Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: yXZE+D7Iaf+1DtND2DkKlUol7o8+cyWeaJsr0GQw9X4=
Subject key identifier: 3B:04:25:02:32:60:60:C3:DA:57:99:96:A1:A6:F7:D4:5B:FC:B6:45
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 01A0C8217EC7DE9B773193141091DE420D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 1335
Signing time: Tue 22 Sep 2026 08:00:33 +0000
Manifest this update: Tue 22 Sep 2026 08:00:33 +0000
Manifest next update: Wed 23 Sep 2026 08:00:33 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: RYaz1Ek2qxIOAQkX+o+bbWCRFWyZZIjYaG10Prae15c=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:7e:c7:de:9b:77:31:93:14:10:91:de:42:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Sep 22 08:00:33 2026 GMT
Not After : Sep 23 08:00:33 2026 GMT
Subject: CN=3b042502326060c3da579996a1a6f7d45bfcb645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:74:12:d3:1b:cb:0d:6d:3c:cb:2b:88:07:
51:bb:e6:b4:4d:37:f2:37:a5:90:c0:53:de:12:8d:
d7:12:0f:5c:79:9c:1e:42:34:8d:58:36:9d:3d:00:
d0:31:3a:df:c3:14:c4:e3:4d:1b:4f:36:d7:7a:82:
4b:8a:10:22:39:a5:b5:dc:90:42:92:34:27:fe:17:
d9:29:22:9d:7f:59:00:63:40:b1:16:2d:ae:d9:de:
ac:1e:d5:4e:d9:b5:69:83:aa:99:a1:74:9d:70:9c:
4c:5d:29:ef:26:cd:b2:92:2a:b7:15:96:d0:b3:b1:
44:e9:9d:23:a7:8d:e7:60:49:c1:6b:f5:7d:c2:aa:
a9:2f:ec:d7:60:38:ad:4d:9c:a7:2c:e2:94:dc:15:
29:dd:ea:ea:a4:49:42:2f:fe:52:c5:8b:8e:60:14:
f8:b5:0c:9b:78:ba:3d:a1:44:2a:cb:3e:c5:59:d6:
89:ee:02:f5:2e:ac:3d:1a:8e:19:36:1e:a4:39:ff:
ea:36:78:be:1c:48:fd:2e:d4:5c:e5:72:ea:e1:9f:
cb:50:b1:e6:f4:16:e9:49:bd:82:df:63:47:40:6a:
ab:19:25:f3:68:78:9f:e0:82:da:ac:88:29:54:fe:
67:e8:58:b9:0e:18:8d:df:39:57:13:e4:3e:c3:c9:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:04:25:02:32:60:60:C3:DA:57:99:96:A1:A6:F7:D4:5B:FC:B6:45
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:56:0a:c0:88:67:b4:c0:dd:4d:92:00:db:56:1b:53:e6:e4:
3f:a5:03:e2:be:b8:ae:d2:28:e1:79:3f:fa:a1:07:2e:56:30:
cf:ec:f8:76:79:45:41:da:f4:5c:3f:35:a0:50:da:3a:96:25:
33:66:56:26:d7:99:19:ce:67:3d:3a:f0:00:b0:14:78:5b:9f:
e5:18:dd:b6:fc:9b:29:59:9d:a8:06:d0:b2:0f:a4:b4:c3:84:
d9:57:fb:fc:0f:8d:df:32:f8:4e:95:ac:da:f7:f7:ad:bc:7d:
69:90:47:06:c4:bd:48:b2:83:b0:2a:ac:c8:9e:1f:cc:65:61:
9e:67:eb:22:9a:99:cb:4c:06:35:a8:d3:81:c5:6e:bb:f9:fc:
29:4f:3a:9a:d7:b4:54:4a:72:3a:df:d0:48:17:c2:89:19:b9:
e2:09:0a:56:3b:24:83:63:ae:02:f7:1c:77:b6:7c:ad:9b:91:
a5:91:21:80:01:3d:4b:2f:f1:a6:62:fa:3a:46:b5:f4:fa:b6:
79:b4:21:fc:33:59:c7:78:b3:ce:13:bc:51:62:1b:61:bf:8e:
09:1e:d6:96:8c:e8:32:04:e9:3f:bf:c5:fd:28:e2:8b:f6:72:
28:87:e7:29:48:70:ff:95:49:c1:d6:a2:e6:61:9f:6a:2d:cf:
8e:0c:f8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIIX7H3pt3MZMUEJHeQg2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3
MTVkYzkwHhcNMjYwOTIyMDgwMDMzWhcNMjYwOTIzMDgwMDMzWjAzMTEwLwYDVQQD
EygzYjA0MjUwMjMyNjA2MGMzZGE1Nzk5OTZhMWE2ZjdkNDViZmNiNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT90EtMbyw1tPMsriAdRu+a0TTfy
N6WQwFPeEo3XEg9ceZweQjSNWDadPQDQMTrfwxTE400bTzbXeoJLihAiOaW13JBC
kjQn/hfZKSKdf1kAY0CxFi2u2d6sHtVO2bVpg6qZoXSdcJxMXSnvJs2ykiq3FZbQ
s7FE6Z0jp43nYEnBa/V9wqqpL+zXYDitTZynLOKU3BUp3erqpElCL/5SxYuOYBT4
tQybeLo9oUQqyz7FWdaJ7gL1Lqw9Go4ZNh6kOf/qNni+HEj9LtRc5XLq4Z/LULHm
9BbpSb2C32NHQGqrGSXzaHif4ILarIgpVP5n6Fi5DhiN3zlXE+Q+w8mPVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsEJQIyYGDD2leZlqGm99Rb/LZFMB8GA1UdIwQY
MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt
M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh
LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlYKwIhn
tMDdTZIA21YbU+bkP6UD4r64rtIo4Xk/+qEHLlYwz+z4dnlFQdr0XD81oFDaOpYl
M2ZWJteZGc5nPTrwALAUeFuf5RjdtvybKVmdqAbQsg+ktMOE2Vf7/A+N3zL4TpWs
2vf3rbx9aZBHBsS9SLKDsCqsyJ4fzGVhnmfrIpqZy0wGNajTgcVuu/n8KU86mte0
VEpyOt/QSBfCiRm54gkKVjskg2OuAvccd7Z8rZuRpZEhgAE9Sy/xpmL6Oka19Pq2
ebQh/DNZx3izzhO8UWIbYb+OCR7WlozoMgTpP7/F/Sjii/ZyKIfnKUhw/5VJwdai
5mGfai3Pjgz4UQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:02:59 2026 by rpki-client