Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: Ma08aZj9nrWH7rkhMiNtNX4quH+Xd/vpovKB8W8bTiQ=
Subject key identifier: B3:34:10:CE:E8:16:C8:95:37:07:F0:ED:A2:27:2B:1E:C1:8A:19:7E
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 019D9AABE1BC570EB4806187C4D9C4B699C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 02D5
Signing time: Fri 17 Apr 2026 09:00:48 +0000
Manifest this update: Fri 17 Apr 2026 09:00:48 +0000
Manifest next update: Sat 18 Apr 2026 09:00:48 +0000
Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: /SiFDTusDRIwFjjrWWSDdPqso1OqJAnLXWyXLxfSZ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e1:bc:57:0e:b4:80:61:87:c4:d9:c4:b6:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Apr 17 09:00:48 2026 GMT
Not After : Apr 18 09:00:48 2026 GMT
Subject: CN=b33410cee816c8953707f0eda2272b1ec18a197e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:f6:02:1c:a5:6e:b7:7d:11:79:24:58:92:
c0:ca:8e:92:f2:93:87:97:3c:88:04:f9:4f:44:99:
cb:d2:e7:e5:fe:d2:18:b9:03:94:75:0a:9b:24:fd:
ed:ce:33:03:9d:1d:8c:db:98:42:4e:0a:7e:d7:79:
96:69:f7:22:ee:d8:ad:65:89:4c:b4:c6:68:4d:7a:
ca:64:0b:97:0c:e6:f0:59:8c:4e:b2:d4:6d:14:fb:
43:03:bc:fc:8c:f0:2e:43:46:28:80:da:03:da:9d:
06:d4:53:bc:d7:ba:d9:42:dc:cf:69:3c:b6:9e:37:
b1:e1:0e:10:81:9d:ed:ea:b5:ba:1e:b1:9b:59:b4:
3d:c0:21:64:7a:ce:99:fb:22:79:40:1b:3a:59:9f:
1e:95:e1:50:b8:03:bc:f1:b4:00:ef:5a:59:aa:c3:
7c:79:96:5b:7f:33:cd:9c:47:ba:48:05:f0:b6:91:
b9:c2:e0:73:df:24:c7:2e:25:a6:f2:93:d0:cc:a3:
6d:4f:91:61:e2:0d:1a:67:6e:81:a6:f5:20:af:07:
b6:4f:12:c3:19:d8:3f:25:0e:2f:ea:e0:5b:da:83:
07:de:fb:c1:a2:78:6b:ae:bc:d3:c8:33:73:00:9d:
30:82:91:be:3e:50:78:5c:2a:6d:33:f2:c1:12:be:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:34:10:CE:E8:16:C8:95:37:07:F0:ED:A2:27:2B:1E:C1:8A:19:7E
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:74:e1:b4:30:fc:e1:87:45:38:c3:0f:67:79:a9:58:15:7b:
04:4b:44:fd:f2:c2:c1:89:d0:f6:93:7b:77:e7:28:86:7e:69:
44:12:c2:7b:cc:36:e3:46:84:dd:2a:37:fa:30:a5:52:4d:83:
a1:83:82:18:20:25:36:f0:85:78:80:2b:78:71:66:be:9a:fd:
fd:28:ae:a9:e6:12:7c:5a:83:12:65:bf:d2:45:43:04:66:03:
45:d7:6a:4b:01:56:46:8e:52:7e:24:ed:37:d2:e0:db:3d:8a:
01:f5:b0:38:de:67:65:49:d0:c4:1f:77:66:d9:f5:32:59:eb:
ec:76:55:4d:e8:1b:26:4b:aa:14:0e:62:c4:05:92:d5:71:a9:
99:d5:cb:c9:f0:a0:e7:bf:5e:aa:97:10:58:a7:ed:f7:c7:3c:
46:da:a4:25:65:89:b8:d2:d1:53:95:26:3a:47:87:f5:d5:c3:
50:4b:cb:a0:7c:63:ca:dd:18:6e:19:18:a3:5c:db:a7:92:a2:
c1:a9:14:db:b2:50:61:21:5f:d6:ae:29:d4:c8:f1:58:52:81:
6d:e7:be:07:49:cc:a6:a0:45:d9:52:3e:2d:fb:c4:a4:36:14:
bf:b5:8c:9f:32:d0:92:f1:5a:43:c7:2a:7c:f4:c8:af:e0:08:
bb:a0:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:24 2026 by rpki-client