Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: PuPZEZn3AwX8PDqwh6RL4wGZd2y3UB/RbGV8K68pgTo=
Subject key identifier: 03:F4:62:34:75:DA:F4:05:8F:54:C8:9D:8D:7E:90:43:80:DA:9F:8C
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019CABA1CAF56FF92836D821468F0F90D789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 1114
Signing time: Sun 01 Mar 2026 23:00:33 +0000
Manifest this update: Sun 01 Mar 2026 23:00:33 +0000
Manifest next update: Mon 02 Mar 2026 23:00:33 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: FJ/ve7Tvq4HanRBXLKoZvcJyz/g1HhNUs7gjBYTSXOE=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ca:f5:6f:f9:28:36:d8:21:46:8f:0f:90:d7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Mar 1 23:00:33 2026 GMT
Not After : Mar 2 23:00:33 2026 GMT
Subject: CN=03f4623475daf4058f54c89d8d7e904380da9f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:bf:77:c8:c3:8b:d0:46:3c:a7:dd:da:5b:
e6:80:0b:27:9d:a2:81:7b:c2:fe:b2:20:61:35:49:
f8:55:d2:71:2e:b1:8f:6d:1b:f4:9b:80:d0:78:ec:
c1:73:d7:e3:f3:50:34:27:17:d7:5e:e5:d1:ca:39:
60:d8:18:70:23:cc:ba:5e:bc:06:e3:26:9b:a4:b2:
0f:c9:11:b7:80:03:5b:3d:7f:0e:0d:be:22:7c:71:
e0:6f:2c:9b:69:b2:77:90:8f:04:45:ab:b8:88:6c:
7f:aa:97:a3:9f:9a:c3:09:f2:a9:4b:94:06:86:e4:
8b:9a:bd:c5:49:4a:66:4e:65:46:b6:30:67:c9:16:
e9:27:2a:c0:c6:d2:fc:68:cb:90:d5:da:6b:04:8b:
28:33:f9:3a:fb:f2:7a:78:36:27:e2:b3:98:59:d4:
88:ee:10:40:be:77:91:d1:8e:b8:b7:29:f2:ea:a2:
96:2f:22:32:76:5d:b7:d0:a3:0a:6e:fe:cc:f3:fc:
81:85:3e:0e:3e:62:1d:2a:5f:0c:96:1d:24:32:cc:
fc:b0:2d:77:20:13:a1:a9:00:a8:12:85:fa:33:24:
4b:82:7e:3a:b9:3a:b2:c5:c1:1b:50:98:4a:89:9b:
23:fa:84:65:12:0a:eb:9b:b0:f2:af:41:16:da:2b:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F4:62:34:75:DA:F4:05:8F:54:C8:9D:8D:7E:90:43:80:DA:9F:8C
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:56:8d:00:58:91:a4:08:26:1d:fa:6a:85:1d:45:18:76:
c0:e9:44:41:9b:70:38:16:90:ae:ac:4e:80:a4:fa:61:49:d5:
db:78:fb:9a:39:01:ee:c7:5f:81:42:32:2e:5f:2a:cd:e6:3c:
4b:3a:2b:8e:54:76:f9:c9:da:79:1d:74:27:e0:50:c8:6e:42:
a2:f5:4b:7d:1b:a8:36:4e:ea:e0:09:6d:07:1d:e5:50:27:17:
53:f2:25:2a:59:35:1b:75:cb:d8:1d:b8:7d:d7:be:26:a2:73:
b1:5d:6c:7d:45:2e:be:b2:75:ba:90:d7:ba:26:a3:87:f5:24:
2d:a8:dd:38:1c:40:e0:24:cb:e1:11:3f:f9:eb:21:81:e7:7a:
ce:e3:eb:45:63:61:2a:5a:31:26:97:4c:06:b8:44:ff:e1:29:
59:93:01:53:62:7b:ee:66:d6:4f:ee:45:d3:ad:29:b6:fb:af:
d3:75:d4:9d:6e:b4:0d:6d:d5:e3:db:d2:ed:63:54:9b:5d:5a:
54:9c:df:ce:5e:4d:f2:98:53:e8:1e:40:6d:eb:1f:73:33:46:
02:bb:c8:1d:c6:02:96:4b:f3:f8:8d:95:66:9f:4c:d2:37:4a:
50:58:aa:3a:c9:e3:ce:4d:54:9a:3a:74:4e:3b:a1:b9:66:18:
86:9e:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:59 2026 by rpki-client