Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: oNzr/S8NP+4umcoStGtJgtPyGpB1BTVGg0YWEl+Y9YU=
Subject key identifier: 1C:82:5E:18:4E:8B:DE:9F:36:CC:11:75:97:A1:DA:51:F9:99:F5:02
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 01A1DE3957FB1282345EAC196F7CA33F4A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 13C5
Signing time: Sun 15 Nov 2026 08:01:02 +0000
Manifest this update: Sun 15 Nov 2026 08:01:02 +0000
Manifest next update: Mon 16 Nov 2026 08:01:02 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: yzrOTjBIUPBmIzIPxTnITL0KgWMol+dqJ7hyKYBA44s=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:57:fb:12:82:34:5e:ac:19:6f:7c:a3:3f:4a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Nov 15 08:01:02 2026 GMT
Not After : Nov 16 08:01:02 2026 GMT
Subject: CN=1c825e184e8bde9f36cc117597a1da51f999f502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:48:a0:2e:fb:76:d0:04:a8:f6:33:b9:41:
a9:33:a5:68:a9:6f:29:37:e5:18:ac:50:3c:38:af:
77:6c:32:68:f8:a0:65:51:d9:f3:a7:ed:4a:b2:d1:
6d:82:b8:0e:e2:ce:b3:0d:c4:74:52:2d:a2:96:3a:
4a:a6:df:bf:72:e9:c6:88:71:07:f2:30:28:d3:d9:
d3:2f:a1:f4:6a:e5:69:b7:71:84:6f:cd:84:3e:ec:
e6:79:a3:a2:1d:2e:71:31:79:13:9c:c3:11:41:a8:
fd:a0:93:ca:3d:03:e2:2e:b0:53:f9:af:ca:28:9f:
c0:cc:f4:5f:7c:68:b6:49:47:59:00:8c:6d:da:85:
46:c6:69:46:f8:d2:06:7d:df:80:f1:1c:6c:85:34:
0d:6a:cc:3b:84:96:65:52:72:91:4e:40:a9:42:99:
1c:d3:28:da:d7:f6:93:23:e2:01:a3:9a:24:97:28:
5a:41:d2:4b:93:9d:e7:df:a6:41:fa:f6:d7:b9:96:
c8:85:0a:09:c8:b9:e7:8a:6b:14:b3:f9:f2:9c:26:
c8:67:86:1e:17:d9:b7:34:3a:d8:ba:ba:71:2d:b1:
e9:e5:11:e7:b4:87:87:16:4d:87:2b:ae:38:40:51:
0d:4c:3f:f0:8d:fd:95:db:82:63:b2:ea:f6:79:ed:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:82:5E:18:4E:8B:DE:9F:36:CC:11:75:97:A1:DA:51:F9:99:F5:02
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ae:86:fa:66:a1:c2:63:d8:e1:cc:0f:c2:f3:4a:0e:e5:c9:
e3:91:4b:26:1d:bd:4c:1e:57:40:e9:29:9b:a4:8e:2e:8a:51:
2c:06:37:35:0c:eb:a2:3c:bd:e1:a8:fb:f9:3c:16:e0:18:ca:
c4:f7:2f:3e:61:74:95:6e:88:05:79:56:c0:4a:72:46:43:45:
04:ea:98:b2:48:dc:bf:96:48:00:31:0e:95:71:c4:8d:a5:47:
a2:97:e4:74:73:64:35:c3:6c:7c:ce:72:62:90:bd:a3:52:b1:
d8:f2:bb:96:53:87:48:56:e9:d1:ed:48:e4:8c:8a:5a:9c:67:
ad:1f:5a:08:1a:be:78:e2:89:85:2d:48:e3:47:a2:94:51:4e:
18:6e:9d:b6:28:1e:6b:6c:ec:b5:72:aa:53:e9:9d:6d:5b:c8:
e3:80:9a:36:b2:21:ef:f7:94:58:16:4e:3e:9c:81:88:d7:27:
3a:88:dd:37:a6:ff:75:f8:18:8f:55:e0:5f:59:24:94:a6:63:
eb:c7:b6:1f:ef:c9:cf:21:ba:55:b5:65:40:07:b2:04:2d:01:
24:9f:44:f5:f4:40:d0:b8:aa:f7:20:d3:1f:bf:08:cb:b4:4b:
7d:cd:71:50:eb:98:52:de:1b:66:5f:23:9c:df:c2:0b:74:b4:
6a:bd:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:47:28 2026 by rpki-client