
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File: Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier: nwkyFeF3Bba3UXyNs9QT/4uf9e1ztDkADFuDTbXR91w=
Subject key identifier: FB:33:64:BE:D7:05:81:6A:15:95:33:92:12:44:E5:85:9B:2A:EE:7B
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer: /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial: 01A185636DB5F818AA29A2485CA9142E0159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number: 0588
Signing time: Thu 29 Oct 2026 02:00:48 +0000
Manifest this update: Thu 29 Oct 2026 02:00:48 +0000
Manifest next update: Fri 30 Oct 2026 02:00:48 +0000
Files and hashes: 1: 7eUHBGs5-5ccLiuJle7ggH6TQjE.asa (hash: Bnt40cDgGP9nDvETNeaVD27iCk/Fc7R7LcRjaxb8Cnw=)
2: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: ZyfG0jokq0Cu9kXI3C7pqPGMOVGFcdsa1Pg0azAD5Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:6d:b5:f8:18:aa:29:a2:48:5c:a9:14:2e:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
Validity
Not Before: Oct 29 02:00:48 2026 GMT
Not After : Oct 30 02:00:48 2026 GMT
Subject: CN=fb3364bed705816a159533921244e5859b2aee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:39:75:29:a1:f4:84:5f:10:9b:a8:17:bd:
04:cf:34:16:09:01:3d:e3:90:21:2b:13:b1:f9:1c:
d2:ae:05:f9:e1:43:bf:c5:90:d1:c7:58:64:f0:84:
2c:8b:35:bd:34:cc:e8:46:40:fb:a8:60:62:04:66:
30:0e:e1:ac:25:ac:f2:b6:21:c8:cf:73:08:d7:1b:
c4:62:20:55:59:db:ef:5a:7c:57:8a:d6:9d:b9:2f:
4f:03:85:33:cb:01:ef:98:9d:ba:13:38:9c:96:53:
24:fe:8d:08:fe:25:4c:b1:92:65:aa:25:bd:c3:3e:
3d:e0:f8:b8:68:4d:db:b5:48:12:02:c6:ad:e6:ae:
9b:1e:bb:04:29:3d:4e:d1:df:3b:fc:6c:f5:2f:c2:
9c:48:8a:c6:6e:c0:94:22:e4:ce:2d:e2:2f:5f:43:
96:6b:ab:da:17:17:7f:30:71:62:b6:a0:90:e8:04:
88:46:6a:64:97:84:06:3a:a0:87:75:e3:85:89:0d:
55:fe:27:ee:37:84:0e:65:47:56:6a:8c:91:4d:47:
f2:1f:12:be:4d:63:fe:e3:1b:a1:5b:bd:34:f7:b5:
69:d3:8f:a1:00:ff:35:be:10:3e:84:e8:29:b2:78:
1a:23:93:5b:f3:0d:8d:d6:d7:2b:28:0c:28:4d:16:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:33:64:BE:D7:05:81:6A:15:95:33:92:12:44:E5:85:9B:2A:EE:7B
X509v3 Authority Key Identifier:
keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:85:ec:a2:bb:4d:61:5c:05:14:c8:18:c4:9a:49:cc:7e:00:
2e:52:f7:65:d8:b2:1e:18:b9:55:32:52:fe:65:c7:73:28:3b:
18:59:82:52:b5:e4:2b:4b:77:73:e6:23:d4:39:c3:57:aa:ed:
7f:59:a6:c6:cc:c0:f0:49:97:e3:c8:f3:5f:60:49:e4:1d:be:
35:f1:9f:00:1f:3e:78:ae:b6:98:75:36:0d:ef:fb:73:30:59:
38:19:00:e8:81:bd:42:ed:fd:57:8a:71:fe:8e:9e:96:6b:c4:
cd:ae:6b:43:38:18:5c:32:b0:e8:d7:75:8b:b0:be:bf:a2:87:
9c:67:2c:6f:36:0c:06:3a:44:1f:b1:8f:54:ea:98:18:39:74:
60:3a:57:82:6e:4d:d9:ed:a6:e8:cd:bf:45:33:17:b7:2a:d8:
87:0f:99:89:26:7f:f2:36:f6:c4:45:42:73:04:5a:50:bb:f4:
a0:48:02:07:9b:32:79:10:ca:17:a3:c5:c7:04:77:0d:23:1b:
e6:b0:8d:ef:51:da:10:a8:a9:b2:64:74:6f:fd:48:fb:8f:91:
70:3e:9e:f7:b3:ee:e8:20:3e:37:d9:62:0b:63:3f:56:54:1a:
e2:2b:c0:57:24:d5:a2:81:26:1a:1a:e7:4c:37:b1:ba:87:f2:
61:99:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:38:47 2026 by rpki-client