
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier: ZRX5IzDECCHVmYhfEB4a1u4oM6Q/XqSgfmEp9/he1zk=
Subject key identifier: A3:9E:4D:5C:AC:F2:10:9F:47:AF:63:85:97:8A:8D:44:4D:BF:4A:7E
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A0B3BF50F700A1D1BA3549E7D95A1D89F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number: 1B2E
Signing time: Fri 18 Sep 2026 09:00:54 +0000
Manifest this update: Fri 18 Sep 2026 09:00:54 +0000
Manifest next update: Sat 19 Sep 2026 09:00:54 +0000
Files and hashes: 1: 1oQjSm-kGBrxkRotrqHYaPNAYog.roa (hash: IIc8bR6RSqfXsFfLY0BAhVIj/jEYp+IGcje1VI5aU+I=)
2: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=)
3: 8I44W1DgMr0nZPhdUlABXoaCQTo.roa (hash: iGplkgd68u15p9JflOukg3JqxoQvGifeOjxl+QKCbak=)
4: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=)
5: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=)
6: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=)
7: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=)
8: ICt1Rkbvy2PurXTbs0JUqBhl_E8.roa (hash: vC+h6HjFcV/FpKrWeC9krmj9LLxIWfjfzAQgLBkIKBQ=)
9: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=)
10: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=)
11: O7pk6VO55klOvKkz3zzX4xSdPAM.roa (hash: pbiMJJZNQXKaJSS/os0JkRqMwkpts4ezR6iIP1M95i4=)
12: ObrwvnuybuX-TCdIyJYF8yRpE7M.roa (hash: ctdZU3BusOf+SUNNRsV3E3G1Z+DU1MZt+5gYWTRs6a8=)
13: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (hash: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=)
14: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=)
15: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: NqdhXq+IwrVmX4p0qx9AetVrEar/i7dBMxKDJxyIPec=)
16: bd2_haPLBRYi9ES34EvG-zee_fI.roa (hash: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=)
17: c6GILi92RmWHgC81JVzcin9qgpQ.roa (hash: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=)
18: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=)
19: ecEwq8kzjmUz4wAl5y9NY23nHP4.roa (hash: C9B98Hr14zxeLb9pyxpcpUi6RBAGhUr5GBAo9feKiQo=)
20: eqX4HCtONznBtdkM0Yv1tIipxwA.roa (hash: MDuAY2fOHyll6nWj4kl7aul/nqNWMDpsUW4/eoDcPJk=)
21: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=)
22: ja0BpQXhcblpKEj-Zj_RAjzr35g.roa (hash: iy0Afou5BdlAsZDL/FBHdBDLDYuwKrfJY54mLykthTs=)
23: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=)
24: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=)
25: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=)
26: mWBLEPz3C0Lf-l08xyY58aa8zT8.roa (hash: q8JaOwfKTrGzhPjlC43ijuG2sH1GANOpbIeobrHD4rg=)
27: msFoJS2lgnt0k3mYiMMf7W7m4XI.roa (hash: dakN/AD/BmQJDFFo8rBDUJU0AXGNYQnGLQfcB5HJcJc=)
28: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=)
29: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:bf:50:f7:00:a1:d1:ba:35:49:e7:d9:5a:1d:89:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Sep 18 09:00:54 2026 GMT
Not After : Sep 19 09:00:54 2026 GMT
Subject: CN=a39e4d5cacf2109f47af6385978a8d444dbf4a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:4d:ee:fd:e3:58:8c:54:9a:72:43:b8:9c:
25:4b:c1:15:e2:01:2f:1d:d2:da:99:43:4e:65:26:
b2:f3:9a:40:38:97:86:3f:7c:d2:aa:51:da:7e:5b:
4b:e1:95:c4:26:a6:3c:fc:fb:3d:2d:84:ba:da:ea:
70:0a:c6:a1:f1:3c:93:93:98:0e:2a:c1:cc:25:2d:
7d:2a:c4:cf:0c:ce:ae:29:e5:f1:d0:7a:9f:8e:cd:
97:83:71:4a:bb:ca:cf:05:e0:01:52:e9:5d:89:e0:
11:96:5f:77:00:ea:d3:b7:78:91:b2:ca:63:fc:e8:
77:3e:ec:66:81:23:af:80:7a:29:7f:9a:99:ed:71:
49:76:3f:04:7e:a6:f9:3c:21:6d:fa:bf:77:de:ef:
26:8b:9b:70:fc:07:42:01:76:89:1e:ab:ff:f2:d3:
7a:76:80:98:34:7b:e1:6a:a6:60:83:15:9e:d6:b8:
b5:98:0f:cd:27:4f:de:34:76:33:3b:0c:b4:86:57:
5f:41:d6:c2:fe:e7:f7:02:28:e0:5f:9c:00:8d:97:
dc:5a:9d:65:d7:6a:a9:7d:d8:08:07:b0:28:93:39:
c2:4f:07:3c:08:f2:21:64:90:98:81:5d:df:68:be:
79:2f:0a:97:b0:d9:97:af:50:a5:57:9c:57:2e:df:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9E:4D:5C:AC:F2:10:9F:47:AF:63:85:97:8A:8D:44:4D:BF:4A:7E
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:16:7e:3e:d0:65:59:22:d0:c0:54:52:7e:97:12:03:06:69:
da:38:08:7d:aa:f1:66:b2:71:7b:04:14:18:70:32:1d:23:58:
bb:83:dc:f7:8e:f4:ee:95:19:01:c5:34:b7:a8:fc:e6:d0:95:
d7:ee:7e:7a:db:b6:6c:0d:f7:d2:bc:74:3d:28:38:64:0f:f2:
54:ab:a9:96:ed:31:c9:7a:5c:29:dd:51:ce:a1:d4:4f:42:48:
08:48:79:07:b2:e5:71:7e:56:21:2f:29:82:3e:15:57:da:6e:
fd:22:70:7e:47:96:3f:e7:b4:b1:5d:ab:10:d1:27:0b:60:57:
62:56:14:84:eb:71:c3:0e:09:63:3c:eb:81:74:9d:20:87:ec:
e1:63:dc:97:e2:47:8a:58:04:9d:e0:1d:cf:ca:c8:94:e0:2a:
53:f5:4d:dd:bc:10:5c:7e:03:9b:20:b5:12:ed:e6:71:1d:a6:
94:e2:ad:8f:99:8c:08:b6:87:74:37:bd:85:6e:7a:c2:99:cb:
69:53:35:f8:60:5b:f8:28:39:7c:7b:c8:be:92:33:99:ef:84:
82:c6:d8:2d:9f:52:4d:d8:9d:ae:af:ad:da:57:1a:ac:91:66:
3d:9f:ff:ee:63:96:36:61:83:2d:93:1f:0f:f1:61:80:62:55:
b3:7c:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:12:17 2026 by rpki-client