Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: UMd8Kd10ZxJMoO8tZCeM0NRSHf9qQo2hu/nPb9CxYCU=
Subject key identifier: 04:A3:24:6A:43:B1:08:D5:27:A0:8E:47:6B:4C:8C:5E:31:A3:23:49
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019D9B19F72651C0C06CEFFE356BA4B80CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:01:03 +0000
Manifest this update: Fri 17 Apr 2026 11:01:03 +0000
Manifest next update: Sat 18 Apr 2026 11:01:03 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: QkqNmkk30U+lj13+hJd7nHb6H0m59GbIr3m5H9yUiW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f7:26:51:c0:c0:6c:ef:fe:35:6b:a4:b8:0c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Apr 17 11:01:03 2026 GMT
Not After : Apr 18 11:01:03 2026 GMT
Subject: CN=04a3246a43b108d527a08e476b4c8c5e31a32349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:45:ac:bf:0e:66:70:37:52:d6:40:c1:18:
91:09:05:9b:0e:f2:6a:0a:4b:70:6a:ff:03:6c:89:
25:d5:2e:f4:19:0a:9f:13:25:dc:c7:56:c0:89:06:
ad:2d:d4:ce:93:6c:6a:ee:fe:a0:e8:a3:ac:76:2b:
90:d9:44:ad:de:a8:a5:18:2e:4d:b3:d2:a3:17:22:
ac:83:fb:a4:f7:55:00:83:63:c9:5c:12:09:56:0a:
3c:32:47:8a:3c:64:7d:46:d9:e8:6c:42:cc:6d:9e:
9a:96:2d:83:2c:3a:1a:0a:0c:62:14:8f:a6:a4:e4:
e2:69:a6:c2:85:99:b0:e8:df:e0:67:82:fc:b1:a1:
59:56:12:34:6e:d5:17:4e:dc:15:02:ad:1f:a1:a6:
bd:db:e1:2d:d5:a2:3c:f0:90:06:92:00:08:b2:11:
2a:64:c6:96:d4:cc:53:37:89:b2:10:c2:c2:c5:d1:
a1:b2:4d:19:c0:bf:2b:da:d1:5e:eb:8d:8a:3d:51:
49:9c:6e:33:81:14:89:f5:bc:41:a3:ba:79:08:55:
8e:f4:4b:8b:8a:01:77:e0:3b:b8:55:68:73:fc:ae:
29:72:f0:95:4c:79:2c:78:1a:03:a6:8f:14:9e:b6:
60:bb:47:70:6a:e7:6a:90:91:b1:fb:2c:ed:f9:80:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:24:6A:43:B1:08:D5:27:A0:8E:47:6B:4C:8C:5E:31:A3:23:49
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7d:66:c1:2d:57:db:37:fe:48:04:da:13:e0:f9:06:52:8f:
e3:01:fb:dc:02:7a:5b:4a:c5:df:4d:d0:9d:25:b7:f1:7e:83:
63:95:1f:8c:a6:92:96:ea:3f:1d:df:6f:5b:e1:ef:a3:a9:c1:
8a:36:ef:9a:a6:38:af:ba:03:99:f4:06:d2:95:46:48:c0:44:
91:a4:61:89:5a:28:71:7d:39:f7:ff:05:53:9b:79:26:00:73:
28:34:a6:1e:3b:45:09:25:e5:84:e5:77:ce:e6:99:ac:d7:37:
48:bf:c4:73:0b:2c:7a:91:7a:5a:21:8d:06:a9:86:7a:c7:e9:
e7:67:47:0f:61:8a:f3:28:da:ac:8e:df:ae:b6:71:7f:38:f5:
d6:20:b3:ad:f8:b8:98:10:49:d0:81:f9:67:90:00:66:3f:06:
7c:63:ef:01:a9:c4:96:e0:51:da:14:78:10:8c:ff:e3:bf:d8:
e1:67:62:81:ce:5f:19:72:4b:f7:76:c3:5f:cf:d8:99:46:2c:
2a:f0:a4:da:fb:d3:ea:b0:ec:71:1e:dc:8d:63:c9:14:95:ae:
9d:7c:08:b2:7b:ad:68:fe:cf:b0:32:48:15:d4:bf:9e:13:ff:
99:6b:26:e2:5a:60:b1:b3:6b:18:94:b0:b1:c8:da:00:dc:bb:
98:cd:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:25 2026 by rpki-client