Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File: b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier: Ml+oInoDqJKmLILCY05lm2GkJj95MESDflmz13a3Rjw=
Subject key identifier: 91:F2:F9:16:CC:E5:05:70:53:E0:40:1B:4A:50:92:6C:F5:FF:F6:24
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial: 019D38D2EE4D5CC554CDE9BD331CAE29FEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number: 0978
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 1-6zs2tFXXISIgFOlv5glBqi3Rng.roa (hash: ir6ev4+OP/qbZnv/DV6VaazeZTLvFs2HPxmxvhdDnKM=)
2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: 5o2BKQRdVee0RzPpgps/awAkG//TwJhimJxEl2nZTSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ee:4d:5c:c5:54:cd:e9:bd:33:1c:ae:29:fe:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=91f2f916cce5057053e0401b4a50926cf5fff624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:cb:76:d4:ae:7f:95:de:0d:04:06:22:27:
00:53:7b:65:c8:1b:0d:77:e2:1a:aa:6c:45:cf:8a:
e2:b8:a5:a9:9c:79:82:47:08:de:f7:2f:ee:13:0b:
e2:88:89:7b:28:9d:fd:4b:92:55:4a:3d:b4:ca:15:
ce:64:27:01:8d:09:aa:41:f9:19:cc:11:e5:cf:7f:
25:11:9e:ce:bb:94:82:32:c6:ba:75:52:00:25:18:
6e:f6:e2:8d:4a:73:dd:65:c8:f5:8d:07:65:2b:00:
85:2a:c5:4f:7a:c8:d9:22:d9:23:3b:37:7f:41:37:
0f:2d:1f:b9:8a:1e:b5:d1:f2:b4:40:44:89:5d:9a:
cd:ec:cd:4f:17:48:fc:15:32:0e:da:d0:a5:12:f1:
3a:07:4e:f1:97:aa:fc:ac:aa:63:f9:4a:52:c7:7d:
69:0f:d1:8e:e2:e9:85:4b:d9:24:19:e2:1d:c4:b6:
10:dd:03:d8:f7:e1:44:ff:50:ce:99:25:64:84:29:
27:f0:de:df:84:de:78:b6:c1:16:25:60:ce:f5:b5:
a2:a0:85:0d:6e:69:19:26:c7:e9:bd:cf:6c:b0:ef:
05:f9:a4:5d:7e:3a:01:6f:67:3c:98:42:02:6f:88:
1a:21:09:40:1e:ef:08:c3:c1:5c:5d:e7:3c:d0:f9:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F2:F9:16:CC:E5:05:70:53:E0:40:1B:4A:50:92:6C:F5:FF:F6:24
X509v3 Authority Key Identifier:
keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:19:d3:e5:71:b3:04:9f:8b:7e:44:31:da:12:4a:89:fe:c8:
e0:d3:0d:df:f2:cf:42:52:fa:35:57:da:0e:82:f9:a2:fa:09:
57:35:28:09:10:38:6b:69:23:5a:4d:9c:05:25:01:01:56:53:
41:94:1b:ff:e4:ec:8d:dd:03:35:fb:8a:c0:c4:88:fa:e1:c8:
14:d2:d6:64:0f:4b:6c:3a:a1:c5:ce:a2:74:0e:21:f7:44:dd:
73:87:ea:dd:90:85:f2:a6:fe:20:c5:3b:7c:12:57:a7:13:f8:
87:1b:2f:ae:6e:33:da:6c:bd:59:18:78:d1:ef:4f:c9:0f:90:
9a:25:6c:91:0c:d6:ed:d4:0b:48:02:87:f5:a2:74:65:9f:3f:
b8:7e:96:a4:f1:9a:96:16:fd:2c:63:50:a5:f7:3e:15:c7:5a:
87:83:f9:2f:ca:ed:83:c2:69:63:a5:80:d8:92:40:3c:63:90:
7a:ee:96:5d:42:56:d5:55:d9:c7:0f:94:37:6a:fd:8c:4a:43:
35:07:e9:bd:c3:36:15:22:d3:86:c6:ac:c8:2e:1b:c2:4f:7b:
bf:b2:2d:cf:04:87:cf:92:44:dc:16:d5:22:94:18:66:fb:35:
95:9e:c4:0d:4c:af:e4:30:c2:7c:4f:ba:e5:ae:0e:bc:16:81:
e8:39:27:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:18 2026 by rpki-client