Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: x/Grgf7v1n0jvimtAejFgJFME/or4EklbYg1IgAjOkI=
Subject key identifier: CD:D7:94:1D:21:BC:E0:14:5A:20:73:A1:87:75:69:01:11:CC:16:7C
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 01A148E0F76C29730E62A91A8A24D06EAB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 08:01:05 +0000
Manifest this update: Sat 17 Oct 2026 08:01:05 +0000
Manifest next update: Sun 18 Oct 2026 08:01:05 +0000
Files and hashes: 1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: jpEe4fIx+w5W8pdukAR5CFp1BKym5OIfNwWCc0hT5zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:e0:f7:6c:29:73:0e:62:a9:1a:8a:24:d0:6e:ab:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Oct 17 08:01:05 2026 GMT
Not After : Oct 18 08:01:05 2026 GMT
Subject: CN=cdd7941d21bce0145a2073a18775690111cc167c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:23:e1:64:fb:91:0f:65:eb:24:69:d2:f5:
25:e1:0d:0c:f9:b9:75:77:fd:95:c6:40:ff:20:32:
d0:59:09:c5:71:a5:20:91:6b:b1:82:98:88:86:d5:
66:28:db:4e:c4:66:f2:f9:ae:32:25:25:dc:96:bb:
2e:f1:82:98:fa:bc:24:a9:d1:1b:e0:a3:fc:a9:55:
04:08:3f:60:f6:b2:7c:ac:28:18:a5:93:37:49:c9:
79:b7:1b:ff:dc:5f:41:3a:ff:2d:60:5b:99:bf:e4:
bf:51:9b:b8:c4:68:81:22:cd:d5:96:dd:82:3b:b2:
a6:ae:4d:cc:4f:de:27:f3:54:94:ae:4c:58:5f:a2:
7f:3d:01:10:a1:16:d3:ec:31:c0:fd:62:49:0a:ee:
a6:e6:f1:51:72:a1:60:3b:9f:1f:94:0c:a9:df:90:
70:8d:92:19:e7:2b:44:47:6e:fe:09:38:92:c7:66:
49:3e:1c:c2:16:de:6b:36:80:6f:07:e4:7c:d1:19:
d6:29:03:35:b5:16:58:5a:3c:4f:80:91:79:65:6c:
fe:88:cf:3d:df:1d:34:52:3c:78:13:47:b0:b6:a7:
14:49:ff:e9:26:6b:8c:9a:13:fc:8e:c3:cd:2f:0e:
f5:8c:a0:64:56:bd:98:76:da:c0:31:74:78:e9:43:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:94:1D:21:BC:E0:14:5A:20:73:A1:87:75:69:01:11:CC:16:7C
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bf:a4:b1:89:09:9e:c5:29:f1:77:34:64:e5:33:1c:be:c7:
52:91:01:07:5b:80:40:bb:16:a1:26:19:5d:c7:ce:c8:57:d8:
9a:5a:1c:bd:44:40:35:42:09:10:4d:7d:a2:8e:0f:a5:32:98:
03:e0:84:81:51:c7:08:57:74:5d:64:70:fc:54:5d:d9:ac:8d:
4c:b1:9f:61:7e:40:7c:7e:e6:ed:66:77:c0:db:12:41:47:0d:
2f:fc:9a:49:2f:5c:22:a3:45:ba:42:85:ad:9d:ce:60:e7:66:
78:46:e1:17:23:af:ec:b0:f2:40:c0:25:e0:aa:59:5b:02:83:
48:6b:4b:b3:56:3f:68:62:35:fe:69:ed:33:d1:1c:78:4c:ae:
ea:ec:39:7e:4a:e6:09:5f:88:64:5c:81:e7:75:52:a0:58:ec:
4f:30:41:61:e6:43:17:ca:17:6c:ee:05:55:c6:9b:73:d9:0e:
74:88:1f:3b:26:69:eb:f3:b3:f4:12:5c:5c:c8:f2:68:bf:74:
81:5a:bf:4b:ec:01:64:19:f2:b8:1e:b7:56:86:1a:00:f6:de:
35:ac:fa:7b:25:32:70:85:de:e8:79:d2:96:61:e4:b8:20:97:
a4:0a:68:45:13:fc:e6:db:96:b7:5e:9f:6e:be:a1:48:6c:70:
aa:77:36:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:18:02 2026 by rpki-client