
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: btcSZN/5xr3wKkkLBBEFPDg/wvb5YUAUiCDAbcMPb9k=
Subject key identifier: 9E:81:E5:1B:DC:73:79:64:65:F9:A8:F2:C9:51:EA:E8:E1:C0:20:D1
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019EC0A42C8435284998D2269B63004D5685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 1228
Signing time: Sat 13 Jun 2026 11:00:45 +0000
Manifest this update: Sat 13 Jun 2026 11:00:45 +0000
Manifest next update: Sun 14 Jun 2026 11:00:45 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: tYjtJgaa98K97Zf8UQfu8BTn5X4DKks/trAoKoADKeI=)
2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=)
3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:2c:84:35:28:49:98:d2:26:9b:63:00:4d:56:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jun 13 11:00:45 2026 GMT
Not After : Jun 14 11:00:45 2026 GMT
Subject: CN=9e81e51bdc73796465f9a8f2c951eae8e1c020d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:8a:71:44:ba:11:dc:83:f0:85:d5:23:45:
6a:39:ea:f9:c5:45:d9:8c:8b:e3:87:29:5f:e7:c6:
c3:02:2b:d6:a7:27:e5:c0:a0:9b:d0:79:af:23:0d:
47:4a:79:5e:43:0c:42:be:1a:7e:6f:44:2b:cc:ee:
cd:18:72:58:90:5c:4d:60:c0:03:88:c7:c4:6a:70:
70:f9:d1:61:b2:73:2c:bf:ed:10:81:40:2a:40:6a:
68:e4:61:46:95:fd:e0:0e:8c:1b:b6:78:43:03:66:
98:61:70:c5:7c:3e:71:da:91:fc:f6:c4:39:23:4e:
51:2f:6d:b5:ff:e0:ff:47:2f:2f:50:0e:19:85:e3:
62:0e:9a:29:51:be:05:ac:a9:f8:7e:df:e0:d4:f7:
1a:60:02:f4:d3:a5:3e:08:e4:cd:d3:8c:06:e0:d4:
f7:b9:d1:3a:7b:dc:43:04:a4:5f:f6:5b:59:9b:5b:
83:8b:c3:c1:8f:9b:0d:e2:55:56:41:a9:da:aa:e7:
60:03:e6:3e:92:2b:42:ee:22:d0:97:80:cd:dc:5f:
ad:59:2f:8a:62:ce:67:6c:92:c7:ac:89:9e:95:60:
51:88:7c:75:a7:05:6e:3d:9f:ad:47:77:b5:43:e4:
cf:57:31:7a:01:9e:5d:af:b8:27:80:26:a9:7a:58:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:81:E5:1B:DC:73:79:64:65:F9:A8:F2:C9:51:EA:E8:E1:C0:20:D1
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:d0:f9:6e:a4:d2:68:2f:d6:e1:4d:9b:8b:ad:63:56:12:
74:0a:83:c5:4e:8e:ce:45:f9:3d:2f:16:00:cc:ea:dd:91:6c:
1a:d5:4a:92:18:ac:47:7e:69:ba:cf:4f:6f:5e:ef:2a:b2:40:
d5:74:f6:f8:0e:81:77:b3:00:1d:0f:a3:24:32:1b:60:04:35:
dd:78:8a:4a:9c:68:b1:e5:77:72:a1:4c:2f:e2:8d:d9:72:b6:
ac:29:20:75:fd:c1:13:7c:a7:5f:a0:db:2a:62:8a:5e:40:df:
78:fe:59:6a:8e:9d:7f:3b:42:e4:d5:7a:71:1f:4c:0c:91:43:
ce:b4:06:0b:6a:28:1b:eb:b6:7c:4c:b9:d0:71:fd:57:f9:7d:
66:9d:90:4a:87:38:0b:95:d8:0a:37:55:7c:a5:f8:a4:dc:49:
cb:c8:c6:45:98:e0:0c:e8:14:ab:67:fc:1d:31:35:21:d6:6a:
2a:7b:dc:97:47:6d:1b:cd:0a:d3:e4:c6:bf:54:5f:79:96:ae:
62:ae:b1:29:57:6c:f3:43:00:b2:d1:94:02:07:5b:f1:95:a8:
d3:f5:d6:47:c4:fe:4f:61:40:22:2e:ff:20:f7:8d:af:13:cf:
d4:cd:43:e7:54:c2:d8:0f:37:64:90:25:01:82:63:84:95:ba:
62:a4:3b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApCyENShJmNImm2MATVaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3
MTVkYzkwHhcNMjYwNjEzMTEwMDQ1WhcNMjYwNjE0MTEwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZTgxZTUxYmRjNzM3OTY0NjVmOWE4ZjJjOTUxZWFlOGUxYzAyMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K6KcUS6EdyD8IXVI0VqOer5xUXZ
jIvjhylf58bDAivWpyflwKCb0HmvIw1HSnleQwxCvhp+b0QrzO7NGHJYkFxNYMAD
iMfEanBw+dFhsnMsv+0QgUAqQGpo5GFGlf3gDowbtnhDA2aYYXDFfD5x2pH89sQ5
I05RL221/+D/Ry8vUA4ZheNiDpopUb4FrKn4ft/g1PcaYAL006U+COTN04wG4NT3
udE6e9xDBKRf9ltZm1uDi8PBj5sN4lVWQanaqudgA+Y+kitC7iLQl4DN3F+tWS+K
Ys5nbJLHrImelWBRiHx1pwVuPZ+tR3e1Q+TPVzF6AZ5dr7gngCapeljozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6B5Rvcc3lkZfmo8slR6ujhwCDRMB8GA1UdIwQY
MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt
M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh
LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq3Q+W6k
0mgv1uFNm4utY1YSdAqDxU6OzkX5PS8WAMzq3ZFsGtVKkhisR35pus9Pb17vKrJA
1XT2+A6Bd7MAHQ+jJDIbYAQ13XiKSpxoseV3cqFML+KN2XK2rCkgdf3BE3ynX6Db
KmKKXkDfeP5Zao6dfztC5NV6cR9MDJFDzrQGC2ooG+u2fEy50HH9V/l9Zp2QSoc4
C5XYCjdVfKX4pNxJy8jGRZjgDOgUq2f8HTE1IdZqKnvcl0dtG80K0+TGv1RfeZau
Yq6xKVds80MAstGUAgdb8ZWo0/XWR8T+T2FAIi7/IPeNrxPP1M1D51TC2A83ZJAl
AYJjhJW6YqQ7VQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:17:02 2026 by rpki-client