Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: MV6aHRkvmWw3EpnMQWF65ErPjkspUEYHzBgd+q5kJ34=
Subject key identifier: B1:3C:DD:94:36:6A:08:B6:E6:CC:2D:D1:03:BB:A3:5E:EC:EF:B5:B8
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 01A0D5A69A3F837B081FA212372F39886828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 133C
Signing time: Thu 24 Sep 2026 23:01:00 +0000
Manifest this update: Thu 24 Sep 2026 23:01:00 +0000
Manifest next update: Fri 25 Sep 2026 23:01:00 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: AMmP5cv36stinW0lGthsBAgHqF5+VyBuQAEhe5BnqPQ=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:9a:3f:83:7b:08:1f:a2:12:37:2f:39:88:68:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Sep 24 23:01:00 2026 GMT
Not After : Sep 25 23:01:00 2026 GMT
Subject: CN=b13cdd94366a08b6e6cc2dd103bba35eecefb5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:43:66:aa:09:18:5d:17:cd:af:47:b4:3a:
66:57:ad:47:64:71:3b:e4:5e:f0:e4:f8:0e:c6:d0:
9a:8b:aa:72:b9:e7:a3:45:80:90:48:43:40:8f:cb:
48:f1:96:6b:a9:5a:a4:be:15:94:f5:cc:e3:a0:9d:
cd:b6:f9:fd:0e:57:f9:d0:0d:a2:c0:a1:de:52:ee:
88:3d:22:75:e4:09:21:8a:0c:28:fc:77:87:48:2c:
9d:e3:32:12:63:a3:f7:1f:9f:fc:2a:7b:9b:21:64:
7c:f5:35:18:e9:31:75:d4:8b:59:4a:94:ff:4e:87:
ce:26:79:98:73:30:fb:06:73:a7:4c:aa:47:b7:cd:
7c:78:51:ed:af:e2:eb:19:bd:f2:3f:9c:63:fb:fb:
64:e4:32:f4:f1:d7:e5:08:23:50:73:d7:09:45:7c:
b0:76:49:66:31:7d:09:3e:0e:dc:1a:2f:98:a4:d8:
87:31:58:c8:98:8f:cb:34:09:19:d7:86:de:30:95:
df:63:07:d3:2a:9c:08:38:17:94:ea:39:87:96:13:
93:5a:a3:55:4c:50:13:6a:2c:d2:69:6f:c5:6b:59:
62:13:cc:ac:5a:d7:10:39:89:f3:f9:45:53:22:f9:
77:80:da:a1:09:0d:07:d5:0a:f9:bd:74:38:36:52:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3C:DD:94:36:6A:08:B6:E6:CC:2D:D1:03:BB:A3:5E:EC:EF:B5:B8
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:96:aa:d0:c4:62:cc:85:91:06:cc:35:8d:34:27:b7:fd:
3c:04:71:1e:c4:9c:56:95:68:96:30:d8:c7:ff:ef:32:71:90:
f3:bd:6a:7a:7a:1a:39:97:7e:13:b4:68:84:d4:bf:07:de:67:
3c:2c:99:97:36:51:35:6b:dc:99:40:e1:45:2f:63:f8:91:7c:
0a:2a:5e:1d:8e:01:b1:98:f2:69:91:a8:f8:af:1b:1a:52:b6:
f2:ec:a6:9f:f2:ce:84:9a:95:28:07:4b:fb:82:f5:ed:4a:89:
8b:39:57:c9:b4:54:ba:b9:48:d0:8b:85:92:4b:f8:fe:6a:f1:
fc:48:df:8b:65:f4:91:a1:10:fb:5d:4f:24:ec:a0:09:f3:9e:
c3:2c:f7:ab:bc:ce:29:91:9d:57:c8:7f:e1:3a:f1:49:04:9e:
e7:70:80:9e:74:db:29:4a:32:1a:18:09:08:24:6d:b6:e2:6f:
c4:70:32:ec:6b:39:0a:1e:47:60:f8:da:39:26:60:61:48:04:
4a:bc:df:f1:c8:04:1d:f3:ac:e4:86:af:e2:ae:2d:b6:4c:dd:
f7:f4:ab:8e:44:1e:ea:13:4f:b8:06:48:3c:a0:92:db:f1:10:
96:ed:ef:ca:c7:92:92:7e:a9:be:ca:fa:22:f8:ab:a2:13:7d:
06:f8:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:51:02 2026 by rpki-client