Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: kCYXQLpzJOKfpfrVvLFBkiLCZO8/eD9Q3Fml4xCL9yw=
Subject key identifier: C9:54:D8:51:A7:24:D1:51:98:9E:44:72:C8:57:10:14:88:40:25:DE
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019F95B7B050DC58CCC3E39C6426A96BC6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 20:01:11 +0000
Manifest this update: Fri 24 Jul 2026 20:01:11 +0000
Manifest next update: Sat 25 Jul 2026 20:01:11 +0000
Files and hashes: 1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: BcYa8073aijrYdb5dG8llWw72IWH8c8ATv+eHVFAvmY=)
3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:b0:50:dc:58:cc:c3:e3:9c:64:26:a9:6b:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jul 24 20:01:11 2026 GMT
Not After : Jul 25 20:01:11 2026 GMT
Subject: CN=c954d851a724d151989e4472c8571014884025de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:ff:cf:f9:69:67:32:c6:4c:52:0a:ca:89:
6a:02:3b:53:7d:28:71:d2:c7:77:94:0c:01:a4:90:
2f:16:a3:10:6f:43:be:2d:a2:49:b8:5a:1b:dc:35:
04:91:db:f9:d6:b2:f8:81:17:ed:a7:d6:22:7e:67:
1f:40:e8:ad:ff:85:bb:96:cf:22:42:5b:47:3f:2f:
d4:42:9e:2c:bc:3f:ab:f1:2b:87:35:f6:30:07:87:
5d:2d:c1:e8:b6:93:bf:61:91:d8:1b:9f:e1:b1:69:
a2:61:53:30:2c:af:3e:64:e3:d0:06:1e:c5:fe:21:
31:d7:11:8c:0a:41:5b:13:ce:9b:4a:49:7a:2d:65:
4b:21:28:a0:b5:ef:f1:5e:24:1c:af:2f:86:73:81:
8e:4a:b8:40:e3:9f:4d:1a:e6:0b:73:a7:41:8f:cc:
c7:79:39:15:d3:4a:f5:22:c6:7a:27:9d:8a:78:c2:
b6:62:64:23:94:0e:22:49:44:76:f2:d8:eb:c6:be:
49:a9:c6:a9:24:ed:b5:aa:de:85:e9:35:fb:a4:36:
f5:97:1b:e5:12:25:1e:cc:c8:2e:0d:fd:ae:23:57:
22:1d:2e:67:a8:00:bf:f6:a9:2a:a1:36:a2:a2:ec:
4a:3a:df:5a:0e:31:63:8b:c9:d8:db:bc:4e:9b:e0:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:54:D8:51:A7:24:D1:51:98:9E:44:72:C8:57:10:14:88:40:25:DE
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:57:93:c0:58:f3:2c:8e:94:8a:c9:a5:7a:60:03:f0:bd:e9:
c6:06:b5:62:ca:13:37:8c:13:c3:13:d4:9d:a3:79:4e:6f:ce:
3f:31:cc:11:5a:51:35:5c:7c:e1:38:89:54:56:c5:19:a1:cd:
59:10:2c:0a:c5:3a:fb:ae:f0:94:32:89:18:b2:ba:55:e3:11:
2e:a3:8a:6f:5a:dd:63:18:3d:df:5c:16:8a:d5:47:04:71:6b:
54:12:91:07:85:7b:6c:d6:08:6c:8b:04:c8:4f:e1:b6:4b:33:
a3:19:aa:09:34:91:e6:2a:e9:8d:ce:2d:28:12:a2:93:fb:16:
96:a8:d1:e2:f3:8a:8f:a0:8a:dd:69:0a:02:38:bd:7b:4c:a8:
02:2d:39:ae:f9:36:84:30:e3:04:e0:63:b9:1b:b9:10:d0:c5:
e7:3e:a4:ab:d3:33:7e:1f:f9:a3:fb:cd:29:56:b5:b2:c1:9f:
8a:de:e4:7b:c6:f2:de:1c:ba:6c:16:c1:3d:30:e7:06:e1:73:
4e:c6:6b:f3:fb:ce:19:4f:87:c8:00:4d:99:9f:f8:a5:12:a2:
be:37:25:d2:6a:99:a6:bc:dc:26:c6:68:cc:c9:6e:d2:56:4d:
f5:37:7d:f0:65:05:f9:a0:63:e1:0f:dd:d7:d6:04:6e:a5:e8:
6c:f9:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:09:49 2026 by rpki-client