Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: LaXp/TW5eogqWmRxTyvtB9PaU2hhhkfYrJahqYUf5nw=
Subject key identifier: 1D:C0:AF:DF:13:E5:CC:53:55:85:B0:F2:4C:9A:27:87:0C:4D:A0:CF
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019F951229CF4D51D17FAAFEBFA9DD97960C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 17:00:23 +0000
Manifest this update: Fri 24 Jul 2026 17:00:23 +0000
Manifest next update: Sat 25 Jul 2026 17:00:23 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: wDeNDUk4Db3MYxnY2mgyvIeR3ij4L5V9+km6VwkkaeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:29:cf:4d:51:d1:7f:aa:fe:bf:a9:dd:97:96:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Jul 24 17:00:23 2026 GMT
Not After : Jul 25 17:00:23 2026 GMT
Subject: CN=1dc0afdf13e5cc535585b0f24c9a27870c4da0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:93:c6:95:b2:8b:31:37:57:40:63:f0:5d:
dc:aa:2a:31:21:c5:5e:96:75:3f:8a:c3:f4:1b:df:
20:ef:22:2c:8a:12:51:13:70:03:f4:df:51:c6:a3:
6a:8c:93:1c:51:1f:55:d6:46:86:15:27:5c:a8:7d:
ae:3b:fd:d8:2b:27:75:5a:7d:2b:29:25:3d:17:0e:
6c:75:69:19:41:0c:f0:28:c5:c7:0e:47:f2:9f:60:
bb:5c:d4:c8:b2:ed:8f:51:b5:52:2d:9f:d3:81:07:
91:8d:5a:70:86:00:a3:20:29:29:72:42:9a:28:07:
30:f9:ea:20:b0:97:14:38:06:46:d2:3b:60:36:ee:
98:50:4d:c7:7c:e4:11:91:cd:6a:a7:3b:0e:46:8e:
0e:f6:ec:c1:af:9f:b6:67:c1:b3:2a:d9:e6:b1:0d:
19:50:63:3d:b6:f4:bc:8e:4d:bb:76:25:43:97:a2:
55:d5:ce:ce:dc:53:ae:72:cc:f8:9f:ac:cf:70:ee:
9d:9f:d9:a0:1f:73:35:27:ee:3e:d5:17:c1:9c:5e:
c3:30:6f:3b:eb:3e:6c:61:2a:c0:c0:5a:91:29:75:
05:5d:22:5d:8b:2e:29:36:57:bf:b6:fa:39:df:ec:
9f:e1:26:ee:bc:ff:d8:1d:23:7d:d3:0a:59:f8:b0:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C0:AF:DF:13:E5:CC:53:55:85:B0:F2:4C:9A:27:87:0C:4D:A0:CF
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a8:c5:e2:f0:45:31:6e:d0:42:79:61:13:19:ae:59:7f:18:
4b:79:e3:24:0a:25:d2:83:ff:38:86:bd:54:4f:45:3b:f5:00:
09:35:96:f2:1b:3f:9d:ea:ee:b0:bb:28:86:b2:33:91:e2:b6:
fc:b4:6e:5b:d6:f4:4d:fe:bd:6f:58:33:c9:72:c5:a3:45:85:
ca:48:b6:0b:0d:6a:06:b6:87:b2:6f:50:65:d6:cb:9b:04:55:
01:a3:e9:15:77:22:f7:f1:84:92:f1:8d:15:b9:b6:ec:c9:b7:
aa:46:d3:8b:b9:5f:61:d6:eb:b2:82:fa:d5:82:34:f4:ad:6a:
4e:aa:fd:71:8c:9b:89:c3:ff:9f:7d:5a:7d:71:3c:e0:10:0d:
3b:a3:1c:50:e9:10:d6:c1:17:dc:a9:04:18:cc:fa:45:5f:e8:
30:92:2c:74:3d:97:e5:83:b9:b4:46:44:91:05:89:17:e5:c6:
46:7b:aa:ea:33:d7:eb:3e:ca:30:c9:a5:9c:7f:30:ac:30:d7:
f8:ab:d4:72:44:41:c1:fc:22:65:fa:9d:48:39:85:0a:68:74:
92:c2:ac:dd:17:b5:d0:16:70:02:7c:71:f7:b4:fc:9e:2f:a3:
35:f1:81:8c:dc:72:a2:b4:9f:a1:0b:a6:0e:15:b3:a5:4d:fb:
4b:54:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:47 2026 by rpki-client