Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: TcbaIrTbGTZJtOeDMPb3l7rz6yRUF/zvDKrdzQMyILQ=
Subject key identifier: 3F:59:83:4A:B5:7C:ED:1D:6A:8D:9E:36:18:A8:4F:33:8B:B7:FC:62
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019FAC3F404F56A5D701613CE73731FC862E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 12A2
Signing time: Wed 29 Jul 2026 05:00:54 +0000
Manifest this update: Wed 29 Jul 2026 05:00:54 +0000
Manifest next update: Thu 30 Jul 2026 05:00:54 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: VEHghP8rgAPv+WN7HGPKeExQkmFGZim9u0A7TzIr0HU=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:40:4f:56:a5:d7:01:61:3c:e7:37:31:fc:86:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jul 29 05:00:54 2026 GMT
Not After : Jul 30 05:00:54 2026 GMT
Subject: CN=3f59834ab57ced1d6a8d9e3618a84f338bb7fc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:19:56:c9:93:d8:1b:1e:68:27:e7:8d:9e:
4f:bd:a7:4c:7b:59:16:cb:ba:8b:3e:0f:c2:f7:c2:
e1:2b:34:20:45:44:fd:de:f4:54:27:16:e7:71:bf:
53:c9:ac:35:e1:73:81:39:bc:f0:7d:2e:a6:99:1f:
54:61:4f:d6:9f:b2:6c:96:ca:52:f7:09:57:e5:5b:
38:00:31:9d:12:85:93:c2:f2:bb:0c:e9:4b:e4:db:
57:c0:51:74:e4:83:31:35:a7:b1:71:ce:08:1d:79:
d8:20:45:43:a8:62:f4:3e:65:d6:ba:e0:57:e2:c8:
01:73:63:bb:7e:1f:f4:ab:ff:41:38:19:44:48:a8:
eb:58:f2:c7:3b:e7:5f:3f:f7:f7:b9:a9:ab:55:be:
2f:b3:8b:03:28:8c:77:4f:fb:59:4c:c3:06:a6:2e:
db:4f:b4:f6:e7:73:00:d6:b6:36:2e:9a:51:c1:dc:
52:d5:1d:e8:c6:bb:0c:28:ce:49:3a:06:d2:ab:d8:
9a:c6:22:92:21:b1:96:d8:5c:39:ea:c9:ab:7c:1f:
1d:99:28:92:19:65:9f:b3:ec:af:47:55:69:c1:51:
9f:42:02:42:1a:41:40:d6:71:7c:ce:39:e3:fd:dc:
1d:3c:7e:84:f6:5e:56:86:09:43:84:5c:7c:64:b1:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:83:4A:B5:7C:ED:1D:6A:8D:9E:36:18:A8:4F:33:8B:B7:FC:62
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ef:4e:7f:4a:dd:16:9b:99:3e:03:a3:63:43:f9:61:50:18:
75:aa:2b:dd:82:81:b8:46:28:8c:6c:33:56:bd:05:8d:97:63:
d3:6f:74:89:c2:8f:00:a5:f9:13:95:92:80:84:55:e0:ab:05:
e7:79:d4:eb:ee:b2:53:f8:81:04:37:36:9a:09:61:32:b0:47:
dd:63:43:36:64:62:d2:69:0f:0e:d3:ff:4a:23:a3:d5:a5:4a:
31:00:44:62:e5:24:88:a5:6c:9a:1f:a0:84:8a:3a:c8:2d:24:
a8:c7:a3:e6:9b:7d:4f:c1:40:96:b8:8d:83:ef:50:47:a0:9b:
ab:bd:71:37:88:0b:dc:7d:78:ec:5c:97:e0:a1:c6:70:98:19:
ab:bb:69:5e:e0:4f:19:09:46:73:e1:c5:2c:94:c9:53:6e:03:
79:30:3a:ab:63:9c:fd:23:d7:ec:65:5b:95:17:a0:26:20:7e:
85:55:1f:31:65:35:76:5d:e3:24:a7:63:bb:bf:41:6a:45:48:
df:54:9d:98:0d:89:ef:a8:ba:ab:b0:29:39:fc:7a:66:2f:09:
bc:a3:85:cd:65:5f:95:7a:41:8d:f6:64:83:90:c6:3b:d1:79:
42:16:d7:c3:3f:70:e8:7b:3b:58:c2:8c:c1:25:ec:ed:56:9d:
2b:55:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:25 2026 by rpki-client