Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: KvJHPy+TA2uQr/8vucyb2/2iqHjhV+qgvVeWi0pnCWY=
Subject key identifier: AB:1A:EA:2D:F6:28:7B:49:4A:75:26:69:BC:32:F1:84:23:9D:DB:91
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019D992B6D94D7AB6F60CC2BAC773804E452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 118F
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: NigE3pl6EyWTsoW8/yxaLDV9F90xgC8glL2H2RQ2pJs=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6d:94:d7:ab:6f:60:cc:2b:ac:77:38:04:e4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=ab1aea2df6287b494a752669bc32f184239ddb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:25:e7:b4:8b:0f:6d:d2:4b:e3:c0:d1:eb:
37:2e:0b:af:4a:52:67:17:a8:be:54:b1:81:cc:e7:
c1:7f:67:3b:05:a7:35:dd:b4:27:24:75:e4:53:02:
52:20:9b:5f:fc:ef:83:2b:d9:b6:64:27:50:51:e1:
60:62:a8:c5:3c:20:80:be:60:df:ff:86:79:94:63:
84:7a:39:73:d7:aa:1e:5c:7a:ce:71:2d:aa:00:67:
ae:35:d4:6d:25:48:ec:3c:83:05:84:bd:15:1c:74:
f1:06:50:33:b8:7b:32:c5:a1:da:5b:0d:f4:0e:14:
ef:22:4a:e4:9a:52:83:85:5c:b7:ff:19:e9:6b:a6:
03:ea:a7:97:f1:4d:67:2a:75:70:fa:1c:7a:53:ea:
3e:4d:8f:32:b7:a7:cc:9a:68:3c:a5:1e:9d:60:d4:
99:ce:e7:87:80:e3:47:e9:5b:8a:2e:56:41:5e:aa:
f1:80:41:ba:f6:6e:e4:b6:af:1c:d4:6a:7e:0c:79:
0a:65:03:17:06:93:45:0c:c3:92:e5:ff:3b:84:64:
26:a1:ef:e6:28:07:50:5a:1d:7c:f6:71:5f:a3:a1:
4c:dd:95:dc:63:aa:b4:03:67:a3:b8:74:d5:00:2b:
30:44:9f:92:67:38:12:49:0e:23:ac:89:aa:a9:8f:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:EA:2D:F6:28:7B:49:4A:75:26:69:BC:32:F1:84:23:9D:DB:91
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a1:61:d4:5b:db:9f:93:19:c6:6e:ae:bd:5b:66:e5:a6:cc:
9a:52:30:54:da:39:a6:9c:02:eb:07:e3:9c:14:6c:93:69:c8:
41:98:af:66:59:ec:ce:74:57:92:7f:61:13:ee:fd:de:8e:de:
7b:bb:4e:0d:17:aa:ef:68:36:bf:2a:3b:18:d9:8e:be:4d:b4:
1e:bf:7c:82:d2:ed:9a:78:ca:68:6f:a6:c1:8d:59:1e:ab:ee:
16:59:9a:10:a0:7d:ce:c3:38:97:6e:e5:6f:b5:5d:81:48:d1:
64:76:e6:2b:5e:92:56:a7:db:2c:81:13:56:88:a4:50:e2:10:
68:2f:42:51:7f:33:7f:f1:e6:92:52:51:6c:ef:65:2b:9b:55:
6b:16:c0:bb:95:0e:83:35:08:fe:7b:81:31:2e:e0:8d:b2:bc:
d0:15:8d:5e:75:8d:f7:09:fb:2c:9f:78:ff:82:d7:90:21:d4:
46:3d:9f:48:7f:74:4b:61:72:13:1e:02:ed:fb:a6:24:21:b9:
4e:c2:81:c3:0a:16:73:8d:e5:07:0c:84:a0:c0:05:e7:d2:5c:
a4:9d:2f:11:2f:8e:ef:ce:47:87:cd:30:9e:c4:1e:87:3b:e0:
48:1d:df:92:71:fb:5c:07:53:65:d8:c8:66:cd:05:be:a9:16:
56:c2:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:18 2026 by rpki-client