Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
File: zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft (raw, json)
Hash identifier: wdRrjmMliQMd7XtdHeBR2QP8caU1ZbNPkBrtNPenk8A=
Subject key identifier: DD:DB:09:1E:E1:0E:71:A3:97:84:DB:C5:49:EE:B3:D2:F4:B2:27:5C
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 01A1DCB917AF6708D8E5A16288164E233298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 01:01:20 +0000
Manifest this update: Sun 15 Nov 2026 01:01:20 +0000
Manifest next update: Mon 16 Nov 2026 01:01:20 +0000
Files and hashes: 1: DNEldaHY2kEw4Rcm-XUfS7EOwDY.roa (hash: 9FqKHjD55WaTnWikw/XfEo/RJ5tXCDrBsU7KStjFO4U=)
2: iCtNp6lUje_AgO9yYeqMkNSwyv4.roa (hash: CvKrsJNF07tEoYugNsdQgzyUNLDcllXE/bP3Vd/nJfI=)
3: zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl (hash: CjiqkuMTMzMkiApdl+dMbbLw1rT/bDk1sUD5BtfRKrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:17:af:67:08:d8:e5:a1:62:88:16:4e:23:32:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Nov 15 01:01:20 2026 GMT
Not After : Nov 16 01:01:20 2026 GMT
Subject: CN=dddb091ee10e71a39784dbc549eeb3d2f4b2275c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:f1:18:24:7e:c3:67:06:0d:5f:b8:2c:e1:
60:e1:2a:36:d6:b7:eb:9e:2f:ef:c4:f3:91:1c:03:
f6:96:af:5f:f8:21:a0:6b:0d:d8:13:99:ed:17:c4:
bb:06:15:f1:26:f6:f6:cc:aa:73:97:ae:18:46:2e:
b1:ac:e2:ea:ee:fe:78:c6:2c:3b:01:89:fa:9c:4e:
a8:be:80:dc:4d:23:a6:95:51:d4:6c:4b:66:07:ac:
f5:3a:d1:63:dd:bd:fe:05:f6:c0:66:0b:9c:a3:10:
ba:40:2f:7c:3a:b2:32:ba:58:9f:31:ce:4f:30:aa:
c9:1e:a4:07:88:b6:c9:c0:5c:cd:f6:3f:ea:62:77:
8e:87:a2:4c:0b:9f:ef:36:dc:2c:59:11:b1:53:dd:
0d:ff:15:da:1c:65:40:70:a9:2a:ad:b4:a9:49:10:
8b:b9:96:15:24:af:51:63:ea:82:0d:13:6b:13:4e:
9d:37:c5:e4:e6:96:2e:27:9a:d5:c4:74:9d:4c:6e:
f1:01:dd:4a:45:7d:8c:13:5c:57:21:4a:66:71:07:
da:25:8b:1e:2c:18:5c:cc:ad:88:03:c6:a0:ec:76:
51:9c:bf:0f:02:02:00:1b:b0:9c:a5:1e:c6:5a:fe:
cf:f8:34:a6:d7:cd:73:50:8d:f7:1c:7d:ee:42:ee:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DB:09:1E:E1:0E:71:A3:97:84:DB:C5:49:EE:B3:D2:F4:B2:27:5C
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:8c:9c:36:86:ef:03:53:af:e9:dc:ca:d4:44:f0:b6:84:
16:bb:e1:cb:4f:71:66:cc:79:fc:a4:4b:20:cd:7b:bb:bd:f7:
f2:e2:fc:29:9b:14:b5:1e:aa:27:94:35:ec:cd:b6:22:4d:44:
00:60:cc:04:29:84:0f:6e:c2:3b:a9:f5:36:9f:33:90:5c:15:
4f:9f:d6:d2:9f:00:b1:a5:5d:2e:b2:f7:23:f3:7e:64:1c:1d:
cb:03:78:23:53:57:0b:a2:32:cb:f9:ef:ea:9e:65:56:c0:ea:
f3:f3:91:b9:ed:8f:ee:5a:c9:56:54:00:8b:d9:d2:5f:1f:f3:
07:f5:51:b9:fe:f1:76:3a:d1:10:cd:cc:95:f8:ba:f2:38:03:
90:69:0c:07:d3:53:a3:c8:95:bf:e0:00:2a:f1:eb:37:30:f1:
8d:ab:bf:78:a6:2a:d2:cf:6e:77:28:ad:1f:02:e6:79:fd:37:
78:55:1c:23:0e:e7:42:73:27:81:ba:f4:c5:0c:17:38:33:52:
46:ad:0f:2d:ae:85:a9:74:fb:24:c9:2f:b4:4a:3c:df:8e:aa:
2f:8e:54:7d:bb:f8:f9:4d:87:ce:6b:9d:77:17:94:eb:72:02:
29:74:8c:3f:c2:49:4c:1a:11:a7:92:36:3c:9c:e5:86:1b:0b:
43:e6:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:29:36 2026 by rpki-client