Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: XHcUfbMxOHL+MPVztN9av4wxan2mnNM/8QP18J1fiuU=
Subject key identifier: E2:DC:AB:42:00:26:38:98:E7:40:26:63:CC:DD:34:3F:8C:BD:7F:91
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019D254C362AC8B9785F067D6CD33C915E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 14:00:44 +0000
Manifest this update: Wed 25 Mar 2026 14:00:44 +0000
Manifest next update: Thu 26 Mar 2026 14:00:44 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: ptceiG1qIaUvPOuh4bT9x3Q/bq7YgLhdiROS8gcj5WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:36:2a:c8:b9:78:5f:06:7d:6c:d3:3c:91:5e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Mar 25 14:00:44 2026 GMT
Not After : Mar 26 14:00:44 2026 GMT
Subject: CN=e2dcab4200263898e7402663ccdd343f8cbd7f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:4d:31:3d:75:53:53:b6:39:04:f4:4c:91:
e9:8e:ad:91:7a:0d:51:e5:e6:b6:b5:f3:ac:88:d7:
4b:c0:b8:ad:a3:bc:81:2d:63:e7:c3:40:30:89:0e:
37:2f:f8:4f:99:d7:11:ee:ae:88:98:5b:0e:02:43:
e5:00:e1:c6:d6:d2:23:00:c6:d2:ce:ff:cc:a0:ed:
8d:b9:98:32:f1:c9:14:6c:6b:8f:14:d7:44:ed:d3:
f0:87:17:f8:82:df:fd:e9:cd:f2:48:8d:a4:d0:4f:
5f:13:01:43:bb:1b:35:ee:5e:a4:68:4a:b5:c1:19:
8e:e1:e2:cc:1c:0f:b4:a9:32:b5:89:67:d9:81:da:
7a:45:52:8c:4f:81:f0:fc:75:af:80:58:c2:06:1b:
dc:43:4b:93:ed:eb:80:21:e7:49:eb:3d:b8:ac:f0:
09:23:e1:a6:61:b2:a9:75:59:6c:f4:04:e3:f3:45:
5b:23:3b:75:aa:91:85:c1:38:33:41:e5:c6:df:04:
57:ab:41:4b:cc:d1:69:5b:f9:1a:d8:8a:db:26:64:
c8:b6:c2:e3:9e:d6:e6:1a:d2:2c:33:30:a3:37:d2:
a2:0e:8f:76:7a:91:8f:df:f1:75:b6:80:00:ae:c1:
dd:a1:11:d8:f8:34:14:12:dc:ce:d9:1f:03:cb:66:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:AB:42:00:26:38:98:E7:40:26:63:CC:DD:34:3F:8C:BD:7F:91
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bf:37:5c:79:3c:ee:8d:38:47:c2:26:7d:c9:c6:f6:dd:99:
3c:8e:df:60:f2:99:b6:ed:3a:67:f1:74:9e:29:1f:95:0e:8a:
1c:ad:53:24:39:64:b0:ae:40:f7:e2:e5:f1:f3:e3:b4:f8:f6:
46:79:18:87:32:c7:b6:30:71:5c:66:ce:05:47:7e:1e:16:57:
30:47:e4:a1:a8:5d:c6:e3:48:84:f5:04:ee:00:5f:dc:38:6b:
57:50:09:2b:43:03:f2:a0:85:51:f9:5b:5a:99:e6:56:40:a4:
82:6f:73:54:75:89:4f:62:72:36:2d:64:1b:fc:a3:5b:0e:73:
f5:21:54:e6:78:13:2b:c2:cc:19:fa:78:c3:d2:88:09:4e:66:
75:a2:c2:b2:0c:65:d3:72:34:21:f4:12:3a:aa:ca:c4:96:1d:
eb:b2:b8:c4:8e:36:fb:67:95:ac:d0:6e:9a:a2:a6:01:09:5d:
54:ef:15:06:d4:f5:d7:51:d3:90:aa:31:72:a6:a6:9d:44:24:
64:21:df:a3:59:1c:37:ac:ca:bc:20:63:de:31:52:5f:56:0c:
d6:1c:ab:31:3f:e4:ae:e4:a7:51:04:73:35:f6:72:e4:37:37:
6a:5a:b0:21:a4:9f:2b:c2:af:b2:5e:62:f4:86:e5:d7:7c:8c:
8d:18:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:35 2026 by rpki-client