Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier: 5zxDMRO1cY/lntnOyoPeBGVt88XuK6yW3L6oaad7Vac=
Subject key identifier: 9B:E7:FA:A7:5D:0E:D6:79:8B:13:2E:AB:BF:8F:51:39:7A:0A:30:DE
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 01A11AF5481DFAA6D8C1DFCF8497C2D3959C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number: 1139
Signing time: Thu 08 Oct 2026 10:00:44 +0000
Manifest this update: Thu 08 Oct 2026 10:00:44 +0000
Manifest next update: Fri 09 Oct 2026 10:00:44 +0000
Files and hashes: 1: w3WwugLLFUcrItCxeJKoofI3afc.roa (hash: EnJ2zpdE5VsVYk/C8ci9QDlsMzJ01oLKtWbpS2SqvN8=)
2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: +i+qqdgZmPD9HL9mYiQ8XroXnTdaPCc8DiCLTQ+nLi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:48:1d:fa:a6:d8:c1:df:cf:84:97:c2:d3:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Oct 8 10:00:44 2026 GMT
Not After : Oct 9 10:00:44 2026 GMT
Subject: CN=9be7faa75d0ed6798b132eabbf8f51397a0a30de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:51:f8:31:85:e6:e9:f8:71:f6:29:82:9d:
29:b5:4d:7a:f1:9c:8a:43:72:6c:40:30:98:c1:12:
b1:31:db:82:30:59:fb:e8:85:09:34:b7:ae:ce:ae:
78:33:3f:2e:d5:55:e1:29:2b:98:6b:ef:56:a2:39:
9f:73:68:02:e7:12:5e:ce:a3:7b:b5:f2:48:16:91:
84:3e:50:50:b3:dc:f4:02:77:66:35:a2:4a:fa:da:
8b:1a:c0:3b:26:53:43:b9:ca:ee:49:9b:63:b2:a6:
5e:bd:12:0f:53:62:75:ac:2a:83:ff:8c:1a:c5:b6:
28:16:be:14:bb:7f:f3:e2:65:9f:85:9d:18:a5:85:
30:e6:8d:29:e2:40:0d:3d:68:f4:bd:41:8e:a2:ab:
5d:9e:67:82:38:e7:77:a1:9c:cf:3b:04:a1:5d:7f:
c1:4f:6a:06:94:be:e2:d2:30:fb:9c:ca:50:fb:5e:
35:3c:f9:aa:85:df:24:9b:d6:87:7c:ef:19:2a:1c:
6f:48:32:d3:26:f4:40:ce:a1:3b:c6:4a:71:c3:bb:
53:76:b9:c5:51:47:21:79:19:cf:79:09:d1:03:23:
c1:db:3e:ce:e1:1e:16:3d:ef:03:24:e9:37:66:88:
85:0b:c9:65:d9:0d:39:f4:64:f4:e3:9a:52:a0:c4:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:FA:A7:5D:0E:D6:79:8B:13:2E:AB:BF:8F:51:39:7A:0A:30:DE
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a3:47:7a:4c:02:54:8c:73:81:99:5a:70:04:cd:c2:61:27:
fd:92:ec:88:47:7b:3c:19:d6:69:29:ce:e9:65:3c:11:7b:29:
a4:11:c6:f2:75:25:88:56:36:27:cc:df:ac:98:49:e1:b2:db:
57:50:71:7b:36:f5:4c:82:7d:b5:bf:3a:5f:3b:dc:3a:06:d5:
34:da:00:e7:ae:70:a2:bd:a4:91:26:01:68:c0:da:c9:ee:fa:
0d:ad:57:07:85:24:ba:6a:b7:9c:50:30:cf:ce:66:32:00:15:
bf:c3:12:1c:89:89:92:ff:9a:a0:f7:6a:98:bc:f2:f7:f3:ef:
93:04:64:21:0a:6b:97:0a:31:2e:16:14:4d:72:a5:cb:98:60:
82:e6:5d:ad:e1:60:87:8c:20:e1:67:47:da:97:ee:a9:96:76:
0f:ad:1b:03:a9:38:ec:d2:70:cd:1b:6d:3b:86:d2:5f:4b:f9:
29:fd:62:5c:8b:d6:14:25:b3:e4:ff:1e:e9:af:5e:18:cd:45:
3d:94:0f:3f:8f:5d:0b:c2:ae:f2:da:78:6e:91:78:5f:8d:02:
71:c3:82:e0:98:48:47:1e:b7:c1:9c:3b:42:d7:83:42:7c:6d:
04:69:a7:ef:65:95:a4:b9:96:59:38:63:89:68:a2:cb:a4:58:
9b:f7:e1:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9Ugd+qbYwd/PhJfC05WcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmE2ZDU3MDRmZDI5MGQwZTA3MzM3NmVkYTY4ODcxNzU2
NGQxOTYwHhcNMjYxMDA4MTAwMDQ0WhcNMjYxMDA5MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg5YmU3ZmFhNzVkMGVkNjc5OGIxMzJlYWJiZjhmNTEzOTdhMGEzMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhZR+DGF5un4cfYpgp0ptU168ZyK
Q3JsQDCYwRKxMduCMFn76IUJNLeuzq54Mz8u1VXhKSuYa+9Wojmfc2gC5xJezqN7
tfJIFpGEPlBQs9z0AndmNaJK+tqLGsA7JlNDucruSZtjsqZevRIPU2J1rCqD/4wa
xbYoFr4Uu3/z4mWfhZ0YpYUw5o0p4kANPWj0vUGOoqtdnmeCOOd3oZzPOwShXX/B
T2oGlL7i0jD7nMpQ+141PPmqhd8km9aHfO8ZKhxvSDLTJvRAzqE7xkpxw7tTdrnF
UUcheRnPeQnRAyPB2z7O4R4WPe8DJOk3ZoiFC8ll2Q059GT045pSoMQ65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvn+qddDtZ5ixMuq7+PUTl6CjDeMB8GA1UdIwQY
MBaAFM26bVcE/SkNDgczdu2miHF1ZNGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTkt
YTQ2MTE2OWYxZGMyLzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTktYTQ2MTE2OWYxZGMy
LzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqNHekwC
VIxzgZlacATNwmEn/ZLsiEd7PBnWaSnO6WU8EXsppBHG8nUliFY2J8zfrJhJ4bLb
V1Bxezb1TIJ9tb86XzvcOgbVNNoA565wor2kkSYBaMDaye76Da1XB4Ukumq3nFAw
z85mMgAVv8MSHImJkv+aoPdqmLzy9/PvkwRkIQprlwoxLhYUTXKly5hgguZdreFg
h4wg4WdH2pfuqZZ2D60bA6k47NJwzRttO4bSX0v5Kf1iXIvWFCWz5P8e6a9eGM1F
PZQPP49dC8Ku8tp4bpF4X40CccOC4JhIRx63wZw7QteDQnxtBGmn72WVpLmWWThj
iWiiy6RYm/fhog==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:44:50 2026 by rpki-client