Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: lsTh0ESWXsHpjsAjqS95UyW/1IVTmQDNQ+WnQeIKJRQ=
Subject key identifier: 0A:2E:EC:7D:E2:9A:DF:18:F9:8C:4E:81:25:4F:74:82:DD:8A:BA:65
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 01A0D315CCA8C1C1CC2CE88B15BEABE979DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 1A01
Signing time: Thu 24 Sep 2026 11:03:36 +0000
Manifest this update: Thu 24 Sep 2026 11:03:36 +0000
Manifest next update: Fri 25 Sep 2026 11:03:36 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: cAjT6lRseZi1v5DbeOdewZ0YchWzpLen9+qzhNl0/zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:cc:a8:c1:c1:cc:2c:e8:8b:15:be:ab:e9:79:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Sep 24 11:03:36 2026 GMT
Not After : Sep 25 11:03:36 2026 GMT
Subject: CN=0a2eec7de29adf18f98c4e81254f7482dd8aba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:ef:7c:21:fa:3c:79:fa:d0:27:cd:80:73:
cc:19:59:bf:9b:40:60:4d:28:d1:89:69:a9:a4:f4:
6d:0a:6c:47:33:5a:96:04:45:a0:2c:05:ad:86:e5:
84:2e:27:d0:b9:52:e4:8a:7d:6c:a9:a0:10:88:73:
7f:0f:14:68:04:fc:e0:e8:26:a0:c1:5b:e7:a3:63:
23:e0:a2:04:2d:04:7a:ca:d1:82:34:f4:3d:33:13:
1a:49:65:5d:47:1c:34:8e:02:97:cb:e4:97:ad:bf:
74:18:66:be:3a:87:6c:71:e1:39:b0:fc:b2:33:28:
ff:f7:fe:ed:d3:5c:13:e2:c8:69:99:f9:8b:d4:40:
6f:0a:fb:11:93:bb:0b:d9:86:ad:c4:7b:d9:42:96:
ef:77:c8:cd:29:f2:29:3a:de:36:f4:42:b7:25:4d:
31:c2:d2:66:3a:2a:07:14:e1:0e:df:58:a9:42:fb:
c2:72:fa:aa:f8:d6:a4:60:ae:3f:69:22:8e:eb:82:
81:b4:b5:c9:b5:ef:54:c5:62:62:35:8a:76:80:5c:
93:91:95:fb:8c:fa:50:9b:f3:61:e3:1c:06:63:8d:
a2:42:42:44:b6:b5:bd:74:99:1c:09:b6:6a:29:3e:
5e:48:73:fe:2d:10:59:37:bd:b0:08:4e:87:55:3b:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2E:EC:7D:E2:9A:DF:18:F9:8C:4E:81:25:4F:74:82:DD:8A:BA:65
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e5:84:bc:81:d7:9e:68:6e:0a:8c:1e:64:54:07:ee:08:77:
90:14:fb:50:57:dc:81:cc:a6:82:ad:73:59:60:db:11:5a:16:
ba:73:46:d5:02:eb:8d:55:a7:63:5e:a7:9e:84:42:74:db:f4:
a3:b0:2c:22:c7:a2:fc:84:b6:5e:0e:ab:82:06:4a:67:88:aa:
93:ae:5a:88:1a:fa:57:a2:9d:1e:ee:fc:4b:c1:fb:5e:5d:dd:
a0:f2:af:df:8a:43:94:2a:77:67:ce:b8:27:b7:ea:b0:96:a6:
13:b6:90:6d:b2:5f:3e:08:73:ee:56:00:19:90:02:6c:ba:ee:
3f:a9:29:64:4f:fc:26:63:86:b7:5e:a7:4e:bd:ef:ea:87:74:
4d:1d:6a:6a:df:78:88:94:44:a2:b5:25:a7:f1:fa:42:9f:f0:
73:03:f5:d3:e8:ac:38:0e:c3:d6:f3:c3:d9:27:a7:f7:53:50:
b8:72:1d:19:a5:0c:d3:05:93:de:c0:f2:9c:53:05:f6:c8:16:
ba:f1:9d:e8:b1:27:c4:3f:6e:26:2d:78:9b:77:9b:c2:a2:f0:
40:08:5b:9d:b2:eb:59:72:08:ea:6b:88:c9:ee:2d:a4:bf:9c:
91:b4:06:c4:a4:f8:75:ce:a6:e1:2c:99:93:32:25:7d:18:80:
ed:29:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:28:35 2026 by rpki-client