Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: nUm9NBYEa8csSaXotrikeNB5eNeaIP2bWNNA7UE2WCs=
Subject key identifier: 35:88:86:9E:27:CF:90:F9:DE:9C:C2:FC:C4:AD:5F:D3:41:9D:50:62
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 019D37F78968FBD6BCE6EF8AF091E10A8326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 1614
Signing time: Sun 29 Mar 2026 05:01:02 +0000
Manifest this update: Sun 29 Mar 2026 05:01:02 +0000
Manifest next update: Mon 30 Mar 2026 05:01:02 +0000
Files and hashes: 1: eANnaI0GGzfziqDmk3jw-r4G0TA.roa (hash: wlsMTfOuS0IU8a4wZ8IPTnAMJudHI+T0Qy9e4m8glN4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: sbm8riN4mx31mrVA9mat7+QMDXMJjAUxUvOkmpar4fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:89:68:fb:d6:bc:e6:ef:8a:f0:91:e1:0a:83:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Mar 29 05:01:02 2026 GMT
Not After : Mar 30 05:01:02 2026 GMT
Subject: CN=3588869e27cf90f9de9cc2fcc4ad5fd3419d5062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:f4:81:f2:dd:e9:fb:d9:c6:6b:6f:fb:df:
bf:3b:ed:b3:4a:70:ac:12:95:37:0f:b8:00:24:8d:
5a:04:91:0b:20:4c:a9:d9:9d:0d:54:6d:fe:f3:d0:
02:59:37:89:60:77:e3:d8:9c:55:10:90:16:08:cb:
91:ab:72:74:29:01:49:16:c8:51:09:26:17:80:02:
4f:81:a6:35:3e:85:67:c4:c0:2a:90:da:54:3e:88:
2e:e5:28:4e:c4:a2:af:aa:8c:36:f1:44:c8:1c:36:
28:ba:25:1f:b4:30:0e:70:c1:fa:e8:8b:fa:e8:a1:
2a:dc:59:dc:35:db:78:2e:99:7d:50:2e:74:3a:cc:
43:9d:21:ff:ac:18:41:66:93:7f:56:cd:56:eb:76:
39:98:91:ab:f8:0f:67:ee:62:4e:fd:14:c6:46:ce:
1b:78:68:db:73:11:7a:b9:a9:59:7c:56:ea:79:8c:
e9:f4:27:c4:2f:04:ae:bb:09:b6:6f:b4:e5:0a:42:
bd:01:b5:2d:f7:79:e0:bd:84:82:74:9c:f1:e5:9c:
0f:a5:29:28:4b:f6:92:7a:77:ee:a4:d5:4b:1a:f4:
18:b8:06:f1:9d:8f:c4:cd:aa:c4:d6:a4:b2:fe:a0:
79:75:55:f7:11:5b:62:47:08:a1:96:05:e0:ec:bf:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:86:9E:27:CF:90:F9:DE:9C:C2:FC:C4:AD:5F:D3:41:9D:50:62
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:84:a9:a7:ee:e7:ed:4f:73:9d:9e:57:28:e1:68:a3:87:27:
a2:99:53:a4:b8:4c:59:41:9f:91:d0:4c:bb:4b:88:92:dd:04:
a2:a4:f9:49:06:39:0d:98:68:51:9d:4f:c5:9b:d6:b1:94:3b:
bc:52:7d:ba:89:51:0e:96:0f:f0:a1:6f:64:ec:cf:ca:65:38:
01:0a:e8:51:15:c8:c2:31:03:45:b6:b6:09:9f:a4:34:26:2c:
ed:ac:27:da:5c:21:b6:5e:ab:fb:0c:08:60:bc:9e:ee:4b:2d:
98:cb:af:4d:e1:20:35:28:7b:a4:c8:cd:fb:d4:8a:29:01:d9:
22:90:f8:ac:14:8e:31:51:02:56:53:18:3a:dd:52:5a:fa:7b:
6d:27:05:84:db:07:ae:a5:11:53:41:aa:6b:7b:bb:3b:66:b5:
b4:d5:df:f0:c8:0b:9b:c9:c0:43:f9:31:a5:16:9c:35:80:ea:
e7:cb:29:1d:66:98:70:fc:e6:1c:6c:d0:1d:de:a5:3e:e2:b3:
55:bb:92:cd:b7:4a:b0:85:7b:e4:31:d3:31:97:3b:70:66:02:
7c:dd:17:89:11:bb:ae:78:c0:8d:30:ef:43:6d:08:b7:1f:3c:
e6:80:0e:6a:aa:90:88:c8:49:60:35:dc:74:93:88:68:0d:aa:
57:5e:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:43 2026 by rpki-client