Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: UxXyVyvZ2whEYa9BOJL1obMhm8r3/TSEwABOIjA+oCE=
Subject key identifier: D0:D8:14:FD:67:5E:BC:3C:0A:5B:D9:8E:46:61:EF:AD:C4:0D:DF:D3
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 01A119E2125703F48428E97C33FF03D9C33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 1A99
Signing time: Thu 08 Oct 2026 05:00:08 +0000
Manifest this update: Thu 08 Oct 2026 05:00:08 +0000
Manifest next update: Fri 09 Oct 2026 05:00:08 +0000
Files and hashes: 1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: K/PXBK0z1FrU9JT+AnSko7C/z7UbcY3rYnusVaWo1M0=)
3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:12:57:03:f4:84:28:e9:7c:33:ff:03:d9:c3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Oct 8 05:00:08 2026 GMT
Not After : Oct 9 05:00:08 2026 GMT
Subject: CN=d0d814fd675ebc3c0a5bd98e4661efadc40ddfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:7f:a8:ae:00:8f:9d:de:3e:e5:5b:c0:8d:
39:68:21:17:9e:56:f2:29:d0:8d:8e:27:ca:b9:98:
0f:eb:40:c1:36:13:8f:aa:d6:d8:86:33:d5:16:23:
27:8a:7f:08:4b:4c:28:05:6c:91:74:39:fa:d6:a7:
93:96:82:2d:c0:25:1a:0c:93:3f:5d:33:db:b7:f6:
6a:96:1b:5e:4d:a9:d4:39:43:16:a5:8a:ad:19:c6:
c6:b8:a0:ca:7e:78:fc:99:54:51:3a:81:27:21:8e:
0d:0e:01:71:b4:f1:b2:c3:61:99:b3:6f:7e:5a:ee:
ad:fa:0a:46:42:26:f6:03:53:4a:4b:be:73:cc:bf:
d8:31:9b:5f:7a:76:01:18:e5:a1:af:1a:64:98:98:
0a:40:e5:89:d8:df:bf:0e:ce:96:90:ef:b6:a9:57:
c5:1d:1d:60:62:fc:e4:c7:21:60:ae:b7:9a:30:ea:
ff:5d:f0:ac:a5:5d:1d:19:70:cb:a3:49:3c:f3:d6:
05:d4:89:f7:80:81:c2:19:09:a1:d0:04:34:cd:ed:
75:62:89:d9:28:1f:33:2a:02:ad:f5:b2:bf:6d:57:
6a:5d:d4:c8:ea:0a:0b:c4:38:3d:d4:ee:10:2d:5c:
16:8a:3a:fd:f9:cb:c8:39:e7:4b:64:5c:9e:5d:55:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:14:FD:67:5E:BC:3C:0A:5B:D9:8E:46:61:EF:AD:C4:0D:DF:D3
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8d:52:99:77:6d:b1:64:c1:8b:29:d8:50:c4:46:4d:c7:2e:
29:75:87:1e:f6:31:dd:38:98:8d:73:60:a9:d9:63:aa:03:1c:
bb:70:63:b7:26:de:08:69:ac:76:5c:df:4b:06:a4:03:64:c0:
18:d4:7e:07:07:36:94:4e:08:1c:cd:11:6e:b2:2f:30:2a:dc:
89:a0:a2:70:9e:95:40:5f:74:db:eb:31:34:a8:71:69:15:dc:
29:87:b0:05:ed:72:be:82:84:f0:99:c4:5b:8c:fe:97:a7:dc:
6b:45:9b:62:04:a8:f7:ef:c8:7f:10:5d:b3:23:d6:9b:07:38:
04:5b:ae:db:24:93:0e:ad:f8:6a:47:e0:4f:5e:06:7b:91:bd:
50:6a:2e:fd:e2:76:ad:86:64:f3:15:87:07:27:d5:5e:66:8c:
83:2d:0b:81:52:40:39:8c:29:00:3a:68:ab:f9:3f:58:60:7d:
aa:3a:e4:15:54:b4:47:fe:f7:e0:15:72:a0:6e:66:6e:ba:76:
cd:b8:4f:e9:e5:fe:78:6e:95:b7:2e:84:d3:d7:13:59:8b:3e:
45:15:a1:a1:41:54:45:a5:21:12:41:38:e8:10:71:eb:87:21:
ab:e0:61:de:49:e6:ac:73:d0:96:2a:ca:6c:c9:86:dd:4b:d0:
ec:c3:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:43:11 2026 by rpki-client