
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
File: ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft (raw, json)
Hash identifier: f4PaBrYAI4P+luBwZzOSkSalhbujyRaDIZ8MXeDwOTo=
Subject key identifier: 11:DF:57:2D:DC:74:CA:1C:6A:C6:ED:8D:32:32:B5:E3:7B:80:F5:2B
Authority key identifier: 66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
Certificate issuer: /CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Certificate serial: 01A107A6406591E275FC4271D11AD63BE6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
Manifest number: 54
Signing time: Sun 04 Oct 2026 16:01:38 +0000
Manifest this update: Sun 04 Oct 2026 16:01:38 +0000
Manifest next update: Mon 05 Oct 2026 16:01:38 +0000
Files and hashes: 1: ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl (hash: 20Jf/kwm2zkrp5Ud9drhk3c7x92UCgfgRk4ZNVS6ORY=)
2: hwu5SvCgU59ShO9fogdURCv6AoU.roa (hash: nBkergd1LBGxB0QpkcjB5a9Defi7cKkNRW0IBJmar/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a6:40:65:91:e2:75:fc:42:71:d1:1a:d6:3b:e6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Validity
Not Before: Oct 4 16:01:38 2026 GMT
Not After : Oct 5 16:01:38 2026 GMT
Subject: CN=11df572ddc74ca1c6ac6ed8d3232b5e37b80f52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:6f:9e:fc:6d:40:62:3d:66:78:a7:f0:16:
de:89:9f:d1:92:ad:7e:18:14:98:a6:7a:ba:8d:53:
57:60:e6:83:3f:7d:26:fa:9a:43:ce:b7:eb:86:4a:
f7:20:16:93:ed:a5:6a:5a:68:3a:7b:c7:64:7f:b1:
9a:68:18:b8:9f:75:5c:65:6d:09:20:7c:e3:cd:ea:
ba:52:20:71:dd:c7:d2:25:94:78:aa:18:9a:51:f2:
f4:2f:1c:de:ad:b5:35:4b:33:9a:35:cd:6c:c5:6c:
6f:bd:7d:4c:13:5f:df:f6:cc:37:0b:25:3a:bf:db:
47:7d:a7:9f:c5:b1:30:57:a6:0f:8d:57:56:52:6a:
4b:52:56:04:09:9a:df:2d:43:ac:03:d8:ad:47:df:
ae:b0:b6:ea:03:ff:88:c0:ea:77:25:29:c9:f3:b4:
83:60:b1:05:0f:0f:5a:fa:f1:c7:94:ee:2a:8f:a3:
11:3d:05:0c:f6:5f:47:82:6f:9b:3c:37:2d:0a:39:
b9:b9:fe:8f:ed:2d:80:a0:33:a0:95:2e:e9:ca:73:
40:6e:66:69:1b:e3:6b:70:13:30:e3:94:49:90:ba:
96:20:c8:06:9c:29:62:52:8b:7b:b7:44:17:3b:45:
a6:a2:d1:71:af:39:85:91:42:f7:31:a7:6a:35:5d:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:57:2D:DC:74:CA:1C:6A:C6:ED:8D:32:32:B5:E3:7B:80:F5:2B
X509v3 Authority Key Identifier:
keyid:66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:66:f7:65:43:63:8a:81:c5:92:db:99:28:16:c0:8e:c5:c3:
5f:98:91:2e:c9:ea:30:82:5b:0f:ed:e0:86:2d:cf:69:42:cf:
99:c8:ab:e7:81:c1:9e:89:3c:5b:72:fd:e4:3f:01:94:e4:ab:
7b:73:9a:3e:5c:f3:29:1c:23:6b:7a:11:36:fe:20:78:96:3b:
91:50:74:b5:da:3c:ce:56:58:ca:f1:b2:4a:74:77:4f:1a:fb:
94:8d:26:7f:64:cf:a3:b1:4c:07:64:c0:da:9f:09:25:9c:1c:
7a:fe:0e:ac:70:6b:a2:d4:46:7e:c7:d5:f6:c9:3b:cb:cf:9a:
33:a4:06:27:46:94:45:a4:80:f1:3a:ac:7a:be:41:f3:15:a2:
0e:a0:75:fb:ce:bc:ed:fc:2d:dd:f7:17:be:35:27:fd:ab:1e:
75:c7:70:69:29:38:f3:c8:5d:cd:b8:46:22:02:a4:32:b7:25:
5c:e2:ec:5f:8f:70:8f:fe:c1:eb:8b:3e:6f:14:2d:7a:cf:0b:
5e:83:73:97:2d:3f:6d:55:3d:d5:d7:d0:c3:53:5e:f4:be:b7:
9e:d2:f9:e1:2f:58:ac:9d:bd:5d:95:34:ac:18:d6:79:29:f6:
3a:4d:a4:5c:08:2a:2f:e1:d6:5c:d3:7c:8f:9f:e7:d4:7c:3a:
d4:3e:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:44:08 2026 by rpki-client