Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier: nbhsYXmr/gXrwu29wW1VJ5NvZJDFZTGOLad1XgmpJTM=
Subject key identifier: C8:5B:A8:46:50:16:7F:AC:5D:2A:E9:3D:3A:8D:73:BF:CB:E2:C1:57
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer: /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial: 019DCD871D35186B4045793622FABB23138A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number: 085F
Signing time: Mon 27 Apr 2026 06:01:17 +0000
Manifest this update: Mon 27 Apr 2026 06:01:17 +0000
Manifest next update: Tue 28 Apr 2026 06:01:17 +0000
Files and hashes: 1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: mhUvug2d0ZYYoa6uMzfVB23RLWZFvbVb7tmkM20KXSo=)
2: io0GvTpo_VyMUyPyaPwaY5qhYQs.roa (hash: o71eBkqnQim23+RZGUgawhsMcbHLdUbBzsu6ep4SKt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:1d:35:18:6b:40:45:79:36:22:fa:bb:23:13:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Validity
Not Before: Apr 27 06:01:17 2026 GMT
Not After : Apr 28 06:01:17 2026 GMT
Subject: CN=c85ba84650167fac5d2ae93d3a8d73bfcbe2c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:de:24:c8:93:85:c9:64:c6:42:56:6b:4a:82:
0a:36:8e:09:fd:b6:ff:28:ba:91:c9:66:9a:02:cd:
9b:d7:02:00:e1:ba:6c:ab:8f:af:02:19:96:bd:f9:
73:18:f0:5d:10:e9:45:12:49:21:01:45:bd:ab:9b:
24:7c:46:7f:51:bb:c0:8f:55:4c:ee:e7:8f:09:a2:
b6:32:8a:f4:fb:26:6e:b7:f6:80:7f:43:48:28:50:
ea:9d:7e:10:76:ba:3a:85:a6:48:27:3e:ab:94:37:
0a:bd:2f:e1:19:13:d8:a6:2f:ca:59:38:85:20:35:
f1:fa:42:db:09:71:a0:78:24:70:f8:0f:ad:b0:74:
e0:84:aa:c3:ee:a5:fb:2a:e4:0f:b3:8a:43:f7:59:
8b:11:39:2a:2b:76:92:c6:fc:99:08:34:63:8d:a6:
56:f4:77:08:91:16:2e:17:3a:6b:c2:c7:88:58:a2:
ba:47:ea:7d:36:1c:f6:ef:30:d7:bc:f3:29:65:e9:
37:f5:74:c7:d4:69:93:5b:41:43:53:a1:6b:ea:bf:
d3:c8:b0:ba:c3:4f:fb:5a:65:4b:bc:7d:fd:cc:65:
f3:38:6e:ef:dc:b3:61:94:8c:22:10:81:2d:2d:2b:
cd:58:d3:d5:ec:8f:b1:da:84:fa:a7:f2:90:6d:b4:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:A8:46:50:16:7F:AC:5D:2A:E9:3D:3A:8D:73:BF:CB:E2:C1:57
X509v3 Authority Key Identifier:
keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:0f:1a:86:82:65:df:c8:39:1c:06:ae:6c:60:30:19:9c:
9d:43:7f:5e:65:d1:5f:d3:df:4b:f4:5a:d5:30:d5:f4:f5:d7:
09:e5:34:33:0d:15:e8:c4:1d:b3:a7:02:7f:ed:94:7b:0d:5a:
97:c8:5f:05:74:a3:78:72:8e:cb:6f:8b:f1:c7:5e:b5:39:d4:
5c:39:3f:af:c5:b0:64:fe:db:7e:3a:a0:80:b6:c8:5d:6a:10:
17:f3:4c:40:d6:7f:50:c4:94:c3:23:ae:73:f9:5b:86:87:21:
79:3d:85:54:f9:b3:23:f6:1f:62:39:11:1f:0c:80:84:8d:05:
f0:a6:48:da:19:96:9e:29:22:d7:fc:6c:ef:ec:e1:6d:7b:9a:
36:18:72:5b:5f:f2:24:1a:de:2a:0c:b8:9b:45:3c:de:de:64:
1f:b0:2e:4e:5b:ee:92:a8:ce:a3:40:f0:cb:4b:f6:13:ee:a8:
0e:9e:21:a2:b4:a1:5b:c5:00:ea:5b:1f:35:9f:86:df:2c:54:
67:95:20:48:e5:d4:81:a5:4a:a6:89:3a:94:f1:7a:f1:41:0b:
17:51:e0:5e:26:b3:06:6d:34:3f:d1:44:fb:b1:55:a4:a4:ef:
48:1b:27:b8:f2:9d:d5:26:48:a8:a4:2d:dd:02:15:3c:3b:b4:
cf:df:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:15:58 2026 by rpki-client