Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
File: ZfaZywqf4QlubWiLmxNlstPBQIE.mft (raw, json)
Hash identifier: uHLdzIayvBxyoBuyVhlOsW2L0IywcrYz5KeVpPq+yk4=
Subject key identifier: 91:C1:34:66:EC:4B:D6:17:E0:37:11:83:9F:09:59:FD:2A:01:0D:ED
Authority key identifier: 65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
Certificate issuer: /CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Certificate serial: 01A106935E5008A4AAD41A78E0AE7D3C079B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
Manifest number: DA
Signing time: Sun 04 Oct 2026 11:01:23 +0000
Manifest this update: Sun 04 Oct 2026 11:01:23 +0000
Manifest next update: Mon 05 Oct 2026 11:01:23 +0000
Files and hashes: 1: 4kefMU7_dHh0pjF04I0GNuOZzgw.asa (hash: Dg793cyO+GCKIEjFm8zI8tkDaVZ6JxafokaSOxdxvjg=)
2: ZfaZywqf4QlubWiLmxNlstPBQIE.crl (hash: +MW8qgU/d0lBG7ZodUz3FcNJtpIpWqjrr/0NnbC50NE=)
3: yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa (hash: RGL/uaPbj1P9rnlKrXMsj0QrwOf5G6N6ob7tSgI7xu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:5e:50:08:a4:aa:d4:1a:78:e0:ae:7d:3c:07:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Validity
Not Before: Oct 4 11:01:23 2026 GMT
Not After : Oct 5 11:01:23 2026 GMT
Subject: CN=91c13466ec4bd617e03711839f0959fd2a010ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:b9:14:35:7b:bc:f3:66:c0:c3:95:d6:bc:
3e:1c:59:c4:ff:ae:66:e0:db:cb:f6:dd:a0:65:4f:
88:1d:95:31:0d:96:39:b9:cd:ee:79:ab:d7:3a:53:
d2:0c:a3:70:aa:0f:71:c8:0b:bf:00:fc:09:0b:01:
4b:db:8c:92:92:6f:28:9e:78:71:39:57:a0:52:41:
de:81:fc:01:0f:66:ae:7a:da:5a:54:57:9b:69:01:
87:c1:f7:b6:74:f9:b2:3b:9b:3e:09:fd:23:e1:11:
e6:16:78:b9:14:9a:3c:d8:67:48:1a:46:d1:cb:d7:
47:3e:d0:64:4a:cf:a3:bd:ac:98:ca:b9:4e:f2:8f:
e4:a6:fe:e6:46:01:6b:55:44:2e:60:8b:bc:81:6d:
c7:8a:ed:74:1c:03:01:1c:8b:be:e2:a0:b5:8f:79:
85:a9:e4:3d:e9:84:0d:3e:0b:53:07:66:98:dd:5b:
0d:c9:cb:bc:9d:15:0f:8f:66:fe:24:93:18:2e:e5:
0f:d3:e8:47:4a:3d:cd:03:b3:0f:8b:cc:bc:76:a1:
76:f4:0c:8d:fd:9f:a4:42:8c:8f:d4:95:67:26:30:
5f:64:16:3d:7c:f6:0c:d1:31:85:ea:7f:e7:ac:bf:
c8:57:09:7b:c5:a0:40:b4:9e:6f:3e:8d:b6:bf:a7:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:34:66:EC:4B:D6:17:E0:37:11:83:9F:09:59:FD:2A:01:0D:ED
X509v3 Authority Key Identifier:
keyid:65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:25:50:3a:be:b1:7c:29:35:9f:5b:69:97:99:8b:e9:0f:4e:
97:fc:b0:a9:db:1c:3f:3e:58:c7:2a:81:87:14:46:09:9a:42:
d5:70:a6:af:af:5b:bc:7b:9e:fd:f6:03:29:c2:11:d7:7b:2f:
c2:57:ab:f2:f3:78:f7:a1:d5:b6:73:a4:5b:88:52:61:d0:ae:
87:e0:fc:9a:e7:c8:8c:fd:0b:4f:cd:a6:77:4a:24:a6:7c:bd:
17:43:c5:93:ee:db:f8:0c:fe:ff:f8:04:fc:f2:4a:45:2a:de:
b2:27:2e:2b:45:d6:75:42:87:30:85:0f:60:54:b4:43:c4:96:
72:68:bb:46:38:ad:39:8c:74:2e:8e:f2:f1:af:66:70:51:53:
4b:bf:37:9a:08:dd:1d:96:dc:49:60:9a:cd:e5:cc:83:71:37:
33:56:14:ad:11:be:9f:19:81:d7:d6:ac:ee:b4:0d:38:b3:5e:
65:c3:2c:42:28:21:54:a2:b0:b1:23:11:b6:e0:95:ba:83:0e:
79:c5:72:f1:6b:e9:36:15:a9:c6:34:35:41:ca:fe:71:a4:86:
49:3f:49:53:50:70:3b:be:cf:66:fb:70:a6:00:fd:a2:72:83:
84:2a:3f:cd:c7:15:c7:e4:27:25:88:a9:88:66:04:e6:e3:05:
57:9e:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:32:05 2026 by rpki-client