Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: UqctiBuPwhbUmOuCo/btmU76QsxEYjIvTVltxaorkRk=
Subject key identifier: 3B:4C:8A:DC:83:2E:1E:C9:30:5F:C7:C9:D0:34:18:D1:E1:FC:9F:62
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019CAD90B412A40C455365DE5522245C4209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 08:01:07 +0000
Manifest this update: Mon 02 Mar 2026 08:01:07 +0000
Manifest next update: Tue 03 Mar 2026 08:01:07 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: Qrxtejt2QRxnPZ2SDlzj3K/jhi8gtXgCRyRR3v8go8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:b4:12:a4:0c:45:53:65:de:55:22:24:5c:42:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Mar 2 08:01:07 2026 GMT
Not After : Mar 3 08:01:07 2026 GMT
Subject: CN=3b4c8adc832e1ec9305fc7c9d03418d1e1fc9f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:a7:a3:76:f6:56:70:cf:40:b0:98:7d:82:
da:ea:bb:18:51:c9:7f:62:6b:bf:a0:c6:3a:ee:43:
88:e7:11:3f:bf:59:7a:ca:12:37:06:ad:f4:2f:92:
39:79:e2:0d:4e:21:67:d4:5c:01:7c:4c:16:7b:91:
23:11:a1:9f:28:fa:3c:ff:5c:fb:7d:22:8a:ed:ea:
12:ab:04:33:bb:1a:e6:51:92:21:64:83:e4:c0:28:
08:b7:24:f2:61:0a:29:76:06:af:37:03:db:51:df:
2d:b9:76:2f:af:e6:b7:a6:b4:94:b5:64:94:43:0f:
0c:18:84:8e:e1:b9:33:c0:af:73:bd:ec:e3:2b:49:
96:dd:07:14:39:de:56:3d:e7:0f:54:c7:da:b3:dd:
2f:73:f8:61:4c:1c:1d:10:b5:89:d1:b0:1e:f4:43:
42:14:52:5a:e1:c1:28:c7:e2:ff:46:63:1e:01:4c:
35:b4:a6:22:b1:8c:ee:ac:5e:73:9e:15:6b:af:c4:
20:c7:6d:f5:8a:8f:4b:5f:0e:05:18:f9:b7:09:be:
7b:49:07:c2:c4:5c:7d:90:85:aa:33:6c:0f:db:aa:
5e:7d:42:28:bf:5e:d3:60:5d:db:d5:4d:47:ef:ca:
ea:fa:43:60:e5:24:85:a2:23:71:e4:ed:1b:b8:ed:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4C:8A:DC:83:2E:1E:C9:30:5F:C7:C9:D0:34:18:D1:E1:FC:9F:62
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:80:62:71:44:03:63:57:83:0d:e5:36:32:a2:aa:56:b5:40:
5e:26:aa:bd:a7:a5:84:cc:d4:69:fb:f6:76:2c:5b:fc:eb:13:
65:e3:95:0e:e4:c1:84:7d:2d:d6:b8:23:bf:67:c0:53:91:e7:
0f:21:a5:6d:9b:a2:cd:c4:9f:7d:f3:5d:4a:3a:9f:b4:c4:f0:
85:63:20:e7:5a:c3:95:99:fc:ce:27:10:a9:dc:bb:c8:c2:19:
9a:f9:f7:12:16:02:73:83:9f:4f:ce:71:a8:a0:34:b9:0c:80:
65:22:f4:59:0e:67:4d:e8:2d:33:f6:d5:b8:32:c3:61:56:38:
8b:ce:95:97:a6:3c:e4:de:31:79:aa:3e:2b:cc:1a:73:1a:1e:
9d:65:32:ac:97:37:46:88:18:ee:04:89:55:3f:c9:06:cc:a7:
69:16:07:fa:fd:f1:42:f2:77:9f:4d:76:35:90:5d:33:c8:d5:
15:c5:35:ed:a1:bc:43:b5:cb:cc:4c:b3:ca:ad:16:9a:34:3a:
c7:48:08:75:4e:4c:e0:48:a9:d5:46:25:71:c8:b6:62:5c:56:
3f:b6:50:96:50:51:44:fc:96:e8:ec:40:bf:1b:b2:c7:4f:ba:
09:af:9f:1d:ba:d0:8b:34:8f:48:70:e2:e6:69:0e:f0:56:52:
28:19:3d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:06 2026 by rpki-client