Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: OkipQZ0MkzUl6bnDmDQ2XpIVIhcP256kzLDNAxXTIWQ=
Subject key identifier: BB:F7:37:C2:B4:BD:10:20:BC:0D:B9:A8:13:38:7B:25:5D:92:F1:26
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019E20FEFDD14A34E9A523EB30E16E9879C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 190F
Signing time: Wed 13 May 2026 11:00:42 +0000
Manifest this update: Wed 13 May 2026 11:00:42 +0000
Manifest next update: Thu 14 May 2026 11:00:42 +0000
Files and hashes: 1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: YrBErD4t7MIpYOUzDSMhnKloHiojzxw21fdJUqL/Qok=)
3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:fd:d1:4a:34:e9:a5:23:eb:30:e1:6e:98:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: May 13 11:00:42 2026 GMT
Not After : May 14 11:00:42 2026 GMT
Subject: CN=bbf737c2b4bd1020bc0db9a813387b255d92f126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:85:a4:5b:ae:0b:0f:fc:3a:69:3e:48:11:
c4:0b:f7:7e:c6:e9:5e:5a:6f:b3:a7:86:fe:f2:03:
61:cd:93:e3:43:22:d1:e5:23:0f:8d:95:21:65:b9:
d0:a1:9b:0f:57:1b:d3:59:9e:ee:b8:3e:3b:e6:c7:
73:12:3c:0b:5e:55:db:1b:5d:34:7f:e8:ff:07:47:
99:f6:31:8f:47:d8:51:16:fe:44:0f:43:e6:dd:00:
88:74:e1:34:ae:7b:d3:c3:ae:03:95:fd:c2:1b:89:
93:4b:e1:0a:c9:a5:ce:fc:34:ee:b6:b2:e0:87:5f:
f1:6a:0b:fa:7e:98:ce:d6:5a:18:a0:d2:fd:2c:e6:
ea:8b:ba:bc:54:d1:72:4c:3a:70:78:c4:0f:c6:6e:
06:df:26:9f:30:72:0c:25:f6:b1:3c:2b:ad:ba:77:
3c:ed:49:96:2c:3d:80:a2:af:f5:40:c9:7a:60:a9:
ce:76:34:7b:4c:f8:d9:b5:5a:fc:56:26:c7:c3:ef:
a6:f0:4e:c0:74:0d:75:a3:e3:cc:13:f8:70:45:bd:
e7:9a:4a:bc:40:1a:c3:03:be:0c:60:75:79:18:7b:
13:29:56:ad:aa:32:41:db:02:bb:60:8d:1f:9c:ee:
e6:c4:dd:96:e3:aa:58:94:bc:2b:3b:f4:80:16:c3:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F7:37:C2:B4:BD:10:20:BC:0D:B9:A8:13:38:7B:25:5D:92:F1:26
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:0a:b8:bc:23:d9:03:02:e3:36:5c:da:03:f5:31:de:ca:24:
3d:c3:e0:d9:fc:67:4e:0d:5b:16:7d:7e:c3:b2:d9:1e:53:16:
b1:b8:dc:26:4a:37:73:d3:20:1a:d0:67:6e:bf:68:73:fb:8b:
95:4e:74:ed:6f:22:51:c7:12:d3:24:d5:d5:77:99:2e:98:c9:
10:3d:a4:68:f4:28:4d:50:3f:1e:af:31:2d:be:c5:b9:0f:64:
13:ae:a1:06:9c:c1:a2:51:5d:1b:d8:df:8d:d1:e6:28:b0:87:
4c:27:b2:26:b3:4d:53:51:b2:2b:e8:66:20:c9:85:8e:ed:9d:
82:80:54:c6:3b:b5:f5:75:f3:df:2f:85:fb:12:81:35:da:29:
05:34:8a:70:fe:f0:b4:ad:c2:ab:41:e9:48:37:23:96:ae:bc:
e6:4f:f3:d7:77:7c:c5:9a:3e:8c:52:30:ee:e1:ab:59:e2:33:
79:1e:74:4d:65:28:e9:60:5f:bb:32:e7:53:43:a1:bc:39:54:
95:3e:42:e0:4e:38:23:d8:71:4b:ef:bd:0e:96:12:65:ed:65:
54:be:7b:23:2d:ed:54:53:52:d6:cb:ed:10:c3:6f:a0:59:63:
5b:6f:3b:8f:e9:96:d3:18:1e:cc:07:4e:f6:cd:1b:90:80:b3:
ef:d0:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:16 2026 by rpki-client