Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: fskuHYorAEhH1UvSUXlyszdPTUSFWUiqfVj+TODBb6w=
Subject key identifier: CF:9A:98:04:A1:E6:4E:A8:FC:91:63:63:07:1D:94:1D:13:BE:4B:4F
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 019D9B51091C8DA71A14BBE1CD17205DC38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 07BA
Signing time: Fri 17 Apr 2026 12:01:12 +0000
Manifest this update: Fri 17 Apr 2026 12:01:12 +0000
Manifest next update: Sat 18 Apr 2026 12:01:12 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: cKZXvjxfYWXh4/igHx7BI3V9GufAU7rRD6iMOj3iTI0=)
2: gqWYwvqSEqDFNTUCcnGa5SDZF2E.roa (hash: jC0EOd0XvL5sRKBgmxuZafhPeS0sVcqw+4cs49iJ+mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:09:1c:8d:a7:1a:14:bb:e1:cd:17:20:5d:c3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Apr 17 12:01:12 2026 GMT
Not After : Apr 18 12:01:12 2026 GMT
Subject: CN=cf9a9804a1e64ea8fc916363071d941d13be4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:17:99:c2:d5:90:08:70:60:77:53:1c:f7:
ca:34:06:a1:50:70:13:21:b0:fb:26:32:42:60:d8:
d5:ed:66:d5:57:93:df:51:01:ec:da:19:3b:ed:21:
f5:a5:18:b3:1b:f7:c2:3c:14:52:3f:85:03:43:f5:
5e:5f:e0:7a:d7:0c:6f:77:93:45:89:9a:62:aa:9c:
4e:5b:59:9c:3c:a0:3c:07:92:19:77:91:a3:0d:17:
46:8c:18:33:c2:d8:e3:31:46:0d:9d:87:bd:84:ac:
c6:39:bc:40:15:1f:97:24:01:00:5e:1f:b3:55:0a:
2e:4f:ff:92:41:03:30:a9:2a:59:ed:a9:d6:61:88:
e7:0e:50:b4:7a:dd:f0:3a:89:cc:90:8e:fe:5d:96:
09:98:80:a8:61:ec:3f:e7:0d:f6:c6:7b:3e:0f:95:
96:df:b9:3a:fe:d3:ab:e3:58:62:86:05:21:63:d4:
3b:85:a2:1b:ef:fd:7e:d0:df:dd:6d:3e:88:37:d2:
fc:d8:b0:f7:b5:81:87:39:26:d5:7f:55:59:9d:11:
ed:b6:bd:9a:99:dd:e7:fc:4a:03:88:94:29:f0:2a:
79:fe:9b:d3:dd:91:f7:31:2a:0b:34:34:a1:65:e7:
7c:ef:ea:dd:87:b4:87:39:b9:7a:ab:e1:25:fd:49:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9A:98:04:A1:E6:4E:A8:FC:91:63:63:07:1D:94:1D:13:BE:4B:4F
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ce:db:f1:15:b0:52:1b:f3:29:99:35:68:41:84:ad:3d:ad:
89:16:3b:a0:87:c9:9d:ae:eb:b8:b2:0d:d3:cb:e5:bb:09:a3:
31:84:38:48:3f:0c:ba:35:68:9b:90:db:8e:72:8d:3c:1b:7a:
63:c7:61:0d:b5:40:03:4f:84:69:ac:2b:95:d6:85:0f:90:91:
06:d7:c8:96:96:81:9b:8f:f9:2c:9a:3f:73:fd:51:8c:5c:5c:
46:28:f7:7f:59:a3:82:fb:e4:4b:0e:18:3e:f9:67:ff:f0:b6:
32:29:58:07:d2:90:2e:1a:3d:30:f9:48:29:ba:55:53:93:bf:
02:17:43:45:36:39:0f:74:c2:cd:1a:3f:94:14:e0:e8:75:b7:
da:df:32:a7:a4:ac:59:bd:8d:b6:20:2a:cb:c2:ed:98:a1:00:
d1:79:3a:4c:35:c8:d7:35:4f:ee:29:58:69:7f:7d:11:00:68:
48:19:7d:48:56:8b:fa:71:b5:ab:40:c5:89:a0:b7:90:56:78:
c2:f1:15:bb:9f:97:e5:17:31:50:b9:89:f5:55:0a:62:89:0c:
b9:46:1a:7c:82:03:1c:84:0e:6b:ce:ed:c4:bc:22:7a:f6:9c:
ca:a2:6d:8e:c5:a8:94:c8:12:a8:11:a7:4c:32:3f:9c:e1:f6:
ee:23:0a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:26 2026 by rpki-client