Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
File: zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft (raw, json)
Hash identifier: tVPVkExfOiXUjoUEKVSl03W2zo0EGUHIp0qGJKPZUZg=
Subject key identifier: 3B:77:3A:AA:68:29:1C:4E:01:96:89:7B:28:74:E4:9E:F4:7B:25:76
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 019F72864E2E1FD7430B6CFE02994F5B0A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
Manifest number: 30
Signing time: Sat 18 Jul 2026 00:00:32 +0000
Manifest this update: Sat 18 Jul 2026 00:00:32 +0000
Manifest next update: Sun 19 Jul 2026 00:00:32 +0000
Files and hashes: 1: DNEldaHY2kEw4Rcm-XUfS7EOwDY.roa (hash: 9FqKHjD55WaTnWikw/XfEo/RJ5tXCDrBsU7KStjFO4U=)
2: mwC6MKa_JaWowyw2WhaQtGJ8cBU.roa (hash: oc9OWN5cse8gqT8UGgSTo1cj+MCP+VmGebDH3qUQknc=)
3: zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl (hash: nefvgB2SMr0BgV0MlVjWXn1qczHYXAfyz28fzoRli88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:86:4e:2e:1f:d7:43:0b:6c:fe:02:99:4f:5b:0a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Jul 18 00:00:32 2026 GMT
Not After : Jul 19 00:00:32 2026 GMT
Subject: CN=3b773aaa68291c4e0196897b2874e49ef47b2576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:7f:4a:4f:04:e8:f0:c0:e3:87:ed:61:23:
e6:f3:dc:d7:1f:a7:71:d4:22:2a:d9:38:80:94:1a:
4d:e0:99:c6:12:90:83:d2:b5:64:6c:8b:b0:d4:48:
28:e1:a2:b9:7c:ba:f7:d8:33:5b:7a:2e:87:cc:05:
65:59:d0:1b:ab:a2:eb:00:71:2e:82:ae:21:29:a4:
40:70:32:12:44:ef:8a:2a:d7:f9:6b:e2:c5:0f:21:
f9:f9:0f:38:0a:a3:47:d6:18:c6:e1:7c:f7:6c:81:
41:82:aa:af:03:1b:6e:c4:77:01:71:fd:f3:cb:02:
0f:ec:a8:b6:d5:cf:f2:f7:95:40:a9:72:27:3f:0b:
6b:1d:a7:8a:47:c1:1a:a9:3c:fb:1f:3e:6a:27:df:
18:10:0c:e6:7b:d4:63:30:dc:c8:fa:fe:32:1b:cb:
13:a3:a9:d9:aa:90:31:bd:ff:db:21:0d:9e:ab:9d:
53:38:52:d1:66:70:70:0a:4f:9d:2a:3c:3f:87:5e:
88:5a:a6:03:fb:72:62:04:ec:84:78:b3:e5:a9:21:
2b:22:1f:05:95:90:1f:f3:7d:76:4d:e8:10:d3:fb:
3c:f4:9e:c5:66:f0:3a:f8:6c:60:2d:50:f9:dd:ab:
96:b3:84:5e:54:69:d9:8b:ef:cf:4a:86:18:c1:9a:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:77:3A:AA:68:29:1C:4E:01:96:89:7B:28:74:E4:9E:F4:7B:25:76
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:78:a1:7f:2e:71:59:93:c9:d6:bb:08:4c:6f:10:00:15:e1:
1d:8e:a7:e4:3a:2e:48:c6:d2:fc:23:f0:74:ae:54:04:2f:74:
b9:6d:a2:ca:5d:04:13:19:2b:b6:2d:81:ad:d2:35:b0:52:e2:
2b:7f:be:2f:83:fe:b9:e9:6c:c9:07:00:46:30:03:7b:c7:40:
27:93:7f:18:7b:c6:40:93:09:0a:e5:b8:ff:18:5c:4a:65:37:
a2:9d:2b:df:5f:47:2a:c0:93:a0:ea:45:be:80:83:94:a3:fb:
12:8a:fc:dd:fc:37:8e:29:d7:3a:64:98:ba:43:79:af:4d:47:
88:d5:5a:be:a6:77:ab:f4:1a:b4:64:1d:6c:94:f3:16:7e:ef:
86:7d:b7:48:45:e8:67:0c:a6:09:12:8d:0d:7f:44:ec:47:d2:
54:e5:87:20:3f:bb:ea:61:81:e7:f0:77:01:b7:1c:6b:c6:0c:
7a:a9:2e:ad:6e:7b:28:35:e0:37:29:f6:99:b0:1d:44:f1:86:
74:83:5f:b9:87:c3:20:14:97:52:42:f5:f2:07:7a:3f:a8:11:
27:d6:91:d6:4f:04:46:9c:af:e2:9c:8a:e4:4d:37:f3:a6:81:
c2:b2:75:26:e0:9f:da:12:cc:2c:03:ec:c2:d6:74:b9:c1:95:
01:f8:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:10:50 2026 by rpki-client