Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: QS8BGti0anMx7snIbK9iw+1Ezcs7K7/O7ZQjy0mVeBA=
Subject key identifier: 2C:A9:60:36:80:1E:F6:DB:F8:E4:A8:12:05:FF:A3:00:4F:91:37:26
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 01A0EA407FD4F262AE086534BE9A7DE984D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 23:01:30 +0000
Manifest this update: Mon 28 Sep 2026 23:01:30 +0000
Manifest next update: Tue 29 Sep 2026 23:01:30 +0000
Files and hashes: 1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: IdO3RpB3CaKyc8CTiVx+CssD+ZvpJcMpe6LQY8fccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:7f:d4:f2:62:ae:08:65:34:be:9a:7d:e9:84:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Sep 28 23:01:30 2026 GMT
Not After : Sep 29 23:01:30 2026 GMT
Subject: CN=2ca96036801ef6dbf8e4a81205ffa3004f913726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c5:51:07:19:78:e5:be:dc:b9:b7:1b:eb:07:
2a:72:58:ee:2d:bb:a8:d6:8a:c2:12:56:5d:fc:7e:
90:06:b2:38:bf:a6:19:16:56:80:dc:38:83:10:6a:
31:c4:da:4e:4e:b4:23:1c:c0:30:e3:6c:db:89:79:
fc:f1:a6:31:5e:28:3a:24:fe:57:46:aa:0e:ef:ca:
12:ee:25:1f:05:89:c7:d8:59:1f:25:08:d6:7d:fb:
ee:12:a2:de:38:be:62:61:f2:e9:f6:cf:c6:eb:3f:
36:74:0f:97:09:6c:44:fc:a3:25:72:6c:29:4d:19:
31:67:1b:03:bf:56:08:ab:13:0d:7d:56:72:e2:b6:
30:9b:1c:3b:5b:78:87:95:86:48:7a:73:07:4c:82:
bc:df:e5:62:b3:25:63:68:75:c3:15:4d:12:a8:09:
4a:e8:60:a6:0f:18:cf:a6:16:ee:f3:dd:13:77:e3:
32:4b:30:80:cb:cb:95:79:0e:88:9d:4c:16:bc:3d:
2c:3d:66:5d:03:0f:e3:be:38:f2:26:a1:f0:38:43:
5a:97:24:53:b6:0f:cd:4e:86:b2:8d:95:06:d1:4c:
38:fc:e0:a5:72:3f:ff:f7:16:c8:bd:c6:0c:c8:ea:
41:56:62:56:00:b0:1b:a2:da:0e:2c:6f:45:96:67:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:60:36:80:1E:F6:DB:F8:E4:A8:12:05:FF:A3:00:4F:91:37:26
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:b3:49:bd:63:9e:a4:09:1a:29:67:56:c7:51:eb:7e:04:
ef:6f:d6:52:21:ee:d3:05:07:15:cb:ce:70:46:ac:c1:86:26:
40:b4:5b:02:b5:fc:97:5f:1a:b6:c4:a3:04:4f:2f:02:62:bc:
5b:ff:61:30:d8:48:40:4c:5b:e4:fc:de:9f:ad:1d:60:a5:76:
c8:04:63:86:84:97:b1:89:37:e4:f8:4a:6b:db:2b:fc:62:c7:
94:48:11:8b:e6:c7:f3:ca:da:c0:f0:67:a0:8f:82:96:63:ed:
1b:c4:85:e7:5e:5a:9c:5a:ef:a9:78:a9:99:86:8f:00:9f:5e:
2b:90:e4:ad:77:04:01:4c:ea:1c:10:55:a4:c0:30:f4:cd:f8:
cc:18:c0:47:5b:f8:08:78:91:3d:79:47:a1:45:70:6e:a7:bd:
d1:2d:72:4a:d4:b9:17:90:3b:01:d3:c6:7d:15:4f:47:e4:2a:
92:6c:a5:b4:6a:f7:e9:fe:f5:a6:00:cc:2b:c7:ba:3b:d4:bd:
6b:22:ba:34:d6:b1:62:aa:fa:83:a5:43:31:d1:f7:bb:7a:d3:
fd:32:30:82:f7:ab:ab:ff:f3:d2:28:ba:b9:7f:63:5c:11:1f:
cf:36:14:06:95:bc:ad:93:d9:e8:a8:63:eb:8a:c9:c5:7e:c2:
eb:34:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:54:31 2026 by rpki-client