Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: JPVfChocym71SOhJoZ8tkLl+wGoXZMYCnFeZZ+VRHc4=
Subject key identifier: 69:F0:99:29:D6:4B:B4:77:FB:14:07:30:7A:4C:99:46:B8:A4:FB:A9
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 019EB7334EFCDE3A3664DA0F54374D60480A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 108D
Signing time: Thu 11 Jun 2026 15:00:53 +0000
Manifest this update: Thu 11 Jun 2026 15:00:53 +0000
Manifest next update: Fri 12 Jun 2026 15:00:53 +0000
Files and hashes: 1: nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa (hash: qFZqmcvD3VdssLZWKysthIOIYoxtOvRq6+nL6RJRO2k=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: GlUaKfB4kEdp47j43xwpi6gk3FQR3b5mAvIkjnnLk3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:4e:fc:de:3a:36:64:da:0f:54:37:4d:60:48:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Jun 11 15:00:53 2026 GMT
Not After : Jun 12 15:00:53 2026 GMT
Subject: CN=69f09929d64bb477fb1407307a4c9946b8a4fba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:64:44:17:73:c5:b8:68:61:4d:ad:6b:52:
2f:f8:86:22:c9:1b:75:39:b3:89:c3:da:6a:d8:89:
21:28:4e:a4:82:08:b3:89:48:f9:5c:6f:e1:f2:9d:
6b:75:b0:6f:00:40:4e:51:02:14:00:77:df:e8:4b:
8f:d6:22:75:22:be:a8:b0:d0:1b:bc:92:f8:2e:61:
29:23:d5:d1:2f:83:8c:3b:74:82:c8:64:64:24:60:
be:2a:17:72:06:22:b6:f2:6b:9d:81:13:01:8f:e2:
25:17:4e:d1:2f:70:95:fb:b4:c3:22:77:43:92:27:
03:65:55:87:d3:9f:a6:60:20:ce:91:05:38:9c:49:
47:ae:e6:34:08:15:6c:78:67:e1:9e:82:29:1f:5a:
61:e3:3c:fc:19:9b:8d:c7:42:f5:84:c8:0d:70:4f:
5c:75:a9:b2:ab:95:43:21:99:df:0d:28:1a:92:73:
66:d0:35:d7:af:f6:40:c0:a8:bd:dc:b6:0c:14:2d:
c7:16:b2:17:27:a0:96:ac:71:ff:95:d1:51:3a:26:
50:e1:09:9d:87:0b:8f:dd:c9:ad:0d:34:5a:72:f3:
bc:09:09:64:c5:59:fa:91:ff:c2:22:a1:8b:b8:99:
43:f2:d5:4d:c6:9a:59:99:06:45:63:45:75:75:89:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F0:99:29:D6:4B:B4:77:FB:14:07:30:7A:4C:99:46:B8:A4:FB:A9
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:75:e4:0c:1b:ab:17:b7:24:83:6f:82:f9:2f:27:2d:b2:d4:
0d:89:ce:2a:3d:f7:f0:9e:ad:72:b1:59:5e:1d:b4:24:f7:96:
df:d4:97:8a:b6:a9:2a:bf:c9:75:25:12:5a:3d:7a:d1:f4:97:
48:8b:39:75:b3:e3:ad:67:63:35:7a:12:48:ea:80:cc:b3:1f:
70:b8:91:67:84:c9:6a:de:9c:74:c8:b3:66:b1:31:1c:e7:b3:
34:0d:05:c5:01:88:fd:c8:04:b3:8e:d2:6d:87:23:9b:8c:75:
a9:e6:a4:c0:87:67:5c:12:29:26:1d:36:d4:3b:84:94:9b:15:
a0:f9:1c:e4:82:d4:fd:80:a9:3c:9f:6d:be:85:77:01:57:ed:
a9:8f:57:74:39:34:a9:5b:8e:af:57:35:b3:32:bc:48:7e:fe:
0e:d0:da:8c:6d:4e:ef:a7:d5:eb:e8:90:f6:a2:6d:3e:70:c2:
e5:2f:50:23:38:d7:be:aa:6f:80:f5:84:80:f6:fb:f6:b5:6e:
d4:38:a5:07:2a:b1:14:61:6b:bc:08:21:8b:17:33:5b:e9:60:
e0:24:58:32:b2:0a:c7:61:26:ea:2c:e6:4d:88:7a:49:e9:7c:
ad:b9:65:f9:ae:7e:35:37:22:ca:b7:c1:13:cd:95:8e:f8:01:
9e:5d:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:47 2026 by rpki-client