Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier: zhIGGDNy8BLkRt5QU7TwnlSSL3mf1QSWyvlRGC8I9CY=
Subject key identifier: 32:34:9F:C6:B7:11:5E:04:4B:71:C7:8B:85:3E:56:DE:25:F6:C1:7F
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 019D27E0347CE5E052BD12B2267AB880C6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number: 13B5
Signing time: Thu 26 Mar 2026 02:01:37 +0000
Manifest this update: Thu 26 Mar 2026 02:01:37 +0000
Manifest next update: Fri 27 Mar 2026 02:01:37 +0000
Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: rv7qgy+e1msr+b0ByJ+5RFNNzxvcEJl1P9fkRYsvTm0=)
2: ZskxnuDG6fMgD-H_7uVUAYgrA_I.roa (hash: 8wU9ul7S+8AZLJpKxnijl5gAw5JCYACT07glI9IgGUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:34:7c:e5:e0:52:bd:12:b2:26:7a:b8:80:c6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Mar 26 02:01:37 2026 GMT
Not After : Mar 27 02:01:37 2026 GMT
Subject: CN=32349fc6b7115e044b71c78b853e56de25f6c17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:56:f9:d7:75:c5:f8:73:53:42:13:63:77:
63:a3:b2:d9:98:e1:63:d9:6b:67:06:7e:e5:2e:1f:
80:21:75:05:ef:2e:a8:72:c4:74:e3:64:02:32:49:
43:39:42:01:51:75:f2:0e:d5:f8:8e:f0:ab:3f:f6:
21:fc:a1:4a:7c:8c:ff:f4:2c:a8:9f:33:22:0e:bc:
8c:e8:95:d8:bd:6b:a6:1c:38:75:bc:40:8a:a8:46:
38:27:99:62:ee:68:6b:5e:f3:42:16:8c:cf:6c:9d:
f1:aa:2b:22:eb:ce:91:22:ba:36:af:b7:58:12:81:
4e:20:e6:ef:f7:db:93:17:96:c4:4e:e2:18:d3:89:
73:af:a2:fa:af:18:f2:09:ac:89:fd:42:24:5d:0d:
3c:2f:a6:2e:11:f6:4c:c9:94:0b:aa:d8:b7:54:75:
3b:0d:98:29:82:91:8c:60:ac:84:d5:57:c1:93:9a:
14:dc:15:2a:9f:2f:ea:8e:e7:d1:82:b2:bd:fe:8b:
a0:b3:47:d4:01:fb:4d:06:c0:af:fe:c9:a6:e1:74:
3a:3b:11:24:4a:07:59:63:8e:e5:9f:b4:39:b9:f2:
8d:0c:cc:9b:dd:7f:7c:31:08:70:38:21:29:fb:b5:
f3:f6:aa:bc:44:de:5f:5c:5d:6a:c4:6d:85:5d:f4:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:9F:C6:B7:11:5E:04:4B:71:C7:8B:85:3E:56:DE:25:F6:C1:7F
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:54:3d:ca:03:3b:3f:59:b1:9e:ab:fa:dc:b8:b6:bb:f5:8d:
9f:a2:e1:89:4c:61:17:6b:c0:b8:cc:17:ab:7f:5c:ed:3b:08:
4a:46:5b:d0:d0:05:12:54:72:f1:3a:e1:a3:00:d8:3d:7e:19:
d9:3a:2a:7b:fd:00:5c:15:8c:0e:91:45:76:4f:81:6d:43:83:
48:c3:2c:35:1f:27:f9:9b:50:19:1f:fd:95:9e:b6:1e:65:2c:
4c:98:de:95:c8:2c:06:ec:d5:57:f5:4f:3d:34:90:78:64:26:
4e:ac:ff:94:15:56:f3:eb:e1:ae:15:ad:f0:fa:ec:7e:99:ba:
d5:07:2c:a5:0a:56:cf:74:1e:6a:ef:7d:22:c4:98:74:15:f6:
b1:f2:a8:1d:5c:e1:78:0f:82:73:6c:08:9b:ac:8f:22:c1:72:
f0:a5:8b:77:eb:36:54:2d:9a:e8:91:c3:c5:b8:50:c8:86:5b:
91:62:5c:96:c4:8e:e9:9e:c2:59:34:2a:39:b2:45:b2:97:58:
a2:6b:7f:6a:99:b5:2e:51:4d:20:e8:6a:2c:b7:46:2b:c9:aa:
6d:ef:33:40:8c:17:24:9d:38:64:67:ae:21:7e:80:16:ff:98:
cb:49:0f:54:f2:4b:9c:67:35:5e:75:a9:6d:14:39:87:3a:73:
6c:0a:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:57 2026 by rpki-client