Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: i2C59G4KfQLGNNRwgfgimEjGeK79Q498TUmB+X9s0Ws=
Subject key identifier: ED:25:2E:7C:DD:2F:3D:32:99:C1:61:8A:B1:32:DB:07:1D:1E:45:9C
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 01A136DAAF377BEE932A173D13DCF2BEEB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 1AA8
Signing time: Tue 13 Oct 2026 20:01:03 +0000
Manifest this update: Tue 13 Oct 2026 20:01:03 +0000
Manifest next update: Wed 14 Oct 2026 20:01:03 +0000
Files and hashes: 1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: b5cAXguSoSqYeTMFpo1YCZsA0oD1QzTwiBaXjQv72kg=)
3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:da:af:37:7b:ee:93:2a:17:3d:13:dc:f2:be:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Oct 13 20:01:03 2026 GMT
Not After : Oct 14 20:01:03 2026 GMT
Subject: CN=ed252e7cdd2f3d3299c1618ab132db071d1e459c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:22:dc:74:14:a1:54:7a:9b:00:20:82:eb:
57:88:8a:31:4b:8d:f3:42:c2:e3:0d:5f:82:4e:bf:
f2:f5:71:e9:ea:8f:99:af:9e:32:1f:70:7e:c6:80:
f9:e0:6c:bc:57:8a:3d:82:fb:26:f6:dc:04:67:06:
6b:3f:ce:fa:06:7d:c1:57:da:7a:f6:13:f3:30:57:
b8:71:67:cf:51:41:aa:65:6d:9c:bc:31:99:53:42:
43:72:83:15:da:22:56:84:4c:d4:db:59:c7:bb:5b:
95:57:bd:65:e5:74:33:0e:f0:b4:0f:fa:02:54:be:
a3:5e:d4:c7:0c:6d:36:99:f7:fe:0b:b0:80:cd:18:
9b:0f:09:1a:8e:a5:eb:8d:59:11:21:d4:b1:c7:5a:
ff:57:67:18:60:84:72:eb:08:43:b5:b7:85:df:72:
b6:11:fe:d5:56:64:01:b9:52:72:da:50:3b:51:88:
67:59:14:15:3f:b2:2e:3d:c0:51:11:4e:30:27:67:
1f:40:e2:b9:bb:ac:fb:cf:db:9b:ab:6a:a2:b5:e4:
e0:4c:8f:94:5f:dc:b1:45:3b:dd:af:e2:30:6c:30:
4b:a4:79:bb:91:dc:f1:91:1b:1f:e8:84:48:5e:8f:
03:cf:60:99:6d:f7:34:fa:df:57:d4:cc:65:a6:6b:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:25:2E:7C:DD:2F:3D:32:99:C1:61:8A:B1:32:DB:07:1D:1E:45:9C
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c8:8a:30:a8:5f:77:ec:e8:c4:1e:77:4f:ed:a7:0b:44:cc:
9b:1b:85:b0:3e:ff:5d:eb:e0:ce:ca:1b:6c:e9:cb:28:c8:a8:
c9:80:07:3e:f2:30:f6:3f:76:19:4b:48:51:36:02:90:b4:b8:
b0:0b:45:f6:d3:42:cb:0e:55:2c:11:59:ab:74:de:75:49:22:
4f:7c:c6:d0:ac:cc:b7:dd:52:7a:43:fc:02:f2:e1:83:31:f1:
8c:b1:62:d8:fd:9a:8b:03:aa:a3:30:37:68:4d:33:6e:3c:27:
ea:2c:c4:af:6b:aa:49:73:49:36:ca:50:32:38:a6:62:42:2a:
3c:5f:bf:41:2c:d5:dc:e2:96:cc:b3:c9:ec:05:89:c3:74:d2:
cf:63:b0:cc:11:b4:39:34:11:4e:c8:dd:16:86:36:e2:fd:24:
74:17:55:34:c9:bf:cc:4c:00:26:81:bb:7b:cc:5b:0b:f6:f6:
7a:88:65:cc:8a:8f:07:94:29:27:63:c1:1c:3c:36:02:6e:16:
71:9d:bd:0a:ea:af:59:69:43:c9:97:95:19:7e:ac:be:b2:0c:
a8:b1:27:08:41:30:38:2d:54:29:f0:a8:ea:93:58:f4:05:b7:
35:82:1b:47:91:ce:b2:a2:ce:f1:3d:ce:92:0e:0f:fa:13:cd:
0d:d2:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:50:52 2026 by rpki-client