Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
File: ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft (raw, json)
Hash identifier: n7vn1s1sFazZNPvaWpgB5E3A1qt6s9+CNBgYfWE4DhU=
Subject key identifier: 23:7F:4D:6F:22:4A:C4:06:92:34:1E:E3:01:0E:29:05:A8:00:61:CC
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019CAB349CF3A52EEE984CA4274DA2CB0142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
Manifest number: 09FB
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: CB7ZOTfRe3Lfy6bzU3USZ75HVvw.roa (hash: FlUrZcGjnxqC1lXl49edK/FXKIDYYIun/75ke4aPSyw=)
2: KER-U-aRYckOZzpn7PbWOavueRg.roa (hash: VnTgbJYVhXdPGDTQ2hppQejhsFcgs5I5az6oUP5boak=)
3: ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl (hash: h4lCydi5qBNPiYK3pD4Hly1KhlZ443UDzPB4QAOfsAU=)
4: dO6zq4mmDPmBhklgeAWbYzuw7zU.roa (hash: 8vn7qHuvz3bv0ogVMjPFxFjhxK9cBzVdZyb1bNw0jOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9c:f3:a5:2e:ee:98:4c:a4:27:4d:a2:cb:01:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=237f4d6f224ac40692341ee3010e2905a80061cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:5f:04:96:f1:41:99:f2:a9:60:29:77:77:
46:2a:59:cd:c4:17:22:db:52:72:a9:15:e7:83:f8:
21:61:10:d6:b6:83:4d:69:fa:62:b6:d6:04:21:a2:
f5:36:38:62:45:85:f4:f9:b6:da:d2:2b:cd:a5:96:
29:66:9b:9d:db:1a:9c:5b:cd:18:52:66:50:86:24:
92:36:7d:15:ef:e7:33:54:2b:12:69:b8:2b:ce:fd:
42:96:cb:6a:30:4a:1c:d7:fe:cb:a7:37:67:da:de:
4b:2e:02:4e:8a:45:6d:6d:80:82:c6:54:23:8c:87:
2c:70:e2:ab:ff:bf:48:3c:14:09:8f:70:37:d9:be:
d9:ad:0b:ef:40:9c:11:a1:2c:f2:26:22:d6:67:9c:
81:f4:df:a1:a7:30:4f:ed:25:1d:0b:3d:f0:fa:33:
23:ce:76:68:bc:99:c0:f0:6b:13:4a:c2:7b:41:13:
87:5d:f5:e3:2e:16:db:d3:15:52:fe:c0:ae:cf:e1:
96:8c:a3:6a:61:6f:95:71:7d:18:83:8f:5c:17:46:
6c:f0:6a:3e:11:7f:69:e0:32:42:32:05:3f:f7:4f:
b9:ac:21:f0:35:0c:ac:bc:ae:aa:45:99:6e:b3:71:
9f:32:5d:22:fc:dc:c4:92:7b:e0:44:b0:f3:9e:40:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:4D:6F:22:4A:C4:06:92:34:1E:E3:01:0E:29:05:A8:00:61:CC
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:86:37:68:89:d4:40:79:ad:a8:f9:3d:a9:04:54:e9:cb:49:
12:4b:d8:80:6b:4e:12:5f:da:f0:02:e0:78:b3:a5:e1:52:2d:
77:8d:b0:87:c0:4b:0d:5a:e2:86:2a:ec:35:50:86:ec:91:63:
5d:28:2d:99:ff:66:be:f5:7f:72:f8:88:f5:e4:b0:35:23:70:
f6:cb:19:d6:66:ef:0e:cd:0f:f7:3a:1b:fc:7d:d4:a9:16:f7:
09:60:c4:3b:eb:f8:c2:dc:84:43:01:35:22:ff:4c:66:d1:f3:
37:d9:ef:a3:7e:33:97:3e:d1:c6:cd:8b:0b:55:dc:e7:e9:a8:
d8:41:bb:83:6b:d0:a7:e5:bf:62:85:62:bd:db:59:b6:ea:35:
c0:7b:f0:45:ac:4b:79:83:47:11:51:98:b3:63:0d:90:0f:aa:
b8:fc:2d:50:f2:63:37:64:a2:63:dd:fa:93:90:d3:57:c8:bc:
84:b0:a4:03:21:d4:88:17:b5:c9:02:1b:35:cc:00:57:8f:11:
f7:4f:e4:b4:f6:ec:9a:b7:4b:53:7e:79:06:65:17:36:bc:84:
0a:00:0c:3d:63:f3:a8:83:c6:09:7f:57:07:ee:86:a0:83:49:
a8:f2:33:c0:42:49:d8:75:75:69:8e:e7:07:99:04:28:21:b8:
81:a0:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:30 2026 by rpki-client