Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
File: zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft (raw, json)
Hash identifier: Pvtm0pdqvpOpVrmPdd8A00EnsUjBiZBlDjDEf3fIU8U=
Subject key identifier: 64:2D:69:B4:EC:17:4B:95:AD:7D:47:F8:F7:80:36:33:32:D1:4A:35
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 01A0599F7471C51EEC3C99C5A83AE26A9FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
Manifest number: A9
Signing time: Mon 31 Aug 2026 21:00:16 +0000
Manifest this update: Mon 31 Aug 2026 21:00:16 +0000
Manifest next update: Tue 01 Sep 2026 21:00:16 +0000
Files and hashes: 1: DNEldaHY2kEw4Rcm-XUfS7EOwDY.roa (hash: 9FqKHjD55WaTnWikw/XfEo/RJ5tXCDrBsU7KStjFO4U=)
2: d0bKqLDVT9i-MCQKTK8YbEUqVLM.roa (hash: EeuLafzAZnsr+DGOi2eZXZcBrdc3AJiujy5QjDpVZRo=)
3: zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl (hash: iaf+8Qx545AHFcBdS9zsL3T6XnMujDjVCG/pvUGCOPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:9f:74:71:c5:1e:ec:3c:99:c5:a8:3a:e2:6a:9f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Aug 31 21:00:16 2026 GMT
Not After : Sep 1 21:00:16 2026 GMT
Subject: CN=642d69b4ec174b95ad7d47f8f780363332d14a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:69:3f:bb:29:47:0b:72:92:e8:dc:26:5e:
59:a9:cc:50:fd:cc:04:ef:15:c6:3f:18:33:9f:5e:
8f:69:27:19:0b:78:e9:55:95:c3:13:d9:5b:9f:d9:
e8:8d:8e:ff:b5:6d:a5:dd:60:35:f6:8c:6f:ac:fb:
10:4e:e1:2c:69:6b:28:22:50:ce:5f:3f:79:6e:18:
c1:9b:8a:32:61:75:0c:8a:96:d8:fd:e5:6f:1d:6f:
a7:b6:7a:fc:f1:33:f5:c2:24:05:f3:81:6b:d6:bd:
53:f0:08:71:b8:8c:26:f8:7d:ed:ad:0d:49:c7:50:
bc:56:a5:b6:61:33:19:16:38:73:4b:e4:2a:d5:27:
7f:70:fb:f9:eb:91:d7:3e:77:79:00:dd:d2:d0:02:
15:d3:cb:50:4b:7b:97:e7:54:47:2c:6c:e8:89:70:
09:cf:36:3f:95:f3:ff:8f:5d:46:fd:72:5c:29:a2:
a7:b7:60:c4:c5:e2:29:8b:9d:ae:26:20:20:7e:a3:
30:7a:02:5a:93:85:84:92:96:23:10:a2:1a:29:f0:
3a:de:56:b0:44:ff:33:ba:d5:c3:77:91:3c:53:24:
a1:bb:ea:96:08:68:b3:1b:bb:90:62:3e:ba:d4:e7:
95:09:be:2b:87:ea:c4:79:b7:f5:da:4a:d3:d4:e1:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:69:B4:EC:17:4B:95:AD:7D:47:F8:F7:80:36:33:32:D1:4A:35
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:45:8a:0b:3e:94:0e:d9:15:5f:97:d3:30:59:a7:6d:70:8a:
2f:b6:5b:87:18:4b:1a:ad:a2:2d:3f:5a:4d:e7:f9:c1:32:45:
fb:a1:bf:60:18:32:74:c6:1e:60:aa:bb:1c:6f:c8:45:4e:ed:
c6:e4:e1:d7:a8:e0:a0:25:31:5b:42:b5:ce:00:a3:71:09:fe:
7f:d5:23:0a:66:c4:0c:de:0c:17:65:83:1b:97:23:91:66:a9:
db:60:10:ca:ea:55:a4:16:5f:54:6c:93:25:51:e8:4f:8a:51:
e7:42:bf:c3:ef:d0:a8:e7:eb:f0:86:42:f7:fa:4c:76:be:24:
b8:1f:11:91:ac:7f:1e:f9:7a:86:e7:3e:b0:15:7f:f5:c8:8c:
fb:c0:40:8c:f0:71:61:7c:54:8c:0c:bf:8f:b1:8d:de:1c:4f:
57:eb:27:74:77:3a:16:13:df:c5:5a:37:a6:e3:5b:d8:ec:71:
4a:a7:db:c0:8a:9d:82:c3:d5:d4:38:e5:39:6d:d5:0b:6c:b0:
85:9c:56:3a:2a:6b:eb:0d:cc:4e:ec:46:45:d1:77:93:54:03:
dc:97:3d:79:02:99:d8:93:22:29:8b:f0:c0:2a:d2:0a:20:8c:
75:17:09:78:67:29:b9:35:74:45:1c:08:2c:aa:a0:f2:29:55:
89:06:5f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:57:26 2026 by rpki-client