Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: yvzoTfJHP/KdPAh0oMU/pRWogToRLpXhW9/49ncpTEw=
Subject key identifier: 89:C8:BE:A6:2A:A6:DD:62:74:45:BD:C2:49:22:B1:FA:ED:87:6E:35
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 019CAD22FEB8A11E6E83257843256C7C79E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 025A
Signing time: Mon 02 Mar 2026 06:01:17 +0000
Manifest this update: Mon 02 Mar 2026 06:01:17 +0000
Manifest next update: Tue 03 Mar 2026 06:01:17 +0000
Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: q0eWsYI1TetxULdcSZEyYaw/74N+wQGW79/rxCE8CMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:fe:b8:a1:1e:6e:83:25:78:43:25:6c:7c:79:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Mar 2 06:01:17 2026 GMT
Not After : Mar 3 06:01:17 2026 GMT
Subject: CN=89c8bea62aa6dd627445bdc24922b1faed876e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:47:99:7f:9c:bc:1e:95:5a:c2:f2:ad:8b:
6c:8e:13:62:ff:15:7e:9c:7e:f5:52:ea:30:a9:98:
4e:da:58:7c:58:61:96:2d:a0:06:67:c2:40:eb:06:
56:fa:78:29:dc:03:e3:80:3d:d8:98:44:23:a9:9e:
8b:5a:b6:e0:13:02:2b:be:e4:f1:95:c4:ea:1c:9c:
70:c7:2b:04:d2:e6:fd:38:49:5f:81:17:8e:2a:ee:
17:91:8c:9a:38:13:77:0a:61:5c:a1:b3:6c:2d:cc:
ba:ec:dc:6a:25:78:75:2f:23:de:7f:30:6e:cb:c5:
f3:a9:db:99:ee:0b:1b:61:37:8e:98:3c:91:0f:2c:
af:fa:84:14:26:42:26:d8:01:38:b5:ad:2e:32:92:
e5:3f:15:4a:b9:72:47:55:2f:f9:96:42:ff:8f:b0:
6f:92:d9:ef:cc:f1:73:58:21:08:ac:13:37:96:a8:
63:31:70:97:5b:e1:b9:3d:5d:b5:ea:9e:09:7e:f8:
ba:bd:ba:fc:60:e6:eb:5c:5a:c0:6a:14:60:35:4e:
57:56:17:96:22:7f:ec:17:fc:0f:dc:c7:80:45:5c:
8a:d4:e5:75:44:f1:b0:65:a7:84:62:37:8f:ba:86:
b4:6b:5d:65:fa:e2:6a:6c:fe:61:a5:78:75:59:6b:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C8:BE:A6:2A:A6:DD:62:74:45:BD:C2:49:22:B1:FA:ED:87:6E:35
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:31:c2:15:25:0a:f9:76:ca:50:04:bd:01:28:d0:18:d1:8e:
8c:46:4c:c7:80:d2:10:88:be:a7:36:c0:cb:23:7e:95:aa:81:
ae:80:2e:7e:03:66:26:87:64:e9:05:23:ec:f6:f6:8d:6f:97:
13:19:a1:d1:de:44:a6:c8:34:e1:62:b4:8c:dd:0d:84:c5:c2:
ef:ce:56:d3:f1:49:a9:9f:19:0b:fc:9d:13:77:7f:ad:2e:13:
69:87:14:d4:50:dd:3d:0c:91:84:59:91:0b:aa:a8:0d:8b:c5:
be:c1:2e:18:cb:2b:a6:ec:df:72:6b:81:7b:49:da:ce:b8:af:
57:d5:e6:bf:3c:98:69:7b:53:48:bc:11:8d:c7:87:2d:5f:ad:
4c:81:ca:36:c6:38:d8:84:fd:f1:db:3c:88:e5:1c:66:41:bb:
33:69:af:96:38:99:1e:33:89:14:b6:b8:e7:90:f6:f6:4d:89:
f2:4a:c6:b6:28:f6:06:17:48:23:d4:b6:ab:ef:f6:c3:c8:85:
41:ba:37:06:32:be:43:80:94:25:d6:f6:05:c7:76:28:53:f2:
9a:b1:74:1f:c9:93:bd:2d:ae:ff:86:5b:18:9f:3b:5c:84:47:
cd:4a:75:55:22:59:eb:d5:ba:4e:e2:28:a0:51:3d:1a:ad:1c:
ff:f3:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:34 2026 by rpki-client