Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
File: zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft (raw, json)
Hash identifier: 7skM4ls6LoKabBZh/Vw88F8mvN0u3OTfe+hnHzDyqCA=
Subject key identifier: BA:FD:50:FE:5B:E4:DC:30:E2:66:33:8A:09:3E:6F:95:0F:2C:75:3F
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 019FAA87C87370C10219448A2A323C1F65D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:53 +0000
Manifest this update: Tue 28 Jul 2026 21:00:53 +0000
Manifest next update: Wed 29 Jul 2026 21:00:53 +0000
Files and hashes: 1: DNEldaHY2kEw4Rcm-XUfS7EOwDY.roa (hash: 9FqKHjD55WaTnWikw/XfEo/RJ5tXCDrBsU7KStjFO4U=)
2: mwC6MKa_JaWowyw2WhaQtGJ8cBU.roa (hash: oc9OWN5cse8gqT8UGgSTo1cj+MCP+VmGebDH3qUQknc=)
3: zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl (hash: UBCXAkY1MbiVOdr1EhdR5Bn8MAz3cUcReh7oNZJt5OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:c8:73:70:c1:02:19:44:8a:2a:32:3c:1f:65:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Jul 28 21:00:53 2026 GMT
Not After : Jul 29 21:00:53 2026 GMT
Subject: CN=bafd50fe5be4dc30e266338a093e6f950f2c753f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:dd:f2:df:51:13:6a:a9:9e:5b:26:aa:6f:
57:4a:15:44:c6:92:26:30:09:a6:31:b6:b6:82:01:
95:a6:18:c0:f3:47:cd:fb:6b:47:6b:80:30:63:40:
56:2e:6c:d6:40:2f:d0:03:c0:54:fe:1f:9d:80:af:
55:6f:dd:4a:e3:5e:0f:5d:ab:99:43:55:d3:ea:c4:
81:dd:3d:e0:f6:9e:01:8a:6c:6c:28:10:33:6c:c3:
e3:db:34:f7:bf:05:29:78:da:25:0d:81:a5:4c:88:
f2:4b:92:54:1f:f4:8b:dc:b8:46:96:1e:d8:54:da:
82:04:ef:b0:09:d4:0d:38:55:28:d8:d1:98:ce:ea:
d9:0a:99:5e:b8:57:d6:7f:09:c4:78:21:a4:9d:f0:
dd:ec:d9:1c:86:f9:3c:94:09:cb:2a:e6:d3:59:ef:
d9:4b:a6:38:19:c3:d1:fb:f6:1f:54:c6:d0:cd:73:
08:80:f0:ae:9e:17:d9:7c:46:96:5c:ab:a4:dd:dc:
03:ff:1c:5f:9d:c7:90:8e:67:cc:80:f1:04:26:1d:
3d:95:a1:58:76:71:62:47:db:f2:70:2f:7e:67:8d:
ca:3e:a1:05:65:ae:22:53:9b:6e:e8:ab:ff:ac:7a:
f0:e2:00:80:7d:1e:9c:c8:35:a7:52:ac:10:0b:97:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:50:FE:5B:E4:DC:30:E2:66:33:8A:09:3E:6F:95:0F:2C:75:3F
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:af:29:50:4a:09:12:b8:2e:1c:ae:9c:17:72:fd:dc:cd:c0:
9d:84:bf:63:2d:35:de:cf:76:c1:63:97:e1:37:f6:c5:12:0d:
6a:1c:3c:44:ce:5d:0c:b7:92:9a:17:c4:b7:13:4a:25:7d:5d:
96:28:f6:36:d0:31:22:59:2f:79:11:8d:e3:20:4a:ff:2f:33:
50:d9:ed:46:ba:89:5e:0a:ed:a5:59:f6:a1:b5:41:69:54:0c:
f7:db:92:5c:62:e9:e5:92:99:cf:47:cb:04:8a:75:e9:f8:b0:
29:0a:5c:5f:e3:d5:3c:1f:f1:02:7b:8f:38:d9:b3:65:20:14:
92:22:be:76:a7:01:fe:fb:3b:6b:c2:2d:91:2f:6a:ec:a3:e8:
d0:85:84:02:04:d0:27:00:ce:bb:98:64:61:12:00:13:84:89:
b9:3f:78:da:2f:53:3c:36:fd:79:70:72:71:86:6b:aa:11:8f:
8a:ae:60:21:c8:59:08:67:02:be:0e:61:fd:96:0b:00:0e:13:
86:8b:4d:4f:d2:17:c9:63:c8:6c:73:bd:bb:ef:fa:d7:2f:34:
b1:3e:0c:f2:2f:de:1e:5f:88:db:92:52:1f:9d:63:de:9b:00:
0e:36:33:62:bb:0d:64:0a:ae:8a:ad:2a:25:71:7a:9d:a9:3f:
71:fc:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:35:44 2026 by rpki-client