Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: S83RMw4Er3iV3BVnTQuW9kHmU5uOE5vujkYqawg+LZk=
Subject key identifier: 1B:ED:F5:F9:6D:6C:42:7F:B0:CC:0A:5E:97:F7:D1:31:35:89:B4:EF
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019EB98F5F01ADDB7AE98BA47A5AECED3EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 195E
Signing time: Fri 12 Jun 2026 02:00:41 +0000
Manifest this update: Fri 12 Jun 2026 02:00:41 +0000
Manifest next update: Sat 13 Jun 2026 02:00:41 +0000
Files and hashes: 1: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (hash: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac=)
2: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: +6E4+VagGwNHbegOkUXRCKf46dkSvJJZKxeDI8UAHlQ=)
3: qzGW8ddbejTKs6ZDaO2LewDJniw.roa (hash: 4T6c4O+OyjJ20YgF2wsk1E/zwTD8ABZLIuETZ2+U1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:5f:01:ad:db:7a:e9:8b:a4:7a:5a:ec:ed:3e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jun 12 02:00:41 2026 GMT
Not After : Jun 13 02:00:41 2026 GMT
Subject: CN=1bedf5f96d6c427fb0cc0a5e97f7d1313589b4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:1a:6e:03:63:19:00:65:72:b0:6f:0f:ac:
ee:1f:35:ef:96:68:82:5d:18:d9:f3:27:2c:55:91:
ea:22:ac:53:ca:d2:64:4a:7f:21:00:41:38:69:56:
52:72:43:cd:57:fd:e6:35:ed:65:3d:1e:f4:09:a5:
72:73:e9:e8:af:24:ed:cf:a4:93:7c:6e:70:85:e5:
d9:ea:bf:08:dd:8c:da:55:22:97:13:b1:09:44:60:
86:2e:16:b1:53:4c:dc:14:bb:52:59:30:be:2d:74:
39:49:c8:51:b3:4c:c6:e3:42:31:be:7d:7d:55:0d:
16:99:38:a8:01:65:c3:f6:a9:7c:ab:ba:e8:eb:87:
2e:e8:9c:b6:07:56:7a:da:fc:70:4e:98:44:00:02:
8e:24:c3:90:8e:f2:6c:5a:42:22:1c:15:71:ac:79:
89:a3:67:47:61:ab:b3:1b:4c:0c:16:f2:b0:ca:9d:
1b:45:c2:2c:7d:f6:4e:67:91:5b:17:ac:4f:ff:d4:
db:33:cf:e1:59:60:fb:49:56:d0:e5:3c:53:71:bd:
1b:96:42:0a:78:b3:e5:19:2b:c3:6d:db:3c:7d:51:
99:28:fa:77:7d:ce:5c:93:33:3b:47:2b:43:d0:2f:
99:77:be:7e:97:c1:47:c4:69:65:ec:07:d6:a0:a2:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:F5:F9:6D:6C:42:7F:B0:CC:0A:5E:97:F7:D1:31:35:89:B4:EF
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:54:d7:b9:0f:fe:25:ce:53:bf:8d:4a:96:23:9e:64:83:13:
bc:17:b6:2f:70:13:d1:13:2c:bd:23:ec:41:ce:77:0d:91:50:
85:50:63:aa:80:38:ea:81:fc:0c:66:0b:b3:de:8b:53:47:02:
b3:35:74:71:6a:5e:2c:e7:6b:03:71:8c:d0:47:bb:eb:33:8e:
fc:c0:3e:14:13:fc:d6:a2:65:01:c2:72:b0:8d:70:ac:6a:51:
60:7c:32:69:54:5b:85:d0:ec:82:80:d2:58:73:56:49:1d:85:
c2:59:92:5f:31:dc:92:ab:11:2c:19:4d:44:39:3c:70:13:74:
66:d7:8c:7d:82:72:08:b7:84:e1:fe:1d:ca:fc:7b:98:7b:fe:
30:45:e1:6e:10:f1:70:23:15:97:a2:2f:ae:ee:92:e8:3d:9c:
4d:e4:e3:f8:4c:a4:7b:8e:0e:04:a9:db:45:e7:6d:a2:41:fc:
fa:3e:72:7d:c1:2f:33:ba:7d:2a:ce:89:3a:52:ae:69:09:a1:
9a:83:db:eb:ec:2a:c3:c1:7c:b9:7e:76:b1:72:e9:66:e3:de:
5c:57:a0:00:72:a4:b3:0d:b8:76:7b:76:64:a3:72:fe:ba:39:
13:a6:23:ce:a3:8c:11:99:7c:b6:c6:b7:93:ae:af:6a:6f:4a:
00:bf:ad:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j18Brdt66Yukelrs7T6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YmExNWQ0N2JhNGY0NDgyNzY0NDcyZDhkOTcxNDZhMWVi
YmJmODYwHhcNMjYwNjEyMDIwMDQxWhcNMjYwNjEzMDIwMDQxWjAzMTEwLwYDVQQD
EygxYmVkZjVmOTZkNmM0MjdmYjBjYzBhNWU5N2Y3ZDEzMTM1ODliNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1wabgNjGQBlcrBvD6zuHzXvlmiC
XRjZ8ycsVZHqIqxTytJkSn8hAEE4aVZSckPNV/3mNe1lPR70CaVyc+noryTtz6ST
fG5wheXZ6r8I3YzaVSKXE7EJRGCGLhaxU0zcFLtSWTC+LXQ5SchRs0zG40Ixvn19
VQ0WmTioAWXD9ql8q7ro64cu6Jy2B1Z62vxwTphEAAKOJMOQjvJsWkIiHBVxrHmJ
o2dHYauzG0wMFvKwyp0bRcIsffZOZ5FbF6xP/9TbM8/hWWD7SVbQ5TxTcb0blkIK
eLPlGSvDbds8fVGZKPp3fc5ckzM7RytD0C+Zd75+l8FHxGll7AfWoKJQTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvt9fltbEJ/sMwKXpf30TE1ibTvMB8GA1UdIwQY
MBaAFGW6FdR7pPRIJ2RHLY2XFGoeu7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAt
ZmUzYjkxOGMzMDk3LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAtZmUzYjkxOGMzMDk3
LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVTXuQ/+
Jc5Tv41KliOeZIMTvBe2L3AT0RMsvSPsQc53DZFQhVBjqoA46oH8DGYLs96LU0cC
szV0cWpeLOdrA3GM0Ee76zOO/MA+FBP81qJlAcJysI1wrGpRYHwyaVRbhdDsgoDS
WHNWSR2FwlmSXzHckqsRLBlNRDk8cBN0ZteMfYJyCLeE4f4dyvx7mHv+MEXhbhDx
cCMVl6Ivru6S6D2cTeTj+Eyke44OBKnbRedtokH8+j5yfcEvM7p9Ks6JOlKuaQmh
moPb6+wqw8F8uX52sXLpZuPeXFegAHKksw24dnt2ZKNy/ro5E6YjzqOMEZl8tsa3
k66vam9KAL+ttw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:09:11 2026 by rpki-client