Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File: b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier: mU3Tyk+ZOl0mQjLbatG7Dc6iACzm7WmuTg/FVkhEX7Q=
Subject key identifier: B0:E3:0E:4C:2D:81:EA:99:42:CA:2B:09:43:AE:1F:EB:D8:67:57:2C
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial: 019D9B50C477944685D4B3D3FA6442BC50AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number: 09AB
Signing time: Fri 17 Apr 2026 12:00:54 +0000
Manifest this update: Fri 17 Apr 2026 12:00:54 +0000
Manifest next update: Sat 18 Apr 2026 12:00:54 +0000
Files and hashes: 1: 1-6zs2tFXXISIgFOlv5glBqi3Rng.roa (hash: ir6ev4+OP/qbZnv/DV6VaazeZTLvFs2HPxmxvhdDnKM=)
2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: cvN/9AQYmYNdBY1mA+taCKLHxFu67dhTyCHan83RVws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c4:77:94:46:85:d4:b3:d3:fa:64:42:bc:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Validity
Not Before: Apr 17 12:00:54 2026 GMT
Not After : Apr 18 12:00:54 2026 GMT
Subject: CN=b0e30e4c2d81ea9942ca2b0943ae1febd867572c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:d8:00:27:7f:fb:57:d6:ea:71:18:aa:d7:
f9:5e:50:75:f5:db:0a:0e:74:50:0a:8f:af:c4:d9:
64:b9:33:af:11:3d:82:ee:91:e4:92:b4:bd:9e:08:
5e:f6:63:48:3f:8f:08:41:48:46:38:2d:3c:91:1f:
a7:8e:45:8c:d1:fc:81:75:af:6f:61:c7:94:f3:35:
23:29:b9:b3:cc:2a:60:13:f7:08:d7:44:8c:fe:b7:
61:9e:67:c6:94:83:31:65:12:17:57:bd:f7:bc:ef:
b6:d0:e4:0a:0a:c2:be:23:ba:86:d4:92:c2:c0:85:
a2:99:a1:78:8d:9e:e3:d3:d4:8d:a0:a0:9f:f9:c6:
20:18:54:bd:da:ee:42:f9:32:7c:7a:32:36:ec:28:
ec:26:33:cf:38:d4:28:be:20:31:1d:20:c3:88:37:
d9:cb:ee:c8:5d:c2:e0:1c:4f:16:eb:49:c8:1b:91:
b1:e9:e1:d0:f0:90:e1:32:2b:bc:5f:4a:3a:8a:f7:
7b:a8:fa:71:32:d8:3f:67:4f:42:06:bb:27:92:dd:
1e:b1:77:44:32:ae:5e:ba:21:4b:ef:e8:b9:a0:c3:
a4:61:27:c2:56:57:14:94:69:d1:60:4d:ae:b8:42:
36:3b:b9:01:5d:d7:3c:ab:59:5b:44:34:59:cc:f5:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E3:0E:4C:2D:81:EA:99:42:CA:2B:09:43:AE:1F:EB:D8:67:57:2C
X509v3 Authority Key Identifier:
keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:fe:56:24:23:ea:67:cd:e2:b2:b3:78:e7:95:e7:4f:78:
96:db:ca:cc:15:3d:03:12:2e:71:e4:0a:7d:91:fa:0e:ff:44:
c6:7c:2d:83:99:fb:79:86:00:a3:85:de:90:2e:7d:64:d4:d1:
e2:50:8f:7a:d4:6f:23:25:3e:c2:38:87:af:83:3e:df:6b:0e:
ae:80:11:3d:59:1e:df:e5:8c:ea:98:26:d1:fe:24:a5:67:94:
96:8d:5d:20:5d:25:ce:ee:e0:5a:a5:d8:76:94:e9:08:20:3f:
09:a0:05:28:aa:45:45:a1:fd:2e:aa:27:ee:75:f3:68:ef:c5:
a0:cb:8d:da:1e:bb:fb:a0:67:3a:35:27:6b:32:92:25:01:c1:
b2:f9:68:e0:6f:4a:31:39:d3:e8:7f:09:74:43:c9:04:a5:8a:
35:63:b8:49:bd:bd:82:0b:86:05:9a:7e:ee:81:4b:2f:7a:4c:
ea:ff:08:2b:19:3e:29:82:b3:97:cf:4f:21:f3:d9:38:f4:ec:
6e:78:56:3e:f4:41:f1:8c:56:76:2a:44:92:7d:cc:ca:fc:cd:
a9:fb:f5:f5:57:ba:f3:d9:af:46:3c:ee:7e:54:28:aa:f7:19:
2c:7d:ca:d5:0f:45:ad:73:a4:ee:7a:2c:a7:8e:be:95:5f:7d:
fb:45:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:53 2026 by rpki-client