Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
File: zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft (raw, json)
Hash identifier: OyIxUFdG2S53O7YOI99cK79yOGlQclS2NxJJe0/oWeo=
Subject key identifier: E2:58:22:EA:FC:6E:43:96:CA:DA:07:9B:E0:3F:FF:CF:4D:E8:F2:58
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 019F916D80CB86ED6BA5080D5AC01BDB6DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: DNEldaHY2kEw4Rcm-XUfS7EOwDY.roa (hash: 9FqKHjD55WaTnWikw/XfEo/RJ5tXCDrBsU7KStjFO4U=)
2: mwC6MKa_JaWowyw2WhaQtGJ8cBU.roa (hash: oc9OWN5cse8gqT8UGgSTo1cj+MCP+VmGebDH3qUQknc=)
3: zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl (hash: 3dzyacVL8P03BQqET56jE8xC27t5LD8g5zNCj7O8GeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:80:cb:86:ed:6b:a5:08:0d:5a:c0:1b:db:6d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=e25822eafc6e4396cada079be03fffcf4de8f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:23:a3:d6:fc:e2:fc:06:89:b3:19:56:9b:
f4:d8:77:ba:68:b7:97:3f:81:b9:03:d8:ff:b0:f3:
79:fd:67:ab:1e:c3:da:bc:e1:90:15:e0:e1:c8:78:
4d:f3:d1:85:72:98:f7:cf:ac:10:80:ee:2f:47:82:
ae:6b:88:3d:58:81:35:55:5f:9b:17:90:ce:4b:4c:
43:4a:fd:da:c4:3a:36:86:0d:70:b8:b9:06:56:db:
3f:e2:77:87:d4:71:5d:54:9e:35:3f:07:c1:bd:15:
e0:4a:e5:5d:32:0d:ec:c5:b3:7a:0e:80:d2:41:fb:
43:e0:03:4f:96:d2:2e:81:fa:de:27:5a:5d:08:b5:
1d:6e:78:03:0b:c3:00:47:a4:c8:07:89:3c:7b:0d:
59:d4:8c:af:c8:9f:54:fa:3d:f5:f8:2f:90:e2:7e:
7a:5f:ae:54:dd:60:84:f4:d8:df:fc:9f:ef:d7:1a:
c0:51:8d:9a:c3:3a:c5:76:b3:97:b3:9d:9a:fa:a6:
d6:8a:2f:7d:8c:46:39:6c:a7:5b:55:53:1d:71:59:
76:8d:32:f8:db:80:1b:7a:fe:61:fa:94:87:25:e7:
bb:c1:b1:5f:7f:d6:1e:26:c7:07:c9:4d:de:e5:ba:
b2:d6:43:5d:f2:b2:80:7c:8c:a9:e4:f6:6b:ef:2e:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:22:EA:FC:6E:43:96:CA:DA:07:9B:E0:3F:FF:CF:4D:E8:F2:58
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:9f:3a:4f:f9:03:80:0d:ac:9e:a4:8d:c7:70:dc:64:dc:
9b:d5:fb:11:c6:e3:bb:23:52:21:e3:94:5a:47:a1:bb:a2:b5:
e5:2c:54:a0:1c:9d:2a:ae:e7:3d:59:e8:94:ca:f7:58:02:53:
3a:a7:e0:1a:3e:09:1f:2d:7c:b2:36:eb:c8:f9:14:49:1d:61:
c5:ed:ac:9d:81:aa:bf:6f:1a:48:af:56:eb:8f:0f:63:a1:7d:
2a:fb:2a:e4:b5:73:dd:f6:cc:63:a4:84:a8:dd:c7:2b:e9:e2:
d1:3f:6d:ee:94:c8:88:81:03:d2:e2:aa:98:f5:d4:04:d6:5e:
8f:5e:42:0c:55:72:5e:aa:c4:72:d7:ab:29:07:ad:f4:0e:2e:
ea:0a:b8:bb:7b:db:9d:8e:33:ff:35:ae:69:ca:fd:de:98:1c:
dd:9e:b3:e7:80:d2:ff:0c:62:a3:a8:79:29:6c:10:d4:b1:fe:
6e:3c:f2:81:2e:8a:75:81:8b:11:f3:39:6d:ab:5c:9f:fc:7a:
8b:80:7c:7a:39:bf:d9:c2:f0:9e:ef:7a:0b:65:a1:31:eb:01:
23:3b:a1:b4:56:77:ab:8f:cf:3f:71:9e:f3:7a:36:98:79:f9:
5f:87:f2:a0:e8:a7:7d:56:ad:9f:09:52:95:84:6e:61:7f:e4:
d3:0e:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:36 2026 by rpki-client