
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier: QxFsY2d32//9jmH5ozAKABn7SWVaTd219rmlgt4VFsE=
Subject key identifier: 0B:06:30:A3:9A:CC:39:76:F5:27:53:82:CD:73:F2:07:B4:5D:12:5D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019FA9078EA192AB2315933031B1F76FE10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number: 0C8B
Signing time: Tue 28 Jul 2026 14:01:12 +0000
Manifest this update: Tue 28 Jul 2026 14:01:12 +0000
Manifest next update: Wed 29 Jul 2026 14:01:12 +0000
Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
2: 0hivMId7QyV_J-baQe-LpP04A_E.roa (hash: 4wskR4bGB2kTBEPb3U0Ndo9Z+ReWqtwzIpeVVcyolq4=)
3: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
4: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=)
5: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
6: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
7: BLbEGnHlodnp79q9soB7X47HKdw.roa (hash: YLxcybOGPbSncNQUcEA27OYyYsdtahC0bwUM37mtR0U=)
8: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
9: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
10: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
11: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=)
12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
13: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=)
14: P7ZgWKI1Wrjsz9VU4DTzCLAgheI.roa (hash: x5YukDSUF+4txhRHDoxZY/oWruu1mketabTf55p1uXU=)
15: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
16: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
17: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
18: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
19: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: QFsCUAmUUgMXok4DkZ8CGB8TdudUVMb4Wg5qeoHEOe8=)
20: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
21: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
22: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
23: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
24: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=)
25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
27: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
28: r5xSrq13TBSiblkLCkk6aKWkSPM.roa (hash: Jqrbgb6N2ntUjpORqhuL9e7bWx13rYWpNNGtwo5PVmQ=)
29: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
30: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
31: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:8e:a1:92:ab:23:15:93:30:31:b1:f7:6f:e1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 28 14:01:12 2026 GMT
Not After : Jul 29 14:01:12 2026 GMT
Subject: CN=0b0630a39acc3976f5275382cd73f207b45d125d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:c7:6a:00:19:ee:af:16:66:32:a5:81:0d:
ae:fe:0b:32:df:01:96:ec:d2:4d:9c:fa:ae:05:7e:
c1:a9:68:be:54:f4:6e:c2:41:d8:cd:12:5e:1e:ab:
21:7c:27:b8:e9:7a:50:b4:b4:dc:3e:ba:b6:c5:15:
5a:30:93:e6:24:43:5d:cf:04:6d:03:42:1d:a8:a2:
c9:54:95:54:b3:0d:c4:37:dc:60:04:26:3a:d4:12:
3f:3e:90:c9:e3:b6:ee:f8:08:f7:4b:82:56:38:ad:
89:e6:40:33:bc:b6:f5:8a:b4:5d:5b:93:31:47:b8:
4a:03:29:86:69:9a:33:ce:6d:2f:8c:60:30:80:bb:
95:eb:08:3c:1a:34:09:d7:be:bc:76:38:02:8c:39:
7e:88:0c:8d:d2:b6:e1:83:4a:94:14:82:a4:02:a4:
56:ce:60:96:7c:8a:b4:e3:a6:40:aa:25:01:58:f8:
d9:72:83:bc:f2:1b:43:d4:81:c5:79:e1:b4:d5:ca:
b4:75:00:69:7a:fa:75:96:45:2a:ab:5e:cc:d5:23:
8f:06:e3:35:12:57:45:c0:cb:46:7a:0c:93:2b:4f:
08:27:3c:73:11:b4:32:75:70:9e:68:1b:df:a0:c2:
dc:4b:6f:d1:76:bb:26:ca:bd:31:36:17:99:df:37:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:06:30:A3:9A:CC:39:76:F5:27:53:82:CD:73:F2:07:B4:5D:12:5D
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:84:2e:6d:01:3c:f0:0f:44:e8:8b:fc:2f:b3:22:ce:24:
1e:9c:cc:8e:56:41:ac:fa:7d:3f:1f:7d:2d:24:b9:68:14:13:
11:0d:28:ec:26:a5:27:4f:be:8c:65:23:07:7a:ef:e7:e0:8c:
22:2e:23:ef:95:d5:b4:37:51:31:7b:01:96:89:2c:27:4a:ba:
68:56:2a:5e:51:62:20:0b:da:8a:da:00:c3:63:78:a5:00:18:
ed:fd:51:0c:6e:8e:2c:fa:91:ba:e3:ac:a9:56:da:27:bc:81:
40:4f:86:fc:c1:06:2a:34:d0:5a:03:6f:6d:bb:2f:2e:3c:18:
a4:02:80:0d:ec:68:77:97:66:49:fe:77:1f:95:47:4f:6b:f5:
8b:66:4b:d2:3f:a0:4f:fc:1c:78:c5:9f:e6:98:d2:69:03:97:
b2:25:d9:5f:99:f1:c9:cc:0d:17:64:70:af:f5:04:b8:3e:04:
97:91:af:91:7f:13:41:94:dc:cd:ed:94:61:2c:e6:86:13:db:
ef:c7:8f:37:bf:f9:62:0c:67:2b:b1:ef:fc:9b:68:0c:bd:3c:
b1:bc:16:79:d8:0d:c5:d1:6d:20:d4:e9:60:91:22:47:79:2f:
d1:5e:3e:8a:e1:b9:f7:6b:4c:89:10:c2:07:af:25:a6:a3:2b:
7a:c2:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:04 2026 by rpki-client