Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: g+ZD2LwnO6IDE8Q+AO338AILwk3IxA1kyKcu3aqW1QI=
Subject key identifier: 25:B7:A2:FE:53:DA:AB:D3:70:D7:A0:7E:24:F7:C0:43:24:5B:F8:13
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019CAC475F83A117F1BDE63D5B5E0C2C0256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 02:01:24 +0000
Manifest this update: Mon 02 Mar 2026 02:01:24 +0000
Manifest next update: Tue 03 Mar 2026 02:01:24 +0000
Files and hashes: 1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: i2wOCOsvw5Ql8lhSxRUs2WDVSQ3PtjR7xk2Yc4AvZTs=)
3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5f:83:a1:17:f1:bd:e6:3d:5b:5e:0c:2c:02:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Mar 2 02:01:24 2026 GMT
Not After : Mar 3 02:01:24 2026 GMT
Subject: CN=25b7a2fe53daabd370d7a07e24f7c043245bf813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:65:91:78:cf:19:a3:b9:66:fa:39:0f:cc:
a2:c6:4d:85:cd:94:34:05:fc:a1:35:95:33:d3:67:
04:a8:0c:91:4d:23:7f:e8:96:07:8b:e9:60:6e:7c:
2b:3e:4d:58:46:8e:3d:dd:5a:1b:68:3f:87:d7:e8:
06:1e:04:ce:44:9c:c2:21:c0:ec:12:da:69:e3:6f:
83:05:f6:7b:03:d2:e5:28:8c:45:5e:a7:24:ad:6d:
3b:58:98:e7:27:a3:27:89:b6:d0:9d:4a:2f:2b:08:
33:98:80:df:94:b2:8c:c3:66:05:96:40:b9:8d:af:
1a:b6:fc:74:78:27:60:eb:e4:14:d3:db:9b:12:ff:
e5:ac:a1:cd:25:08:b7:f9:18:dd:ce:0a:d7:93:01:
fd:0d:b3:cb:51:61:e7:5e:a0:b4:ae:c2:b2:9c:5c:
79:90:21:dc:9c:7d:f4:e9:ae:11:12:a5:15:20:f1:
43:50:dc:d5:54:c6:1b:5a:b1:fc:2c:b8:13:65:95:
eb:cd:34:78:66:7a:20:6c:35:d9:16:aa:cf:f4:6a:
f4:d9:c2:2b:26:3c:25:6b:5e:8c:94:6e:eb:2c:56:
29:e1:c1:70:38:f7:04:a5:a4:31:45:09:24:a7:0e:
9b:0f:21:44:45:27:dd:ef:1f:d3:ed:c7:e4:09:a6:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:A2:FE:53:DA:AB:D3:70:D7:A0:7E:24:F7:C0:43:24:5B:F8:13
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:de:51:e9:be:1f:24:82:32:17:c0:26:ac:18:0a:e3:1c:13:
92:a0:bd:7c:08:3f:61:a8:dd:b1:a5:eb:47:db:3a:8d:59:de:
68:e2:a8:3d:fb:d5:e3:c6:62:7b:88:a2:12:2a:a2:13:b8:f0:
94:f4:97:e4:78:1c:29:63:39:e1:8b:0e:81:6c:c4:d8:5f:b5:
df:27:99:7c:4d:cd:d7:95:7e:ef:ab:64:dd:cb:1f:93:c3:f5:
61:87:9a:ce:c8:67:97:cb:ed:1e:c2:e6:d3:8e:7e:e9:4a:64:
3f:52:6f:0f:db:8d:55:d2:98:a9:5d:08:96:b8:45:93:32:7a:
01:81:6f:32:25:8a:10:3a:2e:71:f1:c5:6d:ff:61:ea:e7:e8:
dd:d2:42:88:98:2c:e8:97:31:00:94:b4:91:f6:4c:da:27:b4:
93:3d:26:ee:ee:3a:40:86:b8:5e:d4:c5:2e:59:e5:07:70:fa:
e7:7d:11:26:31:7c:15:47:6a:6e:9b:81:bf:5a:0c:d0:ed:f0:
bb:4b:e2:6b:77:38:b3:e5:6f:cf:26:37:3c:be:14:b5:0d:2e:
c5:43:28:da:02:5c:84:ec:5c:7d:24:8d:c6:5b:70:5b:35:6e:
98:dc:63:d0:10:62:3e:2e:71:4a:53:c9:d2:d4:34:29:d4:40:
f6:f9:c5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:24 2026 by rpki-client