Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: NfbX1bW6O8l3dQ1la6a3urOeGJPPXSf9jmZ9zAFM9YY=
Subject key identifier: CD:57:BA:C7:99:B7:1A:49:B1:5F:B9:56:3C:9B:81:DE:BE:B4:3A:B4
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 019D9BBEB00A4A18E53ECCFD3CEC3599F307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 06AA
Signing time: Fri 17 Apr 2026 14:00:58 +0000
Manifest this update: Fri 17 Apr 2026 14:00:58 +0000
Manifest next update: Sat 18 Apr 2026 14:00:58 +0000
Files and hashes: 1: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: KPPy9LYEPixi1NuXw4cqraFwPYhdnAGM3pMdnc5ZIPA=)
2: u8CFwQAgI9Z_ArKZcryQPx48tlg.roa (hash: ouz1fG+C7TUSgfVu4kqpK6uPFZhg0Hf+lpBxVtrxN4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b0:0a:4a:18:e5:3e:cc:fd:3c:ec:35:99:f3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Apr 17 14:00:58 2026 GMT
Not After : Apr 18 14:00:58 2026 GMT
Subject: CN=cd57bac799b71a49b15fb9563c9b81debeb43ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:e5:d9:fa:9c:09:f7:10:32:86:3b:01:b9:
c0:6d:fe:d9:94:ac:88:e9:26:af:b1:d4:d6:71:15:
c3:3f:bb:91:37:66:94:b7:f3:9b:43:ad:77:50:10:
04:aa:91:90:68:67:37:c8:fc:f4:a4:c7:24:aa:f4:
53:3d:15:2f:13:69:42:f3:8a:62:b8:3a:42:77:f4:
03:0d:c3:f3:4b:e2:97:9d:b9:40:6a:09:e7:a8:c9:
43:19:55:1f:57:1a:05:62:e4:34:ee:e0:c1:4d:be:
5c:63:3d:4d:75:30:f4:38:6d:40:72:18:9f:7f:64:
13:c5:f4:2e:e7:a4:9f:66:50:c3:bc:c2:37:24:f6:
14:0f:98:d7:93:f4:6e:50:c9:16:6e:c0:95:6b:ee:
87:bf:ba:b3:e7:a9:0b:95:ab:5e:a6:7e:78:9c:91:
7f:f7:d2:12:60:28:e1:3b:68:1e:2b:c9:9b:bd:62:
7e:98:7d:37:a3:aa:eb:64:cb:63:da:17:fa:42:d0:
db:78:90:45:e1:4a:35:92:36:0e:71:73:c9:5d:de:
ca:45:13:73:e8:c0:79:2f:98:96:94:c8:06:1f:1f:
2d:ae:a3:21:29:54:bf:52:26:15:ce:6c:17:2a:34:
93:9b:40:54:7d:6e:6e:6a:02:04:1e:a5:b9:a7:c3:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:BA:C7:99:B7:1A:49:B1:5F:B9:56:3C:9B:81:DE:BE:B4:3A:B4
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8a:f9:fe:bb:24:5d:be:63:bd:4f:c8:8a:b5:b9:57:3c:79:
4d:09:6a:08:3a:40:b2:41:c4:8a:7b:61:af:13:b5:19:a4:8a:
a9:56:fa:b7:10:52:46:1f:44:a2:dc:83:9c:aa:2e:e9:5c:12:
3d:5f:ee:4b:a9:04:eb:e8:a5:d8:7e:40:39:30:e8:3f:52:77:
dd:1f:f2:f6:e7:f5:f6:d1:ae:6a:a3:c4:7d:86:43:c8:8b:b9:
2f:10:cc:37:c9:97:99:53:7b:5e:02:05:00:55:73:42:5e:2f:
bd:3e:c4:4b:f9:95:f0:07:65:6f:78:8f:9d:cc:d3:d5:28:0d:
80:f4:4d:e7:09:0e:7e:4b:bb:ff:79:46:1a:b4:29:05:55:91:
3f:bc:0a:7b:fd:a2:ec:7b:b6:14:1c:60:22:51:88:69:97:f8:
c7:c6:2c:64:89:cb:fc:fd:ce:b6:23:ce:92:17:76:68:51:22:
8e:b4:1a:37:45:fa:32:c9:1c:9a:8d:43:29:32:5a:6f:9b:1d:
3e:b0:64:4d:55:83:a8:3d:50:51:70:f6:82:01:8d:b0:f7:e7:
8d:5a:bf:27:76:41:10:55:50:1d:ab:8f:49:f2:c0:74:b6:dc:
1d:72:46:c8:ea:0b:c2:9b:6b:ca:a0:ae:01:9f:c1:4f:22:1c:
d7:8e:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:10 2026 by rpki-client