Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: YlfsktcYSfDoJIO7G6BOjIw4T3Mt2NijIAbwYHEIBag=
Subject key identifier: B2:1B:75:61:B4:71:72:F7:D9:7E:1B:18:61:3E:F1:79:47:E9:F6:36
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019CACEB9A4606E43509840394782E867566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 05:00:47 +0000
Manifest this update: Mon 02 Mar 2026 05:00:47 +0000
Manifest next update: Tue 03 Mar 2026 05:00:47 +0000
Files and hashes: 1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: ohXHLtXAKo3CISzR7fat9tYtGEiulWDjYM2gb5o/AM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:9a:46:06:e4:35:09:84:03:94:78:2e:86:75:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Mar 2 05:00:47 2026 GMT
Not After : Mar 3 05:00:47 2026 GMT
Subject: CN=b21b7561b47172f7d97e1b18613ef17947e9f636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:1a:a1:43:73:0e:03:7f:fa:d6:a0:77:fb:
d1:5b:26:c1:56:64:fb:59:31:41:5b:30:b4:9b:4d:
4c:23:2b:00:66:c8:8f:b4:47:15:1e:31:64:84:e4:
4a:bb:9d:bf:39:b7:98:0d:52:c6:48:41:64:02:d5:
1c:3a:4e:dc:4e:64:c6:ae:d0:61:16:f5:c9:92:af:
6d:64:a2:32:30:8b:08:4e:ce:23:07:4a:de:c6:ae:
a2:05:5e:76:13:a1:c0:9c:02:40:25:cc:71:f2:0a:
d1:2f:39:e4:bc:dd:3e:d9:d2:48:2c:61:60:83:ef:
c3:7d:5f:74:75:28:5f:5f:f2:ba:6b:e7:a9:4a:01:
2e:aa:41:27:b9:27:df:f6:dc:19:fb:65:da:d1:e6:
ad:15:0b:de:b8:35:55:3d:33:73:02:98:29:fc:a4:
c2:da:60:1c:b7:2e:4e:73:a5:c3:d6:17:75:22:41:
f0:fd:69:48:15:41:61:c4:6e:20:c9:dc:38:c6:c3:
5f:92:a0:bf:68:3d:f0:d6:41:97:4b:6c:e4:85:fe:
47:1f:41:04:cd:a3:3e:47:e9:2a:01:bf:9a:71:d7:
b2:09:2e:6d:d4:dd:13:78:fa:47:58:c7:99:e9:8e:
a8:12:26:dc:8b:25:6e:16:e7:00:66:0c:b6:20:e7:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:75:61:B4:71:72:F7:D9:7E:1B:18:61:3E:F1:79:47:E9:F6:36
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:2d:70:27:78:68:72:b7:8b:e5:a5:81:39:f1:ef:98:ff:
45:89:1b:e3:0b:18:6e:c2:2c:00:9f:9b:c4:61:19:77:29:9d:
a3:80:db:f3:22:dc:84:14:b5:e4:f3:c7:fa:18:e1:23:66:63:
f6:1b:1f:e6:44:31:9d:01:eb:20:3e:46:1f:61:23:12:b3:a7:
92:12:50:4f:0f:7d:13:fe:dc:24:44:cb:69:18:9b:df:ed:70:
6c:be:5e:d8:94:dc:ab:0e:eb:24:f4:41:cb:7b:8e:75:3a:ba:
c0:8d:d7:db:76:79:ea:b4:2c:67:69:8d:1b:bd:1e:53:0b:00:
5a:0d:4e:09:88:c5:d0:b8:d7:a3:cc:48:53:e1:5b:af:8b:55:
90:7c:1b:8e:84:0c:f8:a0:c8:77:29:0b:75:cf:ad:50:3f:01:
89:7e:40:e3:a0:6c:9e:4e:cf:f0:83:4a:36:6f:3b:f6:d1:06:
a6:49:0f:2b:e6:9e:be:97:a3:82:bb:b8:6c:83:4b:a4:a0:af:
79:c7:94:b5:0e:4d:39:a0:97:c6:b1:0b:a4:94:d4:2c:01:20:
d4:ce:67:c2:7f:e5:01:1c:77:b0:0b:3d:64:e3:3e:0a:26:b1:
5b:b1:8d:05:7b:95:46:a4:ba:d6:ec:5c:5e:ae:d3:c5:a4:7f:
54:8d:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:59 2026 by rpki-client