Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier: LuvseGR0YwjwEvo81iGwawo1ci4PXY5Tk0+5lW7Bz3o=
Subject key identifier: FD:82:68:5B:FE:59:D9:4C:C2:FD:8C:79:8D:FE:93:23:D2:44:7C:9F
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 019CAD5A34E961616117C039C98B05C39987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number: 0EEE
Signing time: Mon 02 Mar 2026 07:01:35 +0000
Manifest this update: Mon 02 Mar 2026 07:01:35 +0000
Manifest next update: Tue 03 Mar 2026 07:01:35 +0000
Files and hashes: 1: w3WwugLLFUcrItCxeJKoofI3afc.roa (hash: EnJ2zpdE5VsVYk/C8ci9QDlsMzJ01oLKtWbpS2SqvN8=)
2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: DSsgtP9NdbbgZXNC5HSLcmd5LgJ/P8CHHtiPx/Uepcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:34:e9:61:61:61:17:c0:39:c9:8b:05:c3:99:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Mar 2 07:01:35 2026 GMT
Not After : Mar 3 07:01:35 2026 GMT
Subject: CN=fd82685bfe59d94cc2fd8c798dfe9323d2447c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:eb:16:bd:76:cd:90:b3:9c:28:52:d3:6a:
f4:58:21:e9:90:cb:c0:e3:22:30:06:f6:d9:a8:d6:
7e:71:1b:58:0b:fc:9c:a2:ca:45:26:26:73:92:bd:
fe:6f:e7:b3:dc:eb:39:29:4f:5a:1c:a8:2f:7b:77:
b9:f4:a9:ac:b2:f2:fd:23:a1:fe:dc:8c:cc:56:63:
e7:0a:9f:f3:7e:6c:b8:d8:2d:d3:db:67:f9:2e:69:
3a:84:2e:47:60:b5:c3:75:2d:96:0d:17:59:4a:85:
01:9c:d4:38:fc:a4:61:e0:d2:30:18:af:cf:bc:2e:
0c:62:7a:3b:44:21:d1:b2:74:ac:2d:25:09:9e:58:
34:f2:01:ec:28:2d:78:68:8c:09:c0:92:24:47:e3:
8e:e2:9f:09:2c:64:c9:d3:72:ea:ab:0e:6f:23:e7:
f9:72:c9:de:df:fb:01:6e:f3:ea:fe:15:7d:95:e8:
cb:5c:da:af:89:94:1d:15:97:ca:7f:4a:e6:30:f6:
98:97:ee:99:f7:86:06:b1:4c:a0:f1:45:aa:6f:a6:
29:73:b5:b7:70:a0:b9:b0:f2:2f:04:d1:0f:33:ce:
b7:68:9d:d8:90:1a:07:83:1d:68:87:08:b8:1f:2b:
8f:a8:ae:5e:a8:21:3d:3f:de:ff:86:f3:b8:f5:fe:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:82:68:5B:FE:59:D9:4C:C2:FD:8C:79:8D:FE:93:23:D2:44:7C:9F
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bf:3b:79:23:38:93:5f:b8:7a:77:31:f8:83:2d:e5:7d:e8:
be:a5:dd:a0:9b:0a:2b:54:60:45:36:d4:5b:1c:cb:8d:7a:a8:
bd:6e:78:1c:21:cd:5e:48:b1:5a:ce:97:58:11:37:be:b8:67:
95:90:a5:b4:f6:ca:6a:1f:ef:ab:23:43:6b:50:ff:6d:11:35:
b6:5a:6e:68:56:38:f6:55:9c:07:53:91:17:44:c0:e3:0a:8f:
9d:a2:4e:f9:ed:ed:e8:d7:d6:6a:1c:80:07:fe:80:7c:bd:28:
6b:f8:91:29:c4:d4:64:9a:15:26:38:87:d3:17:5b:ed:66:f4:
c6:31:96:84:71:6c:49:d7:06:8a:53:ed:f9:c7:2c:a6:78:4d:
5c:04:13:65:3f:2d:d7:61:0d:ba:71:2a:bc:dd:e0:1d:43:ef:
59:61:03:d7:6d:0e:8b:63:ca:04:38:ac:be:ae:5f:b1:0e:46:
23:92:21:aa:f4:8d:5b:dc:db:a9:bd:3a:d9:e1:66:49:e7:2f:
52:3e:32:12:03:ba:19:08:1f:bf:aa:64:ba:21:55:ae:5a:e3:
36:6b:65:32:af:28:79:71:fd:f6:a8:48:8e:b8:99:0c:e2:37:
cf:ff:37:a7:10:59:80:e2:be:0c:cc:d7:d5:a6:be:d4:f0:14:
6b:1a:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:52 2026 by rpki-client