Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier: erLpO/4PswOZEjmbzwl8TW0oipSUEFSruIkvfW+E9EE=
Subject key identifier: 4B:40:41:28:F6:E3:67:8B:A6:B1:2E:70:62:6A:13:67:FF:55:74:5E
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 019D9CD155409436CAF8722E5DE5F5F4C79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number: 0F6A
Signing time: Fri 17 Apr 2026 19:00:57 +0000
Manifest this update: Fri 17 Apr 2026 19:00:57 +0000
Manifest next update: Sat 18 Apr 2026 19:00:57 +0000
Files and hashes: 1: w3WwugLLFUcrItCxeJKoofI3afc.roa (hash: EnJ2zpdE5VsVYk/C8ci9QDlsMzJ01oLKtWbpS2SqvN8=)
2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: y9IKTANjP6vAguxvjiCk4fEw8+HRxWX3CkNsMenfET4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:55:40:94:36:ca:f8:72:2e:5d:e5:f5:f4:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Apr 17 19:00:57 2026 GMT
Not After : Apr 18 19:00:57 2026 GMT
Subject: CN=4b404128f6e3678ba6b12e70626a1367ff55745e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:30:73:2f:3f:61:e2:d0:05:d3:4d:1a:7e:
32:ea:42:a2:7f:c8:a0:c5:93:83:89:11:68:67:d3:
31:21:b4:29:ed:12:82:53:26:7d:e1:32:57:e1:1e:
e7:b8:31:08:39:74:a0:46:55:74:0a:42:08:49:6e:
0e:06:be:28:27:59:71:8d:b6:a7:a3:17:77:c8:51:
11:89:3f:cd:f8:e2:23:13:0c:7d:a3:fd:ea:54:d6:
92:fe:ee:ca:f5:ba:b5:38:61:91:3d:eb:09:0b:64:
33:de:be:89:1b:40:67:1b:ad:85:c0:d3:44:4d:a4:
bc:f4:f6:90:e0:0d:9e:b5:9b:88:6a:4f:ba:3d:bc:
40:b6:08:1d:52:44:0f:27:97:6d:fe:71:a2:bf:7f:
22:a6:aa:50:28:20:98:c4:27:36:1c:ff:17:41:a4:
c8:16:8d:36:2e:41:52:88:5a:ab:6f:b4:92:27:01:
2c:1a:45:67:89:ee:9f:26:8d:07:c6:d3:e0:88:9c:
4b:70:fe:8f:79:46:c5:fd:2a:d8:f8:4b:87:58:a4:
23:d7:dc:2f:e9:c1:ee:9c:8a:19:89:a2:31:c7:3a:
7b:36:2f:ba:6c:ad:94:5c:6d:84:f8:4b:37:c8:5f:
4f:2a:87:67:90:bf:d6:c9:95:e8:74:69:87:02:ae:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:41:28:F6:E3:67:8B:A6:B1:2E:70:62:6A:13:67:FF:55:74:5E
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:7f:e2:b5:37:70:11:36:09:c4:f1:7b:45:7c:78:12:ba:
74:00:d6:b3:66:3a:7c:fe:30:72:c4:d6:43:48:de:4c:d0:c0:
e9:c6:0c:31:5a:6c:93:f9:14:cd:aa:62:4e:9d:83:5d:01:e6:
3c:a4:ae:ed:9e:aa:e8:c3:da:2e:d9:55:a0:c1:a8:aa:cc:83:
a7:66:bf:b2:3e:b5:ad:13:8b:da:ca:a5:c1:29:99:59:f6:cc:
d3:c8:98:25:8b:1e:27:ac:1b:74:b9:6d:d3:8b:c7:d6:7d:8c:
45:c3:a5:02:e6:a4:b9:56:de:9d:27:77:e9:bf:8f:0e:1d:f5:
2e:ad:68:0c:12:bc:76:6c:49:3c:c7:c3:d0:09:e6:b0:a9:ea:
8c:53:85:bf:b0:a6:a7:86:32:e5:1d:80:6b:16:af:59:0b:c8:
00:37:3f:22:74:e0:43:71:59:ac:74:0a:e4:77:cc:9b:b1:f1:
39:26:05:a7:a6:52:2b:b9:9f:3c:dc:ed:8e:c0:66:43:29:86:
3e:c4:1d:2b:ca:b4:59:3f:9d:17:f5:ba:73:72:4c:b5:98:97:
de:18:a9:5a:16:28:17:8a:cc:33:cd:d1:19:93:72:5e:7d:9e:
42:21:fa:05:16:3c:27:6e:0b:17:16:6d:f0:51:5e:47:88:58:
6c:dc:13:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:30:40 2026 by rpki-client