Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: v65QXqAbp4IxjK5ILyUhZXQrLzMz6z9p2PMd4kaz7DU=
Subject key identifier: BB:86:D4:66:98:7B:07:F2:7E:B5:A8:42:37:58:FE:23:5D:58:4B:C3
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 019CAC46984C7F0283184DE989DAD642CCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 062E
Signing time: Mon 02 Mar 2026 02:00:33 +0000
Manifest this update: Mon 02 Mar 2026 02:00:33 +0000
Manifest next update: Tue 03 Mar 2026 02:00:33 +0000
Files and hashes: 1: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: z3LrYXTHmLBPhOzfhbgMGq2ZW8kzFulY9cO4jEbJBpg=)
2: u8CFwQAgI9Z_ArKZcryQPx48tlg.roa (hash: ouz1fG+C7TUSgfVu4kqpK6uPFZhg0Hf+lpBxVtrxN4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:98:4c:7f:02:83:18:4d:e9:89:da:d6:42:cc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Mar 2 02:00:33 2026 GMT
Not After : Mar 3 02:00:33 2026 GMT
Subject: CN=bb86d466987b07f27eb5a8423758fe235d584bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a7:95:6d:a0:df:39:7c:a1:31:80:d2:73:51:
1f:eb:78:ca:64:c8:fd:30:53:85:6b:dd:50:f0:9a:
6f:96:34:3d:b4:2d:38:ad:38:7c:dd:d8:fc:e2:f4:
ac:24:7b:91:97:1f:9c:ee:8d:c7:7e:fc:9e:0b:f2:
9e:00:1a:9f:5d:d4:85:f8:34:c9:49:44:fb:46:3b:
44:5b:51:a3:15:28:e5:0f:91:29:ef:98:0b:1b:45:
ae:b7:92:4e:36:cb:fc:81:03:92:ab:3b:76:26:eb:
44:ce:19:32:35:c5:f5:f9:62:e2:96:fc:4f:49:b9:
d5:ad:f3:d6:79:6e:15:34:62:f1:61:5f:8b:92:7e:
bf:b1:2b:1a:ce:78:e8:9e:67:ef:99:e1:ab:63:60:
de:8f:43:12:9b:70:fb:4f:ba:f5:ca:d7:fe:d3:e5:
d9:46:3c:80:c5:e4:fc:db:0a:d5:69:c8:f2:c4:f4:
5f:e6:7b:c5:b5:73:09:2f:ca:32:ab:f7:2d:c0:e5:
5f:8f:a6:bf:8e:66:98:a9:c5:ab:80:f2:58:ea:c2:
37:67:67:e0:24:dc:01:63:21:23:1e:72:98:45:6d:
91:cd:f4:b1:79:da:31:97:f2:c6:c4:b5:86:78:0c:
53:a0:b0:fb:d7:83:b8:9f:d1:41:d2:a6:68:52:bd:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:D4:66:98:7B:07:F2:7E:B5:A8:42:37:58:FE:23:5D:58:4B:C3
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:30:c5:d0:1d:b7:f8:03:1d:af:c3:ea:54:a8:f3:d4:d6:59:
97:4e:97:bb:9e:6b:40:81:a4:df:41:4d:88:c1:2e:94:d1:7e:
e1:f9:a6:d2:94:76:7f:99:32:36:f5:a4:3c:a1:4d:bf:91:5e:
f2:e9:fd:f2:94:c4:0b:1c:b2:63:ac:e0:74:ca:f3:5b:41:4c:
3a:7a:d1:3f:2b:a5:0f:52:b1:e8:70:6f:49:46:9b:e2:66:86:
4f:d0:ec:dc:b6:88:e3:df:63:e7:2f:a2:78:51:87:1c:87:87:
dd:54:7c:fb:8f:7f:97:33:11:43:ab:fa:28:cf:34:1a:ba:20:
18:a1:bd:60:8b:c8:7b:03:54:f2:b2:99:f4:4d:27:37:29:3d:
e7:dd:53:2f:95:d8:c8:8e:78:16:e1:6a:0c:54:81:ba:c7:2b:
a6:e8:c0:e5:0b:24:a8:00:62:6c:7e:73:dc:d7:29:fd:df:9b:
46:98:7f:e6:2d:fb:28:c5:a2:b6:ec:20:99:7f:e0:d2:fd:41:
42:9c:7b:6a:af:80:88:01:40:d2:f6:b1:ca:7f:aa:bb:da:29:
89:96:e5:e1:67:da:b5:bd:6d:70:37:9b:04:9d:15:03:40:36:
60:61:c2:78:60:3f:f5:2f:0d:fd:ba:5a:2c:cd:2e:05:b5:e8:
64:44:40:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:53 2026 by rpki-client