Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: LI4gAecinKXFRU3OX5JzgyQxwDDx57UxH8l4Gz2rRRw=
Subject key identifier: 32:31:EC:CA:07:FD:9B:CD:57:90:27:BB:FC:FA:C5:54:EC:4B:4E:94
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 01A1377F87A9495953FC7F84FD5F742620CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 1A35
Signing time: Tue 13 Oct 2026 23:01:06 +0000
Manifest this update: Tue 13 Oct 2026 23:01:06 +0000
Manifest next update: Wed 14 Oct 2026 23:01:06 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: a5Sdm14N9i3MNudSHajoBz+zsGJAlbUoWtS3f+lR7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:87:a9:49:59:53:fc:7f:84:fd:5f:74:26:20:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Oct 13 23:01:06 2026 GMT
Not After : Oct 14 23:01:06 2026 GMT
Subject: CN=3231ecca07fd9bcd579027bbfcfac554ec4b4e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:39:70:12:bb:98:8d:24:8b:e6:c6:c6:3e:
b9:87:4e:c2:b9:41:97:9d:f8:7e:a1:db:a1:a5:c6:
99:30:e7:f0:c7:90:96:af:9c:f0:6d:0e:84:88:0b:
d4:a0:d6:f2:ae:12:b4:d9:6e:79:f4:55:ac:31:17:
2d:d0:30:85:84:95:2e:5d:da:ee:16:1d:4e:27:d2:
b9:18:83:69:6b:e4:f0:93:df:eb:82:0a:3f:68:f8:
26:a7:a2:23:7d:e0:26:1e:94:18:4b:da:31:6a:17:
cd:98:01:e6:c9:de:ba:49:dd:7e:4b:77:03:56:e7:
fa:92:6a:14:43:db:ab:1a:eb:3b:16:15:47:f7:78:
d5:9f:8e:01:39:78:8a:23:de:3a:c8:64:02:93:91:
b4:99:ad:81:05:12:aa:db:7a:d5:ee:1f:58:6e:e0:
40:54:f5:d8:75:65:39:ce:03:eb:21:ab:cc:50:47:
5c:38:a7:c0:e5:94:7d:b3:8f:74:73:00:ed:bc:f8:
d0:b0:51:7b:df:6b:58:28:72:41:0e:bb:f2:a3:d2:
47:ba:09:8c:82:99:bd:ed:22:1d:4f:65:40:76:dc:
63:eb:ec:88:c5:20:0b:f6:13:ec:12:4e:c8:53:6c:
8b:c4:1a:ef:55:20:43:95:73:3d:11:ed:a6:8b:08:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:31:EC:CA:07:FD:9B:CD:57:90:27:BB:FC:FA:C5:54:EC:4B:4E:94
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c8:41:3b:c2:28:f6:26:43:99:cc:a5:63:b5:9b:ce:38:af:
6f:a5:cc:84:f3:3a:d2:50:99:1e:47:cc:45:65:98:35:d7:00:
d7:4d:27:c3:da:10:7c:08:2a:84:b7:6a:ad:02:c8:86:ff:8b:
f2:d2:13:67:de:9b:56:9a:3e:36:43:d2:90:72:a9:61:d8:69:
48:d6:22:ab:d8:51:6a:36:19:10:6c:18:6d:3b:6e:3e:35:9a:
3a:9d:de:cf:9b:24:54:d9:64:d2:5f:e8:ca:5b:61:7a:c9:c8:
56:c4:40:c7:10:57:2b:8f:96:f9:bf:5d:47:09:60:37:66:c5:
43:b8:21:4e:32:ff:a7:5c:4d:4f:9c:cd:90:9c:90:35:bd:c6:
10:f8:db:da:8e:e8:32:c6:c5:54:2b:ca:e8:ac:b8:e4:73:c6:
5d:54:3d:f0:b1:35:25:3a:cb:d8:58:2a:45:fd:52:95:3e:86:
a3:60:72:3a:0f:19:57:43:52:c4:9c:79:fb:76:00:d5:5a:ba:
9d:d7:e4:7a:0a:ce:76:74:8e:e1:cf:15:a0:02:2e:cd:e9:ff:
3c:c7:9e:84:69:20:89:bb:9d:f6:f8:a0:2d:c0:b0:17:d2:51:
ce:ce:3b:da:4a:07:f4:1f:b5:b9:69:d6:81:c8:a7:fd:c1:8d:
1f:ca:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:27:05 2026 by rpki-client