Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
File: zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft (raw, json)
Hash identifier: Cc+dJsbRc0wV+4AKk6sv9I9AYjL7ICzeZaa8GqNPUEw=
Subject key identifier: 97:FE:4A:16:2E:CB:C1:44:BF:32:88:A8:C8:E2:BF:A5:DC:63:63:28
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 01A0D614B8E86C4D40888148EB8D0089D242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 01:01:17 +0000
Manifest this update: Fri 25 Sep 2026 01:01:17 +0000
Manifest next update: Sat 26 Sep 2026 01:01:17 +0000
Files and hashes: 1: DNEldaHY2kEw4Rcm-XUfS7EOwDY.roa (hash: 9FqKHjD55WaTnWikw/XfEo/RJ5tXCDrBsU7KStjFO4U=)
2: iCtNp6lUje_AgO9yYeqMkNSwyv4.roa (hash: CvKrsJNF07tEoYugNsdQgzyUNLDcllXE/bP3Vd/nJfI=)
3: zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl (hash: csR53L2jk99Dl055Qe7Fbwu7Red1eHzZwkIBq1DF5PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:b8:e8:6c:4d:40:88:81:48:eb:8d:00:89:d2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Sep 25 01:01:17 2026 GMT
Not After : Sep 26 01:01:17 2026 GMT
Subject: CN=97fe4a162ecbc144bf3288a8c8e2bfa5dc636328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:f0:4a:82:80:f8:2b:bf:af:61:a5:d5:66:
ce:88:b2:e8:54:72:7f:19:58:21:ad:e7:70:25:31:
c6:97:96:dd:02:7e:fb:8a:85:31:cc:62:01:4b:00:
03:f8:bb:a2:3e:83:5c:1e:28:ae:ee:6b:ab:df:58:
56:fa:e3:fa:9c:a9:bd:df:42:6c:d3:40:77:71:4f:
88:71:49:57:ce:6b:99:de:ea:ae:6c:e5:28:a9:cd:
fa:8d:39:32:66:3b:2a:e5:38:7a:4b:51:78:c1:f7:
f9:8b:41:d2:5d:c3:b7:e0:c4:a8:04:97:c1:7f:52:
a6:e1:f1:4a:79:a3:51:1b:ad:a7:ea:20:6a:2d:01:
6c:ec:79:e2:61:cb:64:36:0e:e2:00:46:f5:65:d6:
b7:ea:36:96:83:71:76:c5:5e:aa:f6:b7:cd:88:5b:
c9:21:0e:a9:8f:02:6d:65:b6:43:94:f4:fe:9b:4c:
b7:c4:bd:f6:d2:7c:fe:fc:c0:3c:e0:dd:4d:0f:b4:
ec:ca:48:5c:0d:96:16:7c:d3:06:5a:69:40:6a:56:
38:5a:65:a3:00:b7:33:48:9d:c2:b4:4b:96:99:27:
b3:5a:d1:cd:90:fb:81:0c:8d:af:62:84:d7:57:0f:
b3:c5:c0:33:60:c0:e4:d4:76:40:2f:13:a2:83:ed:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:4A:16:2E:CB:C1:44:BF:32:88:A8:C8:E2:BF:A5:DC:63:63:28
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d2:01:22:50:40:e6:1d:e1:28:68:32:16:59:8a:d8:f5:08:
71:cd:a9:cf:a4:6d:5e:5e:c6:09:6e:24:38:21:1a:f9:21:5a:
88:30:9a:3c:c1:98:3f:05:dc:9d:4d:d5:cc:d4:b6:6c:37:26:
3b:70:36:ca:9e:59:e9:7c:95:9b:ed:08:89:25:19:03:3a:28:
55:3b:48:1e:68:fe:58:78:26:2c:f6:35:aa:ec:c9:18:ba:1b:
45:00:91:a3:2f:a0:1c:18:d8:89:81:67:a2:57:1a:5f:53:72:
d9:51:ce:9a:6f:68:bd:7a:a6:a7:23:4d:70:75:ba:35:42:cd:
00:15:74:94:c4:c1:07:b4:06:67:27:82:bc:38:95:2a:a8:9d:
fe:b0:78:13:68:49:bd:2f:58:c8:69:f7:16:68:86:4a:a8:df:
24:a7:6a:40:a8:5c:b8:5a:f6:c6:3c:f6:cc:c7:89:b4:bb:29:
6a:63:ca:51:6e:18:82:df:e1:de:59:c6:bc:4d:7f:6c:aa:f4:
05:c6:bd:54:36:03:55:c7:98:26:72:4c:4e:43:e4:06:8a:71:
d3:04:51:64:4f:81:e9:1f:cb:13:3f:3f:a9:eb:97:e2:ce:13:
13:fe:bf:94:84:e6:55:1d:90:75:a5:9a:9d:dc:b5:37:1f:ca:
a2:cb:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:03 2026 by rpki-client