Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: 1/pyudi3SfWTL5t+xFQui+t2pZfJr/23a0J/geDfGEA=
Subject key identifier: 1A:65:AC:11:7B:14:C2:58:EB:94:72:FE:88:54:1C:5C:67:49:E7:8F
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019E1E6C865EEA4C94B9BB1742CB144D028B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 23:01:29 +0000
Manifest this update: Tue 12 May 2026 23:01:29 +0000
Manifest next update: Wed 13 May 2026 23:01:29 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: GFJf85QgJZb6OzWWkHTXkp1VLYm7nOnCkA3CAd7L1Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:86:5e:ea:4c:94:b9:bb:17:42:cb:14:4d:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: May 12 23:01:29 2026 GMT
Not After : May 13 23:01:29 2026 GMT
Subject: CN=1a65ac117b14c258eb9472fe88541c5c6749e78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:dc:51:b5:0f:68:f0:c7:1b:76:31:4c:d3:
1f:2b:f9:24:19:4b:a2:86:1a:1f:c4:73:5f:e5:6d:
94:fc:19:93:5a:53:82:c9:ef:4f:91:b4:78:5a:77:
77:a1:29:c6:af:bd:5c:16:d6:c9:41:01:c9:24:21:
69:06:ab:71:38:f3:01:0b:55:c1:e1:67:a4:2a:56:
8e:4c:08:47:e4:56:c4:c8:d1:2a:42:e8:c2:c5:ef:
c9:66:54:07:99:f1:d1:e1:ba:bf:23:ef:26:d7:92:
91:b5:6f:68:4a:16:34:db:09:93:b5:85:26:3f:65:
17:0f:47:2b:3b:c7:15:a4:44:01:c2:78:82:95:73:
cf:95:e8:4c:52:93:0e:5d:14:2f:68:a3:a4:a1:b1:
88:3a:d4:be:8f:8a:23:aa:bc:63:82:1b:05:5a:d7:
2a:3c:9e:e0:5a:73:09:db:42:52:49:2c:c1:ca:dc:
43:d1:39:dd:e0:7d:2a:7d:10:a3:e4:ce:0a:06:15:
c2:47:b4:c9:8f:48:1f:71:b2:9d:48:50:ce:9a:29:
d7:b4:82:0b:53:b6:38:8e:83:c1:9c:79:c4:be:76:
90:a8:a0:1b:08:ba:bf:f4:74:fd:7e:82:95:f8:f8:
46:1c:be:f1:2f:86:7e:99:ac:91:1b:99:25:22:d2:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:AC:11:7B:14:C2:58:EB:94:72:FE:88:54:1C:5C:67:49:E7:8F
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a0:eb:e8:e9:a1:32:96:aa:5c:05:b9:67:32:fe:c9:0b:f0:
66:f7:25:5c:a4:dc:d3:78:5e:02:56:96:b1:a9:34:a1:c6:66:
2e:49:f3:cd:01:91:2c:69:5c:32:c2:43:36:65:4c:c6:7d:9d:
84:05:74:7a:21:22:e3:67:f5:9d:6f:b8:39:b9:fe:e9:22:81:
26:39:0b:ec:5e:dc:fe:c8:87:07:dd:39:8c:d1:6e:32:f7:c7:
48:4d:d3:9d:5d:2c:a8:86:03:32:ca:e5:8e:b2:88:a9:28:03:
c5:b4:bc:15:7f:f2:49:f3:a0:fc:00:26:6f:d3:63:8d:d6:52:
c2:90:87:a0:ee:ad:34:f3:52:35:f5:57:79:5c:10:01:c0:df:
79:be:27:e5:e1:a3:19:9f:6f:c3:e5:59:be:5d:ed:59:5c:2a:
d2:f6:87:1e:c0:da:c5:76:73:6f:86:3c:9a:29:12:df:00:12:
88:0d:7a:6a:d7:5d:d6:a8:b4:12:1f:79:8a:ab:5e:96:25:ec:
c5:c2:55:8e:1b:a4:9e:d6:3f:a3:c0:47:8a:43:13:43:ab:05:
85:9e:db:6d:8f:82:dd:ab:47:90:33:af:9c:f2:bb:b9:c7:74:
66:33:11:9e:f3:3d:ca:3a:d1:0d:d8:cc:92:57:20:14:c0:cb:
33:8a:78:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebIZe6kyUubsXQssUTQKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjY4ZWMxMjdmYjMyYzY3OTIxOGFmYzc2ZTFiNmVhYTU5
NTIxYmIwHhcNMjYwNTEyMjMwMTI5WhcNMjYwNTEzMjMwMTI5WjAzMTEwLwYDVQQD
EygxYTY1YWMxMTdiMTRjMjU4ZWI5NDcyZmU4ODU0MWM1YzY3NDllNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GjcUbUPaPDHG3YxTNMfK/kkGUui
hhofxHNf5W2U/BmTWlOCye9PkbR4Wnd3oSnGr71cFtbJQQHJJCFpBqtxOPMBC1XB
4WekKlaOTAhH5FbEyNEqQujCxe/JZlQHmfHR4bq/I+8m15KRtW9oShY02wmTtYUm
P2UXD0crO8cVpEQBwniClXPPlehMUpMOXRQvaKOkobGIOtS+j4ojqrxjghsFWtcq
PJ7gWnMJ20JSSSzBytxD0Tnd4H0qfRCj5M4KBhXCR7TJj0gfcbKdSFDOminXtIIL
U7Y4joPBnHnEvnaQqKAbCLq/9HT9foKV+PhGHL7xL4Z+mayRG5klItKc6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBplrBF7FMJY65Ry/ohUHFxnSeePMB8GA1UdIwQY
MBaAFM32jsEn+zLGeSGK/HbhtuqllSG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUt
OTgyNDZhNGNiNmY4LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUtOTgyNDZhNGNiNmY4
LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaDr6Omh
MpaqXAW5ZzL+yQvwZvclXKTc03heAlaWsak0ocZmLknzzQGRLGlcMsJDNmVMxn2d
hAV0eiEi42f1nW+4Obn+6SKBJjkL7F7c/siHB905jNFuMvfHSE3TnV0sqIYDMsrl
jrKIqSgDxbS8FX/ySfOg/AAmb9NjjdZSwpCHoO6tNPNSNfVXeVwQAcDfeb4n5eGj
GZ9vw+VZvl3tWVwq0vaHHsDaxXZzb4Y8mikS3wASiA16atdd1qi0Eh95iqteliXs
xcJVjhukntY/o8BHikMTQ6sFhZ7bbY+C3atHkDOvnPK7ucd0ZjMRnvM9yjrRDdjM
klcgFMDLM4p4ZA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:45:04 2026 by rpki-client