Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File: Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier: O5Jc4rnVhE9zRRNm4t46Vk6Ur/j9w6h2Tm3hRftcblg=
Subject key identifier: 2D:82:02:D1:83:4F:F8:5B:4E:51:1D:9D:9B:31:37:D6:F0:45:E7:7E
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer: /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial: 019D27A8BDEEA46D252B9997EF0FD71B641B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number: 0342
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: ewL54oYYxRJhjprUfxb9USAWVE+Qpv8991pMO+UGpwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bd:ee:a4:6d:25:2b:99:97:ef:0f:d7:1b:64:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=2d8202d1834ff85b4e511d9d9b3137d6f045e77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:1c:a8:f4:b3:df:38:fc:df:5c:c2:5a:c3:
92:ab:71:25:7a:c1:18:33:c6:09:32:97:ed:ee:c4:
a5:eb:fb:f1:b8:29:c3:0c:73:4f:28:f2:e8:68:0e:
c9:5b:0d:d3:bc:e6:51:36:a5:23:36:ac:d5:65:07:
a4:e7:f1:32:8d:54:81:61:24:8b:d6:5e:97:77:71:
4c:0c:05:d5:2f:f4:e2:61:8d:d3:a6:fd:73:d9:56:
d8:f2:63:ab:f1:55:e6:39:68:de:09:a4:52:a6:7f:
d5:9e:4c:a0:75:be:bc:25:68:d7:9c:1a:4f:7b:60:
04:34:3f:d5:37:73:2d:8d:85:50:00:12:71:4b:63:
ba:45:9d:79:07:2f:85:da:53:4a:9e:55:83:76:e0:
bf:f2:30:e0:d5:12:e3:34:25:87:da:fb:15:52:64:
a2:f8:80:78:a9:b1:2d:3f:7a:74:b7:c2:ce:9c:24:
40:29:15:43:67:05:1a:41:17:b4:73:cc:cb:eb:2b:
f3:a7:ae:d1:1b:79:6d:5a:e8:1b:83:c5:6c:63:62:
3a:76:4d:27:81:3a:56:b5:03:9b:15:4d:f6:12:31:
a4:1e:98:54:f5:ce:bb:8e:9f:d6:c3:79:4b:a3:00:
a7:95:8a:42:30:be:2c:7d:23:09:44:2a:da:42:5d:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:82:02:D1:83:4F:F8:5B:4E:51:1D:9D:9B:31:37:D6:F0:45:E7:7E
X509v3 Authority Key Identifier:
keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0d:c7:dd:d7:29:3d:33:0f:36:d5:f2:f8:90:44:b3:f0:6e:
ed:f0:61:3b:9b:e2:15:82:28:1b:65:ed:d1:b1:c5:73:d6:84:
4c:d3:38:63:26:82:ea:7f:4d:ea:a4:13:fb:99:6f:a3:9f:a8:
f0:30:47:09:b5:b4:eb:e9:02:91:71:4b:e9:e6:bc:80:37:a5:
f3:c5:76:a5:ed:a3:f5:63:41:b2:75:b7:c6:c2:25:fd:65:f2:
ff:65:a7:a2:4d:6c:62:ef:c2:52:42:b4:f0:7e:f1:03:82:af:
e9:c6:b1:54:23:58:38:a7:61:77:70:cb:6f:3b:f2:0b:e3:78:
63:96:67:40:88:7f:d1:02:ca:19:59:65:47:59:81:1c:98:26:
bf:cd:6d:b1:6f:6e:22:d6:08:e7:77:53:94:43:c8:18:7b:f0:
60:ad:1e:eb:00:8e:51:16:3b:a0:4b:31:de:03:9e:f2:4f:4b:
ab:77:a7:10:8e:4a:2d:36:ce:93:96:b4:de:03:0b:40:f6:59:
68:c2:68:bd:e9:f1:17:4a:f1:a8:4c:a8:f9:a5:3d:95:4f:e3:
e7:6b:8a:c3:e8:bd:e7:44:c8:06:c7:ff:3c:6c:b9:02:5c:df:
ef:56:e0:62:18:0c:14:88:6e:91:5a:88:45:ec:82:76:ed:06:
50:c4:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:57 2026 by rpki-client