Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: 9QJhCeUh/NoOfJnnttPEMJgxdPEJ+9tEIsQ4xSn0nU8=
Subject key identifier: 92:15:C2:54:98:BD:2C:68:FE:E9:E0:4F:E6:0F:66:7C:AC:44:EA:A7
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019ED3F475401FD5984EF314CF73F61D944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1964
Signing time: Wed 17 Jun 2026 05:01:13 +0000
Manifest this update: Wed 17 Jun 2026 05:01:13 +0000
Manifest next update: Thu 18 Jun 2026 05:01:13 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: STeozle5AAGdXLDPwFj+BM8E64jyTaOo+7Ch8MpvwWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:75:40:1f:d5:98:4e:f3:14:cf:73:f6:1d:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Jun 17 05:01:13 2026 GMT
Not After : Jun 18 05:01:13 2026 GMT
Subject: CN=9215c25498bd2c68fee9e04fe60f667cac44eaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:df:36:ac:60:18:1a:7c:9d:a0:f2:c6:6b:
31:52:d8:b7:cc:a9:63:cc:1a:05:42:e3:9d:18:72:
4a:23:41:97:9a:38:6d:cd:91:ab:52:1c:9a:f4:c5:
56:ef:de:c6:5e:fe:cf:ae:9f:28:c7:34:8e:57:e7:
05:37:b8:c8:a2:6a:3b:fa:25:8d:b3:3b:f9:8d:50:
d6:ed:f8:17:7d:e8:0a:a3:25:fd:dc:ab:d1:f5:f3:
9f:84:3c:df:2f:78:e8:cc:ca:03:6f:fb:fc:6b:9a:
1a:fc:05:a3:99:65:f4:54:1d:ee:25:9d:68:4d:19:
89:de:b4:15:fc:6d:ac:4c:cf:03:54:e2:ee:c1:ce:
33:af:37:5b:51:6f:fe:ed:ea:4d:cf:65:4f:9e:7b:
4e:08:07:63:52:97:40:6c:26:86:ed:e5:96:be:6f:
5c:95:17:44:ac:88:4a:c5:b0:ed:c6:01:7f:30:ef:
60:8d:c2:8e:e5:d9:b1:4e:de:e6:f2:1d:70:a7:32:
0d:5c:4d:ed:d5:62:e3:49:50:34:06:a0:1f:f4:ab:
d7:07:03:f1:97:ee:58:94:a8:5b:88:2b:25:ac:2d:
a5:92:e3:ac:65:bc:b0:1c:a5:77:c7:72:04:34:bd:
0f:4c:af:f3:72:b1:2b:0a:8d:5f:8e:68:14:72:7d:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:C2:54:98:BD:2C:68:FE:E9:E0:4F:E6:0F:66:7C:AC:44:EA:A7
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f9:6c:1a:ba:69:16:58:d6:a6:6a:ad:fd:97:bb:96:fe:45:
86:25:c8:f7:e0:5c:df:84:2a:a6:88:37:0b:e2:c7:8d:9b:b6:
bd:2f:ea:e8:bf:05:bb:8d:36:a2:ea:b2:3c:e5:5d:bc:47:1f:
5a:ea:94:c7:72:27:2f:11:67:d4:be:6a:06:be:d7:20:f0:24:
7b:54:0b:9e:12:a6:4c:60:ae:72:59:74:99:0a:7e:46:3e:0a:
1a:f7:0f:9b:c6:1e:85:94:3e:8a:e9:82:26:1c:c9:a3:c5:9d:
72:72:01:62:6c:07:b3:16:47:2a:c2:07:d8:33:c1:cb:9d:7f:
6d:f8:eb:d4:29:a7:3d:f1:57:ba:1e:b1:8a:77:6f:2b:f8:2b:
16:96:b5:f5:d5:b3:7b:e5:b8:d3:ad:e9:93:fe:b9:15:0e:27:
67:25:5e:eb:ca:44:cf:99:5f:9f:9c:be:c5:59:98:ff:b3:20:
41:c8:1e:0a:3b:63:60:61:24:3b:d6:aa:32:b6:45:2f:1c:de:
e8:2e:4a:08:7d:28:87:e6:ac:9a:e7:ce:09:50:4a:5d:50:42:
61:fb:1b:32:d5:7c:e4:6b:54:46:ec:fc:f3:53:c6:29:46:1f:
0a:ef:29:3e:56:39:b5:e8:2d:ab:19:e0:f0:e2:cc:07:b7:28:
b2:d4:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:21 2026 by rpki-client