Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: 0zJ4+K6ewHqCkYLUd9g+FMZ2edYZQVOQYqfJgGqrmGc=
Subject key identifier: 03:4C:8F:63:78:E9:20:1D:2D:DC:12:D0:22:1F:84:34:65:F7:CC:D8
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 019D2884D4D3E6AC4F45E09F942CF0A8FEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: TN3IXqVrrHd5lP56CfHJI+seieqNimyWb1QfZDvcupo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d4:d3:e6:ac:4f:45:e0:9f:94:2c:f0:a8:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=034c8f6378e9201d2ddc12d0221f843465f7ccd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:60:13:b9:c5:bc:3f:29:d6:9b:70:af:68:
d1:82:2a:85:ba:c0:15:4c:cf:58:1a:0b:50:12:26:
4f:d2:c4:b7:dd:c4:f9:9a:b8:69:e4:c7:91:51:fd:
12:5d:51:66:c1:40:08:7b:26:5d:5d:b5:0c:11:27:
67:d6:bb:ba:56:2b:48:2c:fb:39:5f:0c:1c:9f:61:
e5:c9:a0:a6:ae:26:fd:7d:a0:4a:6f:fd:52:5c:5e:
67:a7:d5:5e:c0:22:bb:cf:f8:0f:a8:ba:f8:6b:5e:
b3:19:d2:72:f0:e2:72:d5:7d:9b:a6:fa:96:f2:38:
61:12:07:43:ea:0a:5b:58:de:7e:dd:29:c4:2c:23:
43:f4:64:a2:91:3b:45:8b:81:8a:f3:52:5a:29:cb:
06:7e:e1:cf:3c:ed:c0:b3:48:22:15:4f:69:35:92:
77:f9:7f:29:60:b0:c8:e3:36:de:4a:22:fe:51:1c:
19:65:de:21:37:5f:e1:72:a6:91:d6:84:0c:50:31:
b8:73:50:3c:46:51:ad:1d:28:7b:d8:ea:f1:81:74:
49:1b:5d:19:64:60:76:fc:e7:d2:7a:62:b4:92:cd:
19:17:19:fb:87:63:36:d3:58:fb:28:f7:7f:4d:6d:
2c:66:1a:24:74:87:ec:a0:97:b6:5d:8c:ac:10:ba:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4C:8F:63:78:E9:20:1D:2D:DC:12:D0:22:1F:84:34:65:F7:CC:D8
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8e:37:ca:2a:71:f9:d0:b3:5e:18:20:7b:b2:8d:1c:e6:a9:
b5:66:3c:a1:2d:18:38:58:03:6b:22:b1:c7:17:4e:03:47:58:
32:fa:5f:88:03:b2:ab:f7:53:16:15:72:d5:b5:4d:2e:54:9b:
38:bd:cd:da:48:c4:34:b1:96:59:2c:6b:57:ce:4d:2b:d7:a1:
28:cb:52:08:b6:e2:48:cd:f5:d1:ae:58:9d:ea:62:5b:b4:96:
51:d9:1d:93:48:93:c9:bd:7e:0a:8c:71:ac:0b:b2:9b:38:93:
3a:ef:c4:a9:0a:c5:1f:21:fa:93:5d:a9:ef:29:a5:00:e3:14:
38:fd:f9:6d:4c:f1:47:38:11:43:86:a0:6c:93:e8:cb:63:91:
fa:f4:8a:dd:4d:94:ab:5b:0f:48:58:b9:5e:88:25:19:2c:5f:
0e:e3:86:01:19:5b:36:be:59:13:b5:a5:e3:14:c8:ff:07:3f:
56:4a:76:63:08:bf:c2:52:15:28:de:db:2f:1b:33:0f:34:67:
f3:10:47:f3:9d:da:67:83:6d:4b:e6:28:d5:54:54:48:35:05:
1b:78:5d:67:39:44:75:4c:37:bd:9b:44:b4:fc:4f:1e:8d:bd:
95:14:1d:bc:ba:44:77:6b:d4:1c:03:7c:68:58:b5:7a:39:b1:
b0:ad:70:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohNTT5qxPReCflCzwqP7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh
MzkwZTkwHhcNMjYwMzI2MDUwMTI3WhcNMjYwMzI3MDUwMTI3WjAzMTEwLwYDVQQD
EygwMzRjOGY2Mzc4ZTkyMDFkMmRkYzEyZDAyMjFmODQzNDY1ZjdjY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH5gE7nFvD8p1ptwr2jRgiqFusAV
TM9YGgtQEiZP0sS33cT5mrhp5MeRUf0SXVFmwUAIeyZdXbUMESdn1ru6VitILPs5
Xwwcn2HlyaCmrib9faBKb/1SXF5np9VewCK7z/gPqLr4a16zGdJy8OJy1X2bpvqW
8jhhEgdD6gpbWN5+3SnELCND9GSikTtFi4GK81JaKcsGfuHPPO3As0giFU9pNZJ3
+X8pYLDI4zbeSiL+URwZZd4hN1/hcqaR1oQMUDG4c1A8RlGtHSh72OrxgXRJG10Z
ZGB2/OfSemK0ks0ZFxn7h2M201j7KPd/TW0sZhokdIfsoJe2XYysELoTHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANMj2N46SAdLdwS0CIfhDRl98zYMB8GA1UdIwQY
MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt
ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1
LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmo43yipx
+dCzXhgge7KNHOaptWY8oS0YOFgDayKxxxdOA0dYMvpfiAOyq/dTFhVy1bVNLlSb
OL3N2kjENLGWWSxrV85NK9ehKMtSCLbiSM310a5YnepiW7SWUdkdk0iTyb1+Coxx
rAuymziTOu/EqQrFHyH6k12p7ymlAOMUOP35bUzxRzgRQ4agbJPoy2OR+vSK3U2U
q1sPSFi5XoglGSxfDuOGARlbNr5ZE7Wl4xTI/wc/Vkp2Ywi/wlIVKN7bLxszDzRn
8xBH853aZ4NtS+Yo1VRUSDUFG3hdZzlEdUw3vZtEtPxPHo29lRQdvLpEd2vUHAN8
aFi1ejmxsK1w5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:57 2026 by rpki-client