Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: 21byiWWWk3x6tDVllQ1PSKwZDmKfDiIM4zI2KHw/yA8=
Subject key identifier: DD:F3:EF:FC:36:44:36:18:B7:A9:E5:A5:91:44:A6:5C:A7:7A:AC:4A
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019F9135A24389C1C94D6C911DF5E21F40C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 1294
Signing time: Thu 23 Jul 2026 23:00:39 +0000
Manifest this update: Thu 23 Jul 2026 23:00:39 +0000
Manifest next update: Fri 24 Jul 2026 23:00:39 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: hbhQ4ZwxqGrmm/Dn6BXXVBXMuepMDWF/HogRFhNuzDQ=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:a2:43:89:c1:c9:4d:6c:91:1d:f5:e2:1f:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jul 23 23:00:39 2026 GMT
Not After : Jul 24 23:00:39 2026 GMT
Subject: CN=ddf3effc36443618b7a9e5a59144a65ca77aac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:76:3d:32:e3:a0:96:ea:e3:b4:4b:d0:e0:
80:2f:c8:85:9b:5c:9d:63:ba:68:28:d0:31:44:fd:
04:78:5a:59:75:9e:04:eb:74:9b:a3:f9:77:e1:1a:
0a:6b:f9:b4:2f:af:4f:04:d0:5a:6a:02:29:15:6c:
c4:23:7c:5b:94:e1:11:ab:23:4a:77:35:dc:db:59:
13:00:1c:07:c5:89:e9:6e:51:a7:f0:14:7d:b7:57:
a8:85:59:3f:b7:c5:3f:91:95:dc:85:7a:77:98:7a:
34:a5:cb:a8:c5:38:27:2b:8c:7b:4a:b2:b6:67:06:
33:24:fb:eb:11:68:c0:cc:a0:58:d8:6f:d4:70:e5:
16:0f:44:84:81:0c:a0:c4:f8:11:62:17:86:ae:2b:
98:0a:11:75:38:be:b8:6c:18:6c:62:27:75:c0:71:
f9:53:ca:d9:fb:2a:b5:9f:d2:c8:91:56:d3:2e:a1:
56:6a:83:7d:c7:27:50:c1:01:8d:17:d4:af:03:23:
ef:48:ee:b8:f7:a0:15:97:85:80:12:3b:c1:a8:da:
ce:07:ae:cb:59:6f:20:cf:7e:90:de:19:3f:25:71:
17:8b:c9:85:24:0f:76:56:4f:53:e7:e6:99:96:67:
b2:a1:aa:08:26:00:25:e1:2d:d3:8b:78:7a:c3:25:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F3:EF:FC:36:44:36:18:B7:A9:E5:A5:91:44:A6:5C:A7:7A:AC:4A
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1b:fb:53:56:0d:08:63:b5:f6:6d:b4:d6:a2:7d:ef:1a:bd:
86:e0:11:5e:10:cf:e3:a1:07:7d:0c:3d:d5:73:0c:12:52:d7:
4a:2e:90:9d:f0:57:0e:ae:22:bd:c6:51:78:8c:76:00:a7:2d:
cf:94:37:cf:88:bf:22:a8:ef:75:45:2f:be:09:ae:bf:7b:02:
e7:50:86:3c:ab:e8:97:b9:74:01:18:f9:5d:c9:30:f2:88:b7:
f7:f1:e0:a7:71:fa:5d:f1:6b:ab:b5:80:fe:ed:43:6b:21:c7:
23:05:6b:74:2c:ff:59:85:0f:8d:1d:70:24:a8:9d:4c:24:2e:
48:8c:5b:d6:43:f4:7e:04:c4:bf:41:e7:10:14:d9:c4:f1:e4:
8b:2f:36:82:98:68:e8:dd:cb:0d:7d:01:fc:08:a1:6b:87:54:
30:d8:cc:cd:c5:66:01:0e:50:62:45:d5:35:34:f7:bd:f7:6a:
92:13:1e:c5:79:be:ce:76:c1:48:c7:27:5f:22:c2:c4:69:00:
f2:f8:57:8c:b8:fc:1a:06:41:77:a0:97:6f:e5:25:91:48:89:
8d:04:52:f6:46:b9:45:d4:f3:f5:78:f4:03:ef:c6:2d:8e:aa:
c3:f4:b7:1d:32:1d:c2:26:a5:d9:5c:b9:9d:3c:c0:bd:ca:68:
52:87:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:50 2026 by rpki-client