Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: nFJ/PANhuDh4gXFcaaDLVmbda8WsiYZCnBFq3Wj9byI=
Subject key identifier: B2:54:6C:69:A8:C4:9F:41:30:1D:D2:15:8A:11:65:A6:E7:9A:6D:62
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 01A0DCBBB73220858206D16AE2B0E4CD810C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 17F7
Signing time: Sat 26 Sep 2026 08:01:24 +0000
Manifest this update: Sat 26 Sep 2026 08:01:24 +0000
Manifest next update: Sun 27 Sep 2026 08:01:24 +0000
Files and hashes: 1: eANnaI0GGzfziqDmk3jw-r4G0TA.roa (hash: wlsMTfOuS0IU8a4wZ8IPTnAMJudHI+T0Qy9e4m8glN4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: GfKJM9C8Rszbv05FqXcmszAFnKh/U35nVzayDPi/hRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:b7:32:20:85:82:06:d1:6a:e2:b0:e4:cd:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Sep 26 08:01:24 2026 GMT
Not After : Sep 27 08:01:24 2026 GMT
Subject: CN=b2546c69a8c49f41301dd2158a1165a6e79a6d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:ba:fb:b7:04:af:64:f5:8c:27:3f:7d:d0:
cd:0a:30:93:58:fa:aa:dd:3a:29:6f:3c:82:5b:ad:
61:7a:7c:15:e0:b1:0e:e2:53:17:f2:45:f5:4d:8a:
7c:ce:2e:7b:bf:54:72:f2:da:b4:0a:ba:4d:a4:8a:
31:58:ce:65:da:32:4d:6a:61:73:7b:9a:d4:6e:9c:
04:ca:2a:f1:14:71:db:23:d7:b7:94:31:58:34:55:
25:e7:cf:d4:4a:29:82:6c:25:00:91:00:32:0b:c6:
c9:25:cf:77:5a:8d:91:02:a9:2d:f0:01:6e:70:ac:
1c:e3:5e:f6:11:b1:4c:e5:74:b6:c7:14:5c:f7:3f:
2e:fc:79:d4:42:5d:cb:50:cd:e0:fe:88:c4:95:7d:
33:57:14:e2:49:ae:c1:08:70:1b:04:0e:39:4a:77:
44:ce:e9:4c:ea:32:e4:97:04:22:ed:49:70:1f:5e:
02:26:e1:d6:1d:9f:93:ff:06:79:aa:1e:25:be:b2:
33:16:48:b6:71:c0:e4:b8:e4:75:a2:2d:76:bd:6f:
aa:b8:62:a5:68:89:90:9b:96:0d:9b:ea:29:a4:43:
84:0c:c2:7a:b5:f7:79:dd:77:c4:b9:60:bd:20:a0:
c2:39:3b:5c:f3:a7:4d:20:61:ac:09:d5:64:ab:26:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:6C:69:A8:C4:9F:41:30:1D:D2:15:8A:11:65:A6:E7:9A:6D:62
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:23:0c:2f:d0:4c:12:5d:96:2e:d8:07:a4:4b:a0:95:c5:04:
97:89:92:d6:7a:0e:df:d2:42:fc:8e:e7:bb:7f:0c:3a:74:fd:
24:f9:83:dd:8c:16:99:b8:47:2c:68:50:ed:70:f6:41:3b:ad:
89:28:5e:b0:7d:a9:be:f3:82:8b:e6:ab:1b:1e:9e:b3:9c:f2:
22:88:35:14:67:53:b3:34:4a:86:47:57:67:15:4b:7f:14:72:
d2:6d:63:f0:47:2b:9e:94:f1:25:2a:28:a6:54:01:fb:2c:7d:
d3:7d:ac:4a:66:43:df:e2:0f:58:82:e6:ab:d7:fb:24:43:aa:
be:a3:2d:a3:58:47:1b:53:7f:3b:25:bf:5b:6a:43:02:35:9e:
df:be:7e:51:bb:e4:19:d9:42:3c:73:5c:ab:e9:95:35:ea:93:
db:c2:00:2e:6b:9f:24:c0:1f:ae:ed:87:3e:72:d6:3f:76:a7:
3f:0c:71:7e:8f:7d:d8:c1:3a:c7:ed:34:3e:f7:ef:27:80:ad:
98:6f:d4:e6:8e:7d:12:21:4e:68:7d:1c:ef:ac:c7:7c:81:89:
71:39:fa:90:04:7c:47:2f:be:aa:1d:d8:40:3f:15:95:1c:42:
23:56:17:2d:70:7e:0f:04:dd:48:5b:17:a0:e7:6a:4f:f9:be:
de:6b:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:55:42 2026 by rpki-client