Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: Cjea3hWaDz1WqoBG4qjVyI+k8pgVM40uDG8nUNtdcxM=
Subject key identifier: 19:C1:63:76:2A:4E:EA:C8:FD:73:03:14:4D:9D:F2:C2:05:6E:78:52
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 01A10BB8F18337ED0419208D1E347902453F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1A8A
Signing time: Mon 05 Oct 2026 11:00:32 +0000
Manifest this update: Mon 05 Oct 2026 11:00:32 +0000
Manifest next update: Tue 06 Oct 2026 11:00:32 +0000
Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: GvPulCjMofByzhgAvlUqhhfxSwucY/Su1BdBnj78KRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b8:f1:83:37:ed:04:19:20:8d:1e:34:79:02:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Oct 5 11:00:32 2026 GMT
Not After : Oct 6 11:00:32 2026 GMT
Subject: CN=19c163762a4eeac8fd7303144d9df2c2056e7852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:ff:b8:49:60:ae:c8:bd:26:f2:21:68:b9:
69:d7:7f:25:6e:a7:7a:7a:d4:ac:dd:9d:8f:91:d7:
7c:34:fd:75:60:5b:5b:08:bf:6d:cf:dd:f9:06:5c:
e8:67:d0:5c:7c:6d:74:26:09:c0:82:61:c8:62:9e:
cf:21:2b:16:4d:bf:0b:f3:6f:51:8f:b3:c6:ff:65:
67:a5:90:fb:d1:32:1f:72:ef:36:97:bb:4b:bf:3d:
86:0e:7e:e0:ff:58:6f:93:85:48:2c:46:58:a1:6f:
66:1a:a0:b8:a8:c4:2e:4d:3c:70:6d:ea:55:e3:3a:
a0:c1:04:91:7f:fd:2a:47:69:00:d5:12:2c:07:f4:
c2:de:0f:ec:32:77:2d:d1:26:e5:f4:cb:38:b3:1b:
32:3e:89:24:f2:48:44:e3:d5:5a:e8:46:69:0b:a3:
83:f2:91:90:1f:03:8f:1c:27:d2:3f:c6:cc:09:b7:
f6:a9:e6:75:0e:fd:43:4c:f1:1b:fd:a7:79:a5:4c:
34:9a:9a:10:a2:f8:2a:69:35:da:2a:e0:6d:40:24:
cc:63:d1:0a:57:76:c4:93:ef:45:dd:45:cb:89:63:
fc:25:21:16:e2:ed:26:ad:96:ca:2c:04:4c:4a:b4:
74:9e:44:1a:c4:03:88:86:4e:ce:4b:1a:f1:51:28:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:63:76:2A:4E:EA:C8:FD:73:03:14:4D:9D:F2:C2:05:6E:78:52
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6b:7e:8f:ad:96:b4:a9:28:98:19:e0:77:7e:4c:73:53:80:
2f:7e:a2:13:5a:60:9a:2d:b6:1a:e6:10:27:06:9f:0d:ab:e6:
71:e7:c9:50:1e:94:5e:98:9d:a3:77:e9:0e:28:5d:20:85:28:
2e:be:c6:45:74:b2:4f:6d:57:86:66:0f:cc:ea:7c:64:f1:77:
5a:c1:a8:6d:99:84:e2:24:81:b8:ff:83:db:ac:54:f6:57:aa:
22:32:aa:ae:ba:ed:78:d6:31:7e:4d:10:54:e1:19:db:c6:31:
98:c7:76:bf:ee:5b:07:3e:cf:64:99:02:23:74:cf:92:20:57:
b9:ed:6b:71:e8:84:3c:2a:20:42:59:ba:f2:ee:e5:6e:03:8d:
bd:e8:be:c6:45:00:4f:72:ba:16:97:de:c3:e6:92:48:ce:d6:
5e:a5:29:88:63:c0:03:32:39:b4:be:82:d8:18:74:03:00:9f:
1c:fb:7b:c2:d9:7c:ac:f6:c1:7d:54:ba:7c:b6:c3:26:38:9e:
dd:41:75:b2:7e:82:30:9e:00:11:a7:25:36:f0:f9:ce:1f:57:
33:aa:d4:f0:9c:89:05:95:af:de:5a:89:16:9a:23:82:5f:80:
c3:70:65:16:cc:b1:ac:b9:77:b3:75:0d:75:cf:11:58:a9:67:
a0:37:ed:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaELuPGDN+0EGSCNHjR5AkU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjY4ZWMxMjdmYjMyYzY3OTIxOGFmYzc2ZTFiNmVhYTU5
NTIxYmIwHhcNMjYxMDA1MTEwMDMyWhcNMjYxMDA2MTEwMDMyWjAzMTEwLwYDVQQD
EygxOWMxNjM3NjJhNGVlYWM4ZmQ3MzAzMTQ0ZDlkZjJjMjA1NmU3ODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOD/uElgrsi9JvIhaLlp138lbqd6
etSs3Z2Pkdd8NP11YFtbCL9tz935BlzoZ9BcfG10JgnAgmHIYp7PISsWTb8L829R
j7PG/2VnpZD70TIfcu82l7tLvz2GDn7g/1hvk4VILEZYoW9mGqC4qMQuTTxwbepV
4zqgwQSRf/0qR2kA1RIsB/TC3g/sMnct0Sbl9Ms4sxsyPokk8khE49Va6EZpC6OD
8pGQHwOPHCfSP8bMCbf2qeZ1Dv1DTPEb/ad5pUw0mpoQovgqaTXaKuBtQCTMY9EK
V3bEk+9F3UXLiWP8JSEW4u0mrZbKLARMSrR0nkQaxAOIhk7OSxrxUSi2+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnBY3YqTurI/XMDFE2d8sIFbnhSMB8GA1UdIwQY
MBaAFM32jsEn+zLGeSGK/HbhtuqllSG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUt
OTgyNDZhNGNiNmY4LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUtOTgyNDZhNGNiNmY4
LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWt+j62W
tKkomBngd35Mc1OAL36iE1pgmi22GuYQJwafDavmcefJUB6UXpido3fpDihdIIUo
Lr7GRXSyT21XhmYPzOp8ZPF3WsGobZmE4iSBuP+D26xU9leqIjKqrrrteNYxfk0Q
VOEZ28YxmMd2v+5bBz7PZJkCI3TPkiBXue1rceiEPCogQlm68u7lbgONvei+xkUA
T3K6Fpfew+aSSM7WXqUpiGPAAzI5tL6C2Bh0AwCfHPt7wtl8rPbBfVS6fLbDJjie
3UF1sn6CMJ4AEaclNvD5zh9XM6rU8JyJBZWv3lqJFpojgl+Aw3BlFsyxrLl3s3UN
dc8RWKlnoDftmA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:18:36 2026 by rpki-client