Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: k0IAB3QqSkxAicUWGt55zU7A986XHakjsZxDdDO4/zQ=
Subject key identifier: BA:A6:56:16:B6:7E:8B:85:7F:E1:11:04:24:A7:69:85:D9:25:7B:48
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 019CAAFCF059CA701BF492633B72EE934D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 15CB
Signing time: Sun 01 Mar 2026 20:00:29 +0000
Manifest this update: Sun 01 Mar 2026 20:00:29 +0000
Manifest next update: Mon 02 Mar 2026 20:00:29 +0000
Files and hashes: 1: eANnaI0GGzfziqDmk3jw-r4G0TA.roa (hash: wlsMTfOuS0IU8a4wZ8IPTnAMJudHI+T0Qy9e4m8glN4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: nGrgSrvppk1N6UZN5UMcdl1xzogo8fy34WuNk4BivM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f0:59:ca:70:1b:f4:92:63:3b:72:ee:93:4d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Mar 1 20:00:29 2026 GMT
Not After : Mar 2 20:00:29 2026 GMT
Subject: CN=baa65616b67e8b857fe1110424a76985d9257b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:e7:16:56:69:c2:dd:51:66:da:01:b7:51:
10:4c:e9:2d:18:f2:09:17:26:bf:95:a7:3a:ff:a0:
44:b8:84:fc:c5:65:d5:89:7d:a4:a1:a4:65:96:74:
27:56:07:4d:b2:f4:4f:35:6d:d2:74:de:17:49:7b:
b3:3a:ea:81:18:bb:1d:d1:04:47:9b:b7:bc:6d:f7:
45:e2:66:f7:88:42:d5:1e:9e:75:02:98:01:aa:96:
73:b4:f8:6d:40:9e:dd:7d:cb:b9:09:8e:3f:54:f9:
ff:12:29:24:93:a1:fc:b0:0c:7e:3c:5f:36:68:47:
06:66:e0:f6:b6:ca:6d:2b:3a:f9:82:a9:25:e7:30:
68:9a:2e:6a:a4:70:65:ce:0f:be:77:c7:74:5b:9d:
c0:be:57:27:a3:eb:4e:8d:f0:7a:74:87:8a:bb:25:
13:9e:79:b9:e0:21:f1:6b:da:a5:04:d4:cc:37:5c:
92:97:3d:52:97:11:a4:49:a9:d6:11:d7:41:ab:4a:
f5:27:83:ab:19:61:d9:06:7b:e2:5d:35:04:f4:c4:
65:42:e8:09:cc:29:53:99:88:bc:95:a7:ea:6d:a1:
ab:36:88:53:a0:d9:54:9c:34:4f:2b:ef:e6:7c:ea:
8b:83:c4:24:83:c7:60:ba:17:ae:13:f6:4f:bb:e7:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:56:16:B6:7E:8B:85:7F:E1:11:04:24:A7:69:85:D9:25:7B:48
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d2:eb:86:30:ea:68:5a:62:26:63:cd:ae:43:e3:68:c3:b2:
ca:0a:61:de:62:d4:0b:1c:17:1b:ad:8f:7f:f0:5b:01:50:fc:
06:6a:f4:5d:5d:a2:11:3f:f2:51:20:4d:c4:c2:92:81:65:a2:
c8:92:ed:69:ad:d3:76:e5:f4:d9:80:aa:c9:83:94:74:4d:11:
89:86:e5:6a:db:d1:28:ab:82:a0:b4:53:01:4a:05:4d:3c:ad:
b9:51:ba:00:3f:26:17:b3:96:c9:72:39:b9:83:87:1a:fd:23:
d3:d9:31:39:f7:ad:13:87:b2:a0:07:69:23:1b:52:91:9b:33:
5a:45:b6:69:56:52:ee:98:3f:ef:a9:58:e9:06:6b:9c:b9:b5:
f3:76:cb:fe:b2:60:a4:4a:09:73:bb:76:57:15:bf:cd:f0:6e:
c3:6f:38:56:1d:58:07:5a:30:dc:12:6d:0c:a6:c0:36:c7:5f:
92:14:27:c5:1c:6c:fd:d6:44:5a:59:e6:c3:0f:cf:d4:20:da:
d6:5f:ca:fb:e3:1a:01:ec:00:20:37:37:46:08:8d:4a:50:6e:
1f:2f:b0:de:c4:1f:b8:2e:8a:d1:dd:55:e3:1e:c3:06:ed:04:
68:05:a4:e5:1a:70:7c:b5:b3:6f:75:41:f9:d4:52:45:33:6d:
e5:02:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:24:49 2026 by rpki-client