Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: ffVdXxO+GVfW9dv+W5vuPUV1JAQwHxL9aVfLcR9GCrc=
Subject key identifier: B7:41:E9:DE:A1:1B:B2:AF:F5:47:45:C2:73:D5:FA:AD:09:CA:81:26
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 019D2B4F0413D2356F62C167FABC7C756C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0FC0
Signing time: Thu 26 Mar 2026 18:01:31 +0000
Manifest this update: Thu 26 Mar 2026 18:01:31 +0000
Manifest next update: Fri 27 Mar 2026 18:01:31 +0000
Files and hashes: 1: nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa (hash: qFZqmcvD3VdssLZWKysthIOIYoxtOvRq6+nL6RJRO2k=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: 1TFgZ/Bq7dMaQfj8GUU63dcydJQDNrQ0GBhWgoR43gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:04:13:d2:35:6f:62:c1:67:fa:bc:7c:75:6c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Mar 26 18:01:31 2026 GMT
Not After : Mar 27 18:01:31 2026 GMT
Subject: CN=b741e9dea11bb2aff54745c273d5faad09ca8126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:31:da:35:e3:54:75:58:fc:a1:01:58:9c:
fa:5b:d7:5d:de:5a:f2:7d:f5:8c:02:6e:04:f1:2a:
ff:e5:e2:dc:29:3b:2a:43:fb:07:dd:6b:05:52:c5:
4d:6e:72:74:86:f2:c1:4b:48:0a:d6:4c:22:6e:66:
69:43:86:98:24:fe:65:14:d1:1f:63:a0:ba:ae:d6:
65:15:c3:13:67:d4:80:d4:80:bc:5d:b9:30:aa:1a:
f0:1a:b3:80:43:54:7c:ab:5e:29:91:a9:54:df:a2:
fc:a9:98:b6:44:37:57:ef:c9:4f:7e:6e:8c:00:94:
9c:61:29:03:0a:dc:8d:a0:84:22:f2:9f:8c:26:77:
9b:ce:9f:36:e3:b8:f1:08:58:9c:d8:96:fc:9c:d8:
00:dd:71:24:f6:5a:52:2d:a1:77:cf:79:86:db:31:
e7:50:4e:fd:0e:c6:29:2e:15:4b:35:68:e6:5e:4c:
e0:98:74:f6:54:7b:a2:f0:3f:43:77:8d:c3:00:c4:
ce:60:54:9e:dd:2a:78:ee:c9:53:1d:ca:0e:d4:1b:
a5:b8:20:a3:9e:d7:4f:87:47:70:13:c1:56:0c:67:
a8:ff:c9:5f:d8:6d:3c:46:d9:f8:4c:e9:69:d7:97:
29:0a:86:cd:66:43:d1:58:40:52:70:58:33:d7:0c:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:41:E9:DE:A1:1B:B2:AF:F5:47:45:C2:73:D5:FA:AD:09:CA:81:26
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0a:f9:60:45:f8:25:b2:6d:81:40:5a:79:61:3b:fa:72:fa:
bc:6a:2b:d5:9d:39:39:df:5b:ff:79:4b:6e:61:4d:02:57:b2:
5c:7c:7d:60:5e:f4:78:38:48:d2:3b:50:83:af:6d:c9:b8:e1:
b7:6f:fd:67:87:41:29:29:d1:61:1b:b7:9c:da:11:b5:ac:30:
ae:a9:5c:f7:b1:ef:f7:d9:53:4f:b8:d0:9d:54:e0:9f:2b:d2:
f3:e5:01:fc:dc:41:cc:99:eb:77:5b:d3:df:6d:cd:f2:b0:10:
9e:97:5c:d9:28:53:8f:c5:72:cc:8d:00:31:99:3d:b3:ee:fc:
73:be:03:45:06:b0:a6:d3:65:a5:e1:a4:cb:05:71:2b:0a:aa:
3c:ec:61:64:09:ae:b4:bc:cc:b8:b5:6a:e7:68:11:10:35:64:
3d:93:2c:23:d8:66:45:04:e2:b6:16:b7:f2:90:c3:3b:6c:12:
88:2d:bd:e0:e9:c6:3b:20:71:32:6b:2a:9c:5d:86:c1:ed:cd:
ac:80:ff:ff:7c:e3:46:cf:4c:ac:f3:b6:5f:f9:e2:ff:40:86:
0c:74:69:2f:d0:e0:30:b6:bb:e0:1f:09:9a:c3:79:44:70:1d:
a2:ad:a7:60:3b:57:5b:51:00:1d:6f:ad:f1:1b:e6:de:79:28:
b8:bd:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:31 2026 by rpki-client