87:44:ea:d9:c3:a7:
c0:28:88:fd:92:f5:9e:ef:e0:4b:44:93:64:42:3a:
bb:30:0f:e7:04:71:10:34:be:a5:bc:6a:d0:eb:75:
65:72:4b:fe:27:f9:3d:48:22:f2:98:97:64:22:f5:
11:08:e9:ff:a5:d9:ae:72:da:d9:bc:67:b3:12:b3:
37:b4:97:5d:bd:b0:37:38:2e:e2:c2:5f:c1:c0:f6:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:28:4C:94:9A:25:00:A5:6E:68:F8:73:C8:49:92:8F:2A:93:A0
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:7a:a2:a1:1c:67:fd:c5:06:0e:71:3b:c6:5b:59:27:bb:
a1:19:e1:c1:bd:4d:ec:0f:52:f6:6d:e5:33:23:62:17:7d:04:
63:47:94:43:da:7a:29:2a:90:ed:2d:45:da:6c:88:21:b0:39:
c5:2b:53:4e:46:45:9b:a3:7c:c6:b7:aa:8c:4a:cb:a0:c8:1d:
09:67:62:1c:1e:0c:6a:da:38:89:f3:4e:12:c6:30:9d:69:2a:
0f:87:bd:25:c3:1f:a9:6d:7d:51:e3:eb:24:31:9f:02:5d:36:
b3:a2:a0:88:57:be:51:9a:0b:d6:97:64:c3:0d:ff:3f:45:44:
b9:71:12:95:51:57:79:12:de:0d:9b:cb:dd:24:e5:7c:0e:8b:
b9:1a:95:41:89:e6:75:6d:df:cb:91:ed:22:53:f6:30:b2:99:
dc:57:3e:c3:55:4e:53:68:dc:47:45:98:6a:1b:c6:e3:d1:f0:
22:0c:38:96:09:ae:61:a1:6d:56:40:53:f2:d5:12:18:79:db:
bf:13:ea:91:87:43:e6:50:80:3f:83:b5:90:af:9f:36:8f:1c:
13:40:1d:a7:ca:35:b5:45:3e:39:30:e1:8a:7c:bd:da:26:e6:
f1:7f:46:32:48:e2:93:71:63:f1:ef:a2:35:51:8a:fc:44:04:
bb:0e:21:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:25 2026 by rpki-client