Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
File: zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft (raw, json)
Hash identifier: 0Es4pYu2IYX9dOsVkxgoYe057IPQcBlkgbgyEk2VBdM=
Subject key identifier: 95:E6:65:54:54:E3:F8:C4:E0:D4:AB:75:EC:21:37:AD:F4:45:E7:19
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 01A14BE250982840F1D215A696E720744837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
Manifest number: 0127
Signing time: Sat 17 Oct 2026 22:01:25 +0000
Manifest this update: Sat 17 Oct 2026 22:01:25 +0000
Manifest next update: Sun 18 Oct 2026 22:01:25 +0000
Files and hashes: 1: DNEldaHY2kEw4Rcm-XUfS7EOwDY.roa (hash: 9FqKHjD55WaTnWikw/XfEo/RJ5tXCDrBsU7KStjFO4U=)
2: iCtNp6lUje_AgO9yYeqMkNSwyv4.roa (hash: CvKrsJNF07tEoYugNsdQgzyUNLDcllXE/bP3Vd/nJfI=)
3: zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl (hash: N1yNfHnj8KY/pE0BpB1maAkN/BwhXGavw9o7voAH2ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e2:50:98:28:40:f1:d2:15:a6:96:e7:20:74:48:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Oct 17 22:01:25 2026 GMT
Not After : Oct 18 22:01:25 2026 GMT
Subject: CN=95e6655454e3f8c4e0d4ab75ec2137adf445e719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:a9:1c:2a:6f:f1:33:15:1e:60:8b:3c:cd:
8c:bc:3c:75:bc:41:2a:03:98:aa:e2:d6:a1:eb:33:
53:6c:97:ce:8a:e2:58:1a:f2:7f:e2:21:a0:be:ac:
d0:05:4f:78:36:bf:9d:0f:de:1b:98:cf:86:84:e0:
da:31:ee:5e:b4:92:c4:b5:19:df:15:eb:0a:7d:3c:
5b:63:32:e6:ff:9d:0a:26:d2:7e:1f:0c:ea:42:e2:
1c:c1:67:54:e6:22:77:3a:18:e3:b0:5e:9c:c1:28:
e9:bf:12:03:33:ca:45:50:a1:34:0c:12:9d:c2:76:
ea:ff:ea:ba:9b:f8:06:b9:8d:16:61:ab:c2:33:62:
7d:c7:8e:b0:a2:7d:a2:29:34:f5:ff:a4:b6:22:d8:
e7:00:35:22:34:3a:5d:44:78:cb:3c:cc:f6:55:8b:
07:e1:e5:8b:3e:d7:1b:89:0f:27:7c:33:1e:c5:64:
0f:eb:78:59:43:66:a2:fa:cd:c2:f8:ed:14:6d:84:
0d:3b:b5:e1:f1:d6:27:4b:5a:8e:99:5d:62:ef:cf:
8a:8c:ae:06:f1:84:42:c8:5e:1e:56:23:80:a7:ce:
f7:4d:27:4e:e1:c6:eb:b7:5e:c2:0e:e9:da:dc:91:
65:ae:6a:84:ca:83:4b:ee:b4:2b:88:07:e6:a9:e5:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:65:54:54:E3:F8:C4:E0:D4:AB:75:EC:21:37:AD:F4:45:E7:19
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d6:78:0b:7d:ce:57:9e:df:7d:47:81:64:25:f0:61:06:28:
2f:da:00:19:e4:40:9c:8d:a6:72:cb:b3:a5:02:48:64:d9:d2:
1c:c1:75:18:57:a0:12:48:41:13:c4:f1:e0:24:e3:04:da:36:
8a:f7:df:d9:53:13:76:de:a3:d3:73:e0:9a:ca:e1:b5:68:ef:
0e:0e:b7:9e:cb:32:11:cf:f9:2e:6c:c0:42:ef:e3:61:bc:23:
5a:8a:97:2f:ca:e1:ae:78:2b:ab:56:cf:fa:34:3f:f3:82:30:
45:18:9d:7d:ec:86:46:08:14:61:2b:39:4b:20:b6:31:43:3f:
c3:02:cf:55:52:e0:1f:fd:c0:b6:0c:e0:b0:d6:24:58:dd:e1:
ed:33:cd:5f:0d:79:31:5c:77:c1:f2:ed:9c:0e:90:7a:1f:fe:
94:08:76:4f:aa:36:91:a6:64:42:bf:d0:e5:88:52:b8:c7:c5:
91:40:16:40:b1:a7:75:e2:71:4d:f3:e2:ae:2c:c4:2d:a8:e4:
a0:cc:76:e4:31:3d:c0:4d:88:b0:ce:fd:66:0a:c0:07:4e:85:
34:95:ee:2d:6a:6f:5d:78:c5:d8:9b:6c:8d:fb:73:0c:aa:95:
da:24:9d:72:8f:43:66:44:c2:d0:45:b6:14:4a:8c:00:f2:d3:
05:c2:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:20:57 2026 by rpki-client