Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: hBbJ1lP5pAO7Yxi8iO06X0fbpVV9Xzsa3Az7B9dCyNo=
Subject key identifier: 62:D7:FC:FF:D0:9D:77:1F:A8:E4:2D:EB:06:82:0C:1D:92:A9:EE:15
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019D3940B1D62403970FEE682BB8D2925E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: 3x6kJiKTTBEfnFY3YFElLz7c8CoNRTXBR4Gu+NRdnDw=)
3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b1:d6:24:03:97:0f:ee:68:2b:b8:d2:92:5e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=62d7fcffd09d771fa8e42deb06820c1d92a9ee15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:e7:70:01:7a:ac:50:fc:22:85:b2:00:d5:
3f:1b:70:35:52:e6:db:93:8c:0c:08:a7:bb:ec:30:
c1:a8:b4:a2:56:58:c8:ef:c2:34:67:e9:08:3c:c4:
12:48:89:54:66:f8:0c:9e:32:81:15:f0:e2:ff:2f:
fd:9b:57:32:c2:02:48:ca:54:e3:86:cc:07:e1:54:
c3:d7:df:5c:fb:8e:d7:1b:b2:43:31:5f:0f:06:b3:
da:b9:aa:f6:11:e2:37:d9:ed:0e:3c:11:30:a1:c7:
92:69:9b:a5:6f:32:c8:5d:8b:5c:de:6c:37:a1:50:
89:fc:0a:22:57:f9:ba:06:b7:14:77:ab:d9:d2:a8:
56:e9:0e:58:cb:8d:cd:e3:e0:ca:81:26:19:30:a0:
65:4a:2b:f4:9a:c6:ae:e4:5b:09:8b:e0:4e:dc:9e:
9a:52:38:b8:f1:a6:3d:fa:4b:69:44:64:bc:e2:56:
60:fb:5b:57:9a:14:a7:00:f2:96:cb:96:e6:6a:c5:
a3:89:02:fd:41:6c:5f:58:2c:bc:74:de:d8:59:e1:
de:76:6f:57:8a:f2:d8:8b:84:cf:6b:fb:8d:93:b1:
a5:be:61:00:3e:9f:15:94:a5:22:dd:2b:3d:68:a5:
30:ed:35:0b:4e:03:fd:85:f6:ca:18:de:98:7e:79:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D7:FC:FF:D0:9D:77:1F:A8:E4:2D:EB:06:82:0C:1D:92:A9:EE:15
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f0:30:7c:42:b9:a0:52:b7:46:4d:7f:48:b1:43:44:89:22:
31:81:9a:f1:16:98:7c:70:d6:f5:10:2e:72:47:3f:9e:1b:9e:
c0:49:de:d8:bd:d5:ad:ce:dd:db:23:6f:db:18:03:b1:ce:e1:
36:e4:40:46:55:52:da:d0:04:36:12:c4:87:b3:81:33:81:63:
bf:6d:16:40:1f:76:6a:04:8e:36:5e:e1:66:ee:85:f9:b7:58:
71:9a:21:d1:3d:c8:05:67:27:79:76:df:2f:4f:77:37:7b:72:
41:76:71:f9:ab:db:de:c7:2c:e0:44:cc:6c:b9:9c:11:27:fa:
86:7a:20:48:f8:fe:94:e8:63:08:cc:2a:a0:69:18:13:cf:2a:
90:2f:df:0d:43:44:9b:ac:1b:bd:0f:3e:e0:60:d5:a3:d7:ab:
2c:3c:26:2f:b4:94:3f:9d:34:18:1a:9e:0c:37:12:fa:4f:35:
25:7b:7b:fb:c0:72:cb:2c:9e:53:c0:18:af:e6:61:ab:e8:1d:
1d:00:9f:c7:1c:2c:44:11:ae:f5:c1:0c:57:87:71:d9:25:06:
88:81:0d:9e:26:12:19:db:88:9d:56:35:d1:a7:56:09:38:8c:
36:ee:b6:71:5c:a5:6e:66:da:1d:ba:d0:46:c1:88:9e:cf:58:
25:79:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:03 2026 by rpki-client