Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: BGICByKQKK2M4JzT4Nn3y7+ibWEGgORnu909fRN4Oms=
Subject key identifier: 78:F6:E8:86:31:BD:4B:88:34:4F:D0:D9:42:B8:D2:63:54:2D:31:E3
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 01A1035BAF54CA31450DDB33356CD033895C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 1A89
Signing time: Sat 03 Oct 2026 20:01:42 +0000
Manifest this update: Sat 03 Oct 2026 20:01:42 +0000
Manifest next update: Sun 04 Oct 2026 20:01:42 +0000
Files and hashes: 1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: soq1dBQvnWIiCjIXQljNJyUs8hSWJEGThQh1R2gBqxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:af:54:ca:31:45:0d:db:33:35:6c:d0:33:89:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Oct 3 20:01:42 2026 GMT
Not After : Oct 4 20:01:42 2026 GMT
Subject: CN=78f6e88631bd4b88344fd0d942b8d263542d31e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:38:c4:93:13:21:71:dd:c1:d6:0d:b2:3d:
d7:b5:fd:c4:b4:4a:a9:50:ff:49:d5:a3:24:55:81:
34:b7:ef:4c:f3:02:2d:71:5c:bc:9b:4a:74:93:8e:
cf:3f:44:82:5c:14:ee:0d:52:d7:5a:6f:ff:43:49:
64:32:98:5e:4f:df:5d:89:ea:5f:aa:69:be:b9:aa:
cf:67:85:77:8f:01:16:00:27:ae:fb:b1:45:f0:47:
b6:c2:29:98:12:69:a7:1e:fa:3f:ec:ce:b9:36:8c:
3a:eb:78:f0:47:30:c5:4f:ea:e2:5d:3d:33:78:aa:
d1:c1:54:af:ba:f0:d3:43:c6:7e:f3:1c:f9:4d:86:
bc:8c:af:0e:e5:15:ed:63:56:ef:52:ec:26:64:9e:
54:e3:cf:15:f2:aa:56:06:4b:38:03:08:49:f5:f1:
c9:5a:16:6e:78:eb:3e:55:b4:3d:35:d7:a9:dc:c3:
3f:e7:16:9a:16:9a:4d:93:b5:f7:83:d5:d4:91:ab:
2b:74:26:dc:23:06:ae:82:96:1a:49:78:98:c3:34:
6a:d4:e1:51:f5:d9:c6:31:aa:71:8c:a3:67:4d:18:
97:f9:07:1d:eb:b4:c1:9c:a9:50:0c:dc:35:0f:aa:
05:40:54:b5:f6:aa:b5:ca:f1:e9:af:ce:b9:4d:69:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:E8:86:31:BD:4B:88:34:4F:D0:D9:42:B8:D2:63:54:2D:31:E3
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:93:cb:ee:f0:46:e6:08:0d:be:42:5a:eb:df:4d:3b:d5:cd:
40:00:61:bd:a0:a2:60:37:32:07:fe:30:e5:17:6e:9f:2e:e9:
2c:e2:ac:80:07:2a:6c:c4:a4:19:8e:d3:a4:b7:78:9f:3c:cd:
e3:fc:8a:9c:66:a0:33:5e:63:2c:e9:15:0d:40:2e:9b:6c:f8:
7e:78:1b:dc:fe:64:63:55:22:af:59:75:3f:a7:14:3a:3e:26:
af:e2:10:32:bd:ea:72:7c:7d:81:2e:63:10:58:d0:cc:b8:c0:
e5:96:2e:59:b0:35:af:40:40:aa:41:64:56:84:13:21:f7:ac:
e1:ae:1d:dc:a8:fa:cb:6a:cc:db:da:d2:67:cd:8c:85:d0:4f:
86:b9:5b:ba:b8:6b:fb:bc:2d:4f:e5:2f:d3:3b:63:b8:3d:3a:
43:55:c1:1c:10:c4:d0:aa:eb:7b:83:4d:21:79:21:b9:fc:4b:
d4:72:c1:ff:24:33:ad:87:c1:19:c7:94:55:2a:ff:e6:d1:5e:
69:e7:40:5b:f5:6b:63:17:51:0e:1f:53:96:87:54:53:d9:19:
1f:2e:f0:b7:f9:a1:51:14:5d:54:c3:09:99:ed:19:7a:49:9f:
e2:ab:67:c3:04:78:59:3d:8e:c8:a5:55:c6:be:74:49:23:76:
cc:80:ef:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDW69UyjFFDdszNWzQM4lcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjE1MDI3NmY1NWJhZTQ1NTk4OGQzYTEzZTU5MzQxMDc0
ZGNkMGEwHhcNMjYxMDAzMjAwMTQyWhcNMjYxMDA0MjAwMTQyWjAzMTEwLwYDVQQD
Eyg3OGY2ZTg4NjMxYmQ0Yjg4MzQ0ZmQwZDk0MmI4ZDI2MzU0MmQzMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Y4xJMTIXHdwdYNsj3Xtf3EtEqp
UP9J1aMkVYE0t+9M8wItcVy8m0p0k47PP0SCXBTuDVLXWm//Q0lkMpheT99diepf
qmm+uarPZ4V3jwEWACeu+7FF8Ee2wimYEmmnHvo/7M65Now663jwRzDFT+riXT0z
eKrRwVSvuvDTQ8Z+8xz5TYa8jK8O5RXtY1bvUuwmZJ5U488V8qpWBks4AwhJ9fHJ
WhZueOs+VbQ9Ndep3MM/5xaaFppNk7X3g9XUkasrdCbcIwaugpYaSXiYwzRq1OFR
9dnGMapxjKNnTRiX+Qcd67TBnKlQDNw1D6oFQFS19qq1yvHpr865TWlFqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj26IYxvUuINE/Q2UK40mNULTHjMB8GA1UdIwQY
MBaAFM2xUCdvVbrkVZiNOhPlk0EHTc0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEt
MzQwN2ZjYTEyMjY3LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEtMzQwN2ZjYTEyMjY3
LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpPL7vBG
5ggNvkJa699NO9XNQABhvaCiYDcyB/4w5Rduny7pLOKsgAcqbMSkGY7TpLd4nzzN
4/yKnGagM15jLOkVDUAum2z4fngb3P5kY1Uir1l1P6cUOj4mr+IQMr3qcnx9gS5j
EFjQzLjA5ZYuWbA1r0BAqkFkVoQTIfes4a4d3Kj6y2rM29rSZ82MhdBPhrlburhr
+7wtT+Uv0ztjuD06Q1XBHBDE0Krre4NNIXkhufxL1HLB/yQzrYfBGceUVSr/5tFe
aedAW/VrYxdRDh9TlodUU9kZHy7wt/mhURRdVMMJme0Zekmf4qtnwwR4WT2OyKVV
xr50SSN2zIDvBg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:06:56 2026 by rpki-client