Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: 1zZQxh7AujINJCAgWdRnSE8imMGEv1ZshKDmwEmqOFw=
Subject key identifier: FC:65:C9:77:B5:78:B5:20:F2:19:28:B3:03:D4:F4:8C:1C:E7:85:AB
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 019CABA1DD84AAA0F9E3A10515C2A2756E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 133A
Signing time: Sun 01 Mar 2026 23:00:37 +0000
Manifest this update: Sun 01 Mar 2026 23:00:37 +0000
Manifest next update: Mon 02 Mar 2026 23:00:37 +0000
Files and hashes: 1: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: 15XG7iB4A9VvOq+1L7R5tVqH0qnf5wcWVmUe5rVuyNI=)
2: kb5QsyYCWAXreqKDSNly_eUOWbs.roa (hash: R6T+O7UNp0e/weGB+lvgWkopq769WLtdhPDiexDGO0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:dd:84:aa:a0:f9:e3:a1:05:15:c2:a2:75:6e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Mar 1 23:00:37 2026 GMT
Not After : Mar 2 23:00:37 2026 GMT
Subject: CN=fc65c977b578b520f21928b303d4f48c1ce785ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:47:82:fe:c1:f1:a0:11:05:81:81:f8:36:
b9:cd:5b:42:a9:c9:ed:5d:bd:37:40:05:4e:24:0c:
b5:94:80:f8:a8:ae:1f:b6:cd:a5:ab:ef:6b:b0:07:
75:5c:3e:93:c3:cd:bd:d7:1c:75:a2:f1:59:90:51:
07:ae:fd:2a:6b:4c:d4:5a:7c:57:1a:9d:59:31:aa:
e1:a3:2f:5b:6f:57:a1:67:21:b1:3a:75:39:56:b4:
b1:7e:47:7a:7c:4a:ec:54:aa:82:1c:d8:38:44:a3:
cc:8a:c6:37:1b:67:c1:5f:f0:3b:72:73:f9:d9:01:
ee:ca:67:5d:df:ce:9f:63:ae:bb:81:7c:2f:32:83:
18:85:7e:ba:79:76:72:f4:19:28:78:79:59:1d:b6:
17:bf:9c:85:11:3f:47:f9:8b:df:9c:54:79:06:01:
b7:f0:04:f8:d0:37:0e:0c:18:bb:b1:1e:15:83:a8:
78:71:4d:2e:db:49:00:f4:22:64:5e:ea:66:7a:4f:
7b:78:0c:d7:3c:30:80:0e:f7:1b:81:8b:b5:1b:5b:
96:98:55:da:9f:27:cb:9e:70:54:bb:16:23:92:df:
87:f5:fe:58:98:5c:f5:17:b6:b2:57:8d:a3:19:f2:
e1:a6:7a:e7:5f:91:2f:01:96:bb:a6:f9:40:72:88:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:65:C9:77:B5:78:B5:20:F2:19:28:B3:03:D4:F4:8C:1C:E7:85:AB
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:35:a1:8b:74:45:ae:44:6a:64:9b:74:bd:d6:b4:74:9b:
67:a1:3d:cf:33:04:0b:ad:1c:19:72:89:d8:5a:1a:bc:95:ba:
99:0c:96:d0:4d:2a:37:f6:25:bc:1f:f9:15:28:bc:13:80:15:
12:25:b4:84:51:1f:ec:d3:7e:e1:7e:6b:c4:8b:25:c6:32:b8:
0b:f5:3c:43:d1:ec:59:d4:e0:3a:dc:be:ac:bd:fb:3d:73:60:
19:f9:7e:3e:01:23:a3:7d:26:cf:2c:3f:8d:ff:ce:bb:0e:05:
cc:7d:82:85:42:76:26:ae:38:28:c6:17:e4:3c:aa:67:b7:b6:
49:0b:72:3e:07:8f:e3:f0:a2:96:2c:af:d2:ba:e3:70:02:e5:
13:0a:fc:24:d3:2b:e8:9c:39:34:7e:37:e7:65:49:c9:04:27:
d8:6c:5f:80:7a:ab:ee:3c:33:55:35:33:67:92:23:cc:42:08:
5c:61:e8:33:d9:09:74:2c:56:e6:e2:ae:d8:d5:5f:30:d0:55:
4f:62:10:58:a7:4d:7c:67:b6:a8:c9:74:22:e1:37:1b:55:e3:
16:7e:8b:cb:51:5a:62:4f:43:71:41:1d:3f:bd:b3:a8:1e:a4:
35:10:9d:a8:87:3d:f1:2d:0c:a8:41:42:f8:6e:97:f5:12:69:
d4:ba:55:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:09 2026 by rpki-client