Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier: owUj0YcjZ7Ch7XFOmR6GzxwAxaRSyCcitSPgOLeNJis=
Subject key identifier: 80:51:41:05:EF:3D:7C:D3:48:34:47:9F:16:63:50:CF:C5:0D:3B:6B
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 01A1287AAC6B679914E51598632FE90DA019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number: 1140
Signing time: Sun 11 Oct 2026 01:01:30 +0000
Manifest this update: Sun 11 Oct 2026 01:01:30 +0000
Manifest next update: Mon 12 Oct 2026 01:01:30 +0000
Files and hashes: 1: w3WwugLLFUcrItCxeJKoofI3afc.roa (hash: EnJ2zpdE5VsVYk/C8ci9QDlsMzJ01oLKtWbpS2SqvN8=)
2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: 0VgexUaSRUr/nclZGe5S1WEPsoVeUu4Vrm6VlhGLGCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:ac:6b:67:99:14:e5:15:98:63:2f:e9:0d:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Oct 11 01:01:30 2026 GMT
Not After : Oct 12 01:01:30 2026 GMT
Subject: CN=80514105ef3d7cd34834479f166350cfc50d3b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:fa:01:ab:6f:26:e2:f3:ab:82:50:ed:f6:
2b:1b:b7:8c:22:77:9e:4c:4c:4f:48:f8:92:42:ab:
4e:70:2e:0f:18:51:95:f1:5c:1d:61:e3:45:99:4a:
9b:68:79:95:92:37:6f:fc:9b:b6:2b:9b:d7:51:8b:
8c:8b:73:e1:e1:20:2b:a8:90:83:41:fc:7d:76:c2:
c0:32:0f:2b:8a:7a:4f:39:3a:60:26:f2:84:0b:b6:
c2:ed:37:91:e5:75:ad:e0:e3:57:91:4f:af:31:97:
39:1d:af:2e:2f:5c:8a:4e:d8:bb:58:43:67:96:36:
2e:19:0a:31:ee:a3:f0:eb:4b:69:00:e6:aa:93:48:
a2:5a:9a:34:fd:d4:99:28:0e:84:9e:1e:d4:bb:1c:
a7:62:e2:d2:05:1b:ce:84:a4:39:47:43:5c:0c:94:
65:8e:c6:e7:5f:9b:03:62:dc:b5:ca:57:23:e6:88:
a8:f3:90:08:62:d7:dd:33:d6:fe:57:11:f4:da:8a:
7b:48:78:58:e8:a5:4c:c1:d9:2f:87:62:fe:e9:37:
f1:63:39:ae:f7:c3:93:7f:08:43:c2:ea:4d:ce:3c:
ae:2a:f2:b5:bc:e6:82:b3:0d:56:14:5c:e7:aa:30:
14:79:e6:57:22:76:f9:cc:ed:28:d2:9d:21:7c:78:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:41:05:EF:3D:7C:D3:48:34:47:9F:16:63:50:CF:C5:0D:3B:6B
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a6:03:1e:e5:29:d0:e8:02:49:c2:23:fc:3a:54:b9:8f:66:
c1:8b:41:41:e2:ef:9a:d5:80:2b:8c:11:1f:5f:91:33:6e:3b:
ae:5d:05:c2:af:79:3d:0d:b8:c8:a6:5d:94:6b:40:01:88:21:
1b:d3:31:2e:69:e7:bd:8b:85:92:6e:0a:e9:04:8d:b1:b4:88:
78:a5:e7:1f:dc:eb:8b:f9:65:68:d8:82:c1:ad:f3:36:c9:77:
da:9c:93:8b:32:04:c6:0c:b4:49:b1:05:5c:c4:ff:3e:c3:56:
c4:3d:79:f8:f0:5d:51:a8:c2:3b:d8:be:db:95:ca:7e:93:66:
c4:78:7d:b9:81:ca:6f:e3:c1:62:5a:7a:df:00:09:d6:19:a9:
86:e9:2c:cc:39:da:9c:8d:db:cb:40:de:71:84:a9:b2:0b:e6:
ed:69:05:2f:07:32:d3:c5:88:38:c7:0c:0c:de:4d:aa:b9:1a:
4d:ab:c5:0d:01:00:51:e9:28:79:50:02:db:c5:e6:b2:20:b1:
51:16:24:b8:3e:e4:40:7d:67:ba:f2:b4:b7:b1:da:41:f8:f5:
81:9a:74:6e:1f:7e:5b:fc:c7:49:a6:99:b9:8e:2c:7e:2e:a3:
fe:d6:65:ad:84:97:f8:08:aa:bb:4a:4c:82:42:c8:d5:5b:bb:
d6:7f:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:07:11 2026 by rpki-client