Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: 5KoJdAsmswMIXDZidtnCpjz75Xx/eXfJX1WxalvChmo=
Subject key identifier: 25:59:86:BC:FA:8D:95:39:33:DD:DB:0B:AA:36:97:19:FA:09:8C:2E
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 019D98F4CD5A39B6667E2FAC79386346443A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0F16
Signing time: Fri 17 Apr 2026 01:01:13 +0000
Manifest this update: Fri 17 Apr 2026 01:01:13 +0000
Manifest next update: Sat 18 Apr 2026 01:01:13 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: IMCW7BnRjqwQC0uTO0VL1z678dHToFwLku50LSJrpXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:cd:5a:39:b6:66:7e:2f:ac:79:38:63:46:44:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Apr 17 01:01:13 2026 GMT
Not After : Apr 18 01:01:13 2026 GMT
Subject: CN=255986bcfa8d953933dddb0baa369719fa098c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:87:6f:a3:b3:d2:d5:94:35:ea:a2:ec:9e:
82:59:90:ea:07:30:72:b0:5e:87:4f:e0:86:e3:8c:
11:36:9b:95:29:fb:6b:2c:97:84:d4:d1:84:8c:5c:
ea:01:69:9a:91:2c:b5:2e:70:74:ab:13:c2:55:2f:
d2:d3:a6:fb:28:bf:68:81:ac:91:f7:14:7a:a2:9b:
eb:3d:94:fa:0d:80:f2:04:0c:71:3d:c4:94:db:0d:
c4:91:86:34:e3:8e:0e:7d:ca:45:4a:56:79:d6:c3:
64:e6:6d:9c:67:b7:71:a7:9d:2d:d8:a9:c4:7d:44:
e5:7e:cd:43:7a:ef:f8:b9:68:3d:e3:c0:51:52:ca:
3c:dc:f4:33:e3:dd:12:0c:88:68:dc:5e:c7:6b:9d:
c3:05:b4:15:22:76:f9:4c:13:91:0d:35:94:e2:5c:
df:29:08:f8:8d:f9:af:9b:b5:b5:72:88:d1:53:4b:
ac:18:08:18:37:81:cb:4b:26:f5:37:18:cf:0b:fb:
41:81:9a:44:03:90:e2:87:fa:86:c2:df:3a:09:dd:
d8:74:e8:d4:4b:08:82:1f:0f:9c:ce:55:fc:4b:5e:
d0:a8:47:7e:b0:fd:80:ed:87:1e:4f:45:4f:7a:84:
a4:28:da:d0:8c:3f:bb:cc:2c:df:9e:c5:47:a5:70:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:86:BC:FA:8D:95:39:33:DD:DB:0B:AA:36:97:19:FA:09:8C:2E
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c7:2b:66:0d:d9:6b:7b:79:5e:ac:c3:28:ea:23:cc:32:bc:
6d:46:99:59:45:ce:0a:2b:35:85:67:04:3b:eb:bc:53:d0:bf:
c3:7a:02:d6:d2:04:ac:11:30:ee:85:1c:43:43:e9:ed:50:43:
1f:23:db:93:04:7e:af:15:27:43:1f:ce:77:fe:96:6f:2e:36:
c4:ec:fc:ca:3b:c5:3c:8c:20:5b:51:68:37:14:07:0c:b4:7e:
7a:00:45:25:67:e1:1b:ae:e0:a6:15:0c:8c:c1:f3:e0:2c:9b:
ce:3b:84:37:72:33:64:00:ee:5a:ab:c2:5a:e9:3f:60:c4:60:
43:99:17:7b:8f:99:d2:80:dd:7d:78:11:22:21:49:69:7c:73:
e6:e7:11:5d:5e:70:7a:c0:d4:76:67:38:9b:be:d6:03:51:5f:
96:39:79:cb:31:0d:a5:8a:f0:61:93:1e:97:5b:80:d1:88:40:
ae:6f:16:4b:d0:93:b6:a8:1d:28:05:42:c5:41:32:5c:2b:d7:
bf:22:5f:e3:29:eb:7c:87:98:5f:6a:b4:ee:93:00:00:92:c3:
83:46:82:09:34:f0:61:c7:64:cc:70:bd:1e:5f:4e:79:a3:0f:
90:f4:2b:14:bb:29:a0:6c:d4:ed:d5:54:7d:7d:44:3a:d9:e9:
9b:59:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:48 2026 by rpki-client