Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: zF7IxxBk7cio6HTsmjSQRMrlz91WkxlzpndhxAmnx3g=
Subject key identifier: ED:64:D2:EA:62:1B:4B:31:36:2E:72:8B:D1:45:41:CE:EE:71:23:BE
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019FA33C6685D6EE0E4B9D2DEC94061A7671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 19D7
Signing time: Mon 27 Jul 2026 11:01:12 +0000
Manifest this update: Mon 27 Jul 2026 11:01:12 +0000
Manifest next update: Tue 28 Jul 2026 11:01:12 +0000
Files and hashes: 1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: 8mQCI2k8/r4Nj/vj94Gyb8wbDxGRXDe3iginFssrr+w=)
3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:66:85:d6:ee:0e:4b:9d:2d:ec:94:06:1a:76:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jul 27 11:01:12 2026 GMT
Not After : Jul 28 11:01:12 2026 GMT
Subject: CN=ed64d2ea621b4b31362e728bd14541ceee7123be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a8:f9:d6:31:e1:b4:3f:e0:9a:d9:59:94:83:
17:f1:3f:f9:99:12:94:bb:88:67:81:34:a6:81:b8:
10:87:64:2f:ec:2b:05:4b:91:46:93:14:97:48:3f:
bd:9f:71:7d:78:5c:f9:de:0e:08:2b:a0:eb:af:bf:
e9:89:a5:72:8c:51:31:3e:ea:df:07:5e:08:29:5d:
da:51:1f:0d:8b:25:63:93:5a:ad:6c:06:93:b1:e0:
c4:3f:fa:21:14:44:26:55:08:2d:13:9f:b0:30:e1:
d7:4c:7a:dd:04:21:b7:0e:5b:5d:53:bc:67:b9:9c:
b4:23:28:90:41:66:4a:b9:7d:4e:1f:2c:54:66:75:
a6:86:c6:19:92:90:a1:16:a7:eb:cb:b6:b1:f5:bb:
bb:75:1d:d0:57:fc:68:bb:cc:0a:e6:59:ab:16:2a:
4f:09:d8:1d:7b:ac:d3:4e:da:00:c3:20:0d:b4:cd:
cc:5b:4e:53:4d:72:33:74:8c:95:07:6a:56:c5:d2:
f8:34:c8:72:e9:b4:a0:b7:35:2b:24:55:7a:f6:45:
7e:7e:ec:f0:8e:3f:26:41:5b:2e:67:83:00:d3:6a:
24:af:a1:08:18:a3:33:98:ea:28:7f:c6:2f:15:e2:
86:28:a9:92:14:5c:0d:a7:16:71:07:7c:08:8e:65:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:D2:EA:62:1B:4B:31:36:2E:72:8B:D1:45:41:CE:EE:71:23:BE
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:28:ee:19:c6:7c:11:1f:27:5e:3f:1f:48:08:77:57:e1:0b:
54:c1:5f:84:cb:3b:be:ac:30:30:f8:c0:f8:5d:5c:74:48:55:
60:46:28:43:e0:ea:02:6c:9e:c7:00:6f:cf:91:6c:15:ce:e5:
eb:82:a1:df:28:45:97:70:9d:01:4d:85:3f:54:25:8c:27:e1:
61:2e:e2:bb:4c:06:c0:16:70:ae:07:cd:65:4f:87:ef:18:e6:
5f:66:d4:10:53:77:df:18:01:17:5a:73:4a:3a:67:17:cb:b1:
d4:4d:79:ed:a6:37:13:8d:4c:e7:89:68:1e:fe:73:c5:4d:c3:
c6:2a:95:f6:df:fa:76:88:36:b5:24:75:51:92:70:07:08:9c:
a1:0d:1c:41:57:ba:99:0b:2c:39:4d:80:45:be:ff:b5:af:48:
45:c1:f8:8d:2f:af:d2:d7:db:b5:68:88:29:24:be:12:45:84:
ce:1c:04:d1:92:08:cb:6a:e3:53:17:3a:c8:88:a7:f6:a5:bd:
1e:c1:d1:e0:32:4f:69:dd:ae:cd:f3:e2:6e:da:86:0f:1d:58:
ac:c2:0e:27:7c:a1:03:61:d3:df:a9:fe:ad:70:4d:f3:cd:b3:
08:4b:bf:72:93:63:49:14:16:8f:57:60:5d:78:d2:60:44:ae:
8b:a6:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:52:35 2026 by rpki-client