Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File: Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier: HLYMBtkqBA6Q1O5tTwCUGOYviv6BkhHwVkSqei+7rn8=
Subject key identifier: E4:FB:AC:52:5E:01:59:16:D1:09:C6:B2:E5:CD:FE:02:5E:1C:76:C8
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer: /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial: 01A06D5DA25430F46FF2BE93D7366A5E2316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number: 04F7
Signing time: Fri 04 Sep 2026 17:00:47 +0000
Manifest this update: Fri 04 Sep 2026 17:00:47 +0000
Manifest next update: Sat 05 Sep 2026 17:00:47 +0000
Files and hashes: 1: 7eUHBGs5-5ccLiuJle7ggH6TQjE.asa (hash: Bnt40cDgGP9nDvETNeaVD27iCk/Fc7R7LcRjaxb8Cnw=)
2: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: iqoivh/4UXskVSfWovITRyBkkzaN/OzxLwwgZedfkbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:a2:54:30:f4:6f:f2:be:93:d7:36:6a:5e:23:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
Validity
Not Before: Sep 4 17:00:47 2026 GMT
Not After : Sep 5 17:00:47 2026 GMT
Subject: CN=e4fbac525e015916d109c6b2e5cdfe025e1c76c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:ae:4b:eb:ff:0c:12:34:45:05:3e:cb:c0:
9d:74:21:57:6f:f1:55:d9:b4:90:d6:04:11:3a:28:
5b:98:53:ca:6e:d3:3b:d0:f8:d4:55:a4:c0:d3:ce:
a9:51:38:86:d5:d8:c8:32:b3:22:aa:e0:f4:9b:50:
3c:06:2f:85:9f:ad:a8:1f:56:79:e1:c7:6c:90:95:
42:d2:b9:db:b5:95:25:77:31:64:bb:45:ec:3d:40:
35:f2:45:49:bd:c9:dc:c6:cd:87:e3:e4:f9:4b:97:
0e:a7:96:cf:aa:cb:74:13:d9:99:c8:4b:a9:61:f9:
ee:64:c9:8a:13:75:e8:e9:8a:10:a2:78:93:28:67:
67:b3:96:82:6c:12:32:12:e7:41:44:b7:ec:ea:15:
93:42:8e:a0:d8:2b:8b:e7:f6:a1:6a:d2:78:27:d4:
32:20:79:2b:b9:cd:06:28:e4:9c:59:4b:61:a1:a0:
70:e4:1f:fd:4d:e7:3e:e9:7b:fc:d6:98:0a:b3:61:
fe:9e:3b:ae:11:9d:25:df:8a:30:32:93:19:53:75:
eb:d0:7a:e2:a3:7b:87:f8:8e:b3:6c:ea:0e:a1:e2:
67:29:5f:85:10:5a:62:a5:eb:ac:fb:7a:a6:9d:df:
40:6c:98:f9:a7:0b:63:a5:a6:b8:2e:04:8b:24:a5:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:AC:52:5E:01:59:16:D1:09:C6:B2:E5:CD:FE:02:5E:1C:76:C8
X509v3 Authority Key Identifier:
keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3d:70:d7:45:b7:a9:35:96:4b:f6:2b:18:b8:cf:39:d3:17:
6c:eb:0b:af:83:80:10:df:ce:de:7c:ee:85:16:07:23:b8:a3:
1a:e9:36:35:ef:08:e8:3b:d7:59:2b:20:e0:2b:0b:34:d1:d6:
89:78:87:d0:92:b2:39:dd:98:c7:dd:8b:15:f3:c9:35:06:d1:
af:22:d7:b9:ce:99:a0:0d:82:92:b7:e5:70:90:24:d9:78:4a:
79:9e:89:83:84:70:61:62:84:19:ed:86:b5:15:78:4e:8a:fb:
42:ed:7c:19:a6:68:1f:af:77:57:a7:d9:6c:3d:a8:be:ba:3d:
0f:d8:9f:9a:de:16:5f:a3:a7:a4:b7:77:df:0d:4d:77:d0:44:
fc:74:41:ac:5f:27:f3:28:9b:64:9e:33:02:e9:00:15:7f:e1:
6a:98:22:f1:61:5a:ac:8e:cb:77:ce:f2:39:88:16:57:6a:56:
e6:54:12:6b:26:49:6c:8a:8f:67:60:66:14:cc:77:76:4b:c4:
6d:e1:ed:4e:2e:da:e4:19:be:58:03:ee:25:cb:a4:5a:93:da:
cb:a7:1e:84:ea:2b:25:a0:6b:62:97:ad:e6:5f:04:5e:01:86:
89:e3:96:0e:0c:a0:be:65:0f:a5:d8:15:e8:de:89:3a:66:07:
29:a5:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:38 2026 by rpki-client