Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier: zLeserE2y9NCrNWKye1VgLpfrXEAlwX7wtyEleI5CAM=
Subject key identifier: 82:4D:B6:D4:F9:92:8D:70:E8:39:7F:2B:A5:21:C7:89:F0:AB:4E:F0
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 019FAC081A449706F94B2EC760421DFAE901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number: 107B
Signing time: Wed 29 Jul 2026 04:00:39 +0000
Manifest this update: Wed 29 Jul 2026 04:00:39 +0000
Manifest next update: Thu 30 Jul 2026 04:00:39 +0000
Files and hashes: 1: w3WwugLLFUcrItCxeJKoofI3afc.roa (hash: EnJ2zpdE5VsVYk/C8ci9QDlsMzJ01oLKtWbpS2SqvN8=)
2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: MnaPOC4ZbpqRUEAbQWLgQizs8vSKAcu0frVIvEbKTvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:1a:44:97:06:f9:4b:2e:c7:60:42:1d:fa:e9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Jul 29 04:00:39 2026 GMT
Not After : Jul 30 04:00:39 2026 GMT
Subject: CN=824db6d4f9928d70e8397f2ba521c789f0ab4ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:cc:fb:3f:9a:ca:8e:a1:5d:4d:b9:23:92:
62:34:76:cd:8e:12:c2:e5:17:0f:82:43:00:b2:bc:
54:68:9a:94:4c:2b:8b:68:e5:bd:b5:ef:48:69:d5:
c1:47:5a:91:2e:46:9e:c6:97:e3:bf:67:72:ca:11:
d2:7f:95:02:c2:26:24:05:3e:8c:48:94:52:0d:32:
e8:b3:68:8d:a2:11:dc:39:18:1e:2f:e0:ce:ce:8f:
26:79:25:c4:6a:4a:10:67:4e:7c:69:e5:c6:c9:20:
0e:a2:c5:8f:8f:99:7b:f9:9b:46:32:0a:01:10:fc:
2a:32:26:ca:d3:06:1a:40:61:61:f4:cf:e4:92:ef:
6c:72:60:8b:08:ab:12:2a:b7:de:41:79:b1:3d:c2:
ab:62:48:34:5e:b8:6c:93:84:84:e1:4e:25:90:3e:
3b:7b:f3:fc:eb:97:d6:1d:4e:5f:65:a4:37:2c:71:
4a:b5:b8:09:5e:1c:04:94:09:4f:37:9d:d5:a5:d8:
3f:93:65:ef:4e:82:80:96:be:9c:93:18:35:79:fc:
f4:2d:f1:29:08:01:cc:f6:15:a0:e9:e7:f3:2b:5e:
e9:80:20:cb:93:7c:fc:d2:7c:53:26:32:ae:83:2e:
c1:dc:4a:48:a9:ee:84:10:ac:c4:d3:ee:65:8e:df:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:B6:D4:F9:92:8D:70:E8:39:7F:2B:A5:21:C7:89:F0:AB:4E:F0
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c6:40:7a:3e:8e:d9:59:72:18:6c:61:59:a7:1a:0b:39:51:
17:d3:b4:75:6c:5b:bb:47:01:49:bf:9f:48:1e:70:a4:9a:f5:
69:a8:c4:e1:eb:07:66:1e:af:98:b6:9b:31:2a:eb:b7:bd:3b:
40:6f:cb:b9:3c:bb:8f:ba:18:4d:72:02:d2:90:66:ef:00:b1:
c9:ac:83:85:2d:d4:bd:61:21:87:de:69:0d:3f:54:46:77:ff:
a4:c7:97:d9:a4:9e:28:53:a3:9b:7b:ee:13:5b:84:81:af:30:
b6:49:dd:7d:71:8f:1e:89:24:55:cb:ac:bc:1c:ed:b7:8a:ea:
83:3a:b0:a4:57:c4:b2:0d:97:cf:c4:e3:85:3d:ad:0c:c1:03:
d4:ed:a4:93:57:c7:23:e0:1d:b8:6b:c0:21:ea:96:e2:14:81:
6f:c1:de:77:34:78:af:45:a0:b7:80:81:04:09:83:44:90:d1:
77:27:7c:5f:ba:3d:b3:0d:58:86:fc:ea:57:0b:d8:4a:4e:da:
bb:50:17:dc:65:b5:c0:ac:3f:31:d2:ce:64:89:d4:39:9e:b9:
74:9e:09:91:65:1c:29:06:1f:53:37:b8:bf:bc:7e:38:e4:4d:
07:e5:d9:6a:4d:1f:05:ba:a6:f2:f5:43:dc:a0:5f:58:2d:3f:
1d:ef:21:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCBpElwb5Sy7HYEId+ukBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmE2ZDU3MDRmZDI5MGQwZTA3MzM3NmVkYTY4ODcxNzU2
NGQxOTYwHhcNMjYwNzI5MDQwMDM5WhcNMjYwNzMwMDQwMDM5WjAzMTEwLwYDVQQD
Eyg4MjRkYjZkNGY5OTI4ZDcwZTgzOTdmMmJhNTIxYzc4OWYwYWI0ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5vM+z+ayo6hXU25I5JiNHbNjhLC
5RcPgkMAsrxUaJqUTCuLaOW9te9IadXBR1qRLkaexpfjv2dyyhHSf5UCwiYkBT6M
SJRSDTLos2iNohHcORgeL+DOzo8meSXEakoQZ058aeXGySAOosWPj5l7+ZtGMgoB
EPwqMibK0wYaQGFh9M/kku9scmCLCKsSKrfeQXmxPcKrYkg0Xrhsk4SE4U4lkD47
e/P865fWHU5fZaQ3LHFKtbgJXhwElAlPN53Vpdg/k2XvToKAlr6ckxg1efz0LfEp
CAHM9hWg6efzK17pgCDLk3z80nxTJjKugy7B3EpIqe6EEKzE0+5ljt9V6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJNttT5ko1w6Dl/K6Uhx4nwq07wMB8GA1UdIwQY
MBaAFM26bVcE/SkNDgczdu2miHF1ZNGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTkt
YTQ2MTE2OWYxZGMyLzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTktYTQ2MTE2OWYxZGMy
LzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8ZAej6O
2VlyGGxhWacaCzlRF9O0dWxbu0cBSb+fSB5wpJr1aajE4esHZh6vmLabMSrrt707
QG/LuTy7j7oYTXIC0pBm7wCxyayDhS3UvWEhh95pDT9URnf/pMeX2aSeKFOjm3vu
E1uEga8wtkndfXGPHokkVcusvBztt4rqgzqwpFfEsg2Xz8TjhT2tDMED1O2kk1fH
I+AduGvAIeqW4hSBb8HedzR4r0Wgt4CBBAmDRJDRdyd8X7o9sw1YhvzqVwvYSk7a
u1AX3GW1wKw/MdLOZInUOZ65dJ4JkWUcKQYfUze4v7x+OORNB+XZak0fBbqm8vVD
3KBfWC0/He8h3w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:35 2026 by rpki-client