Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: e3IN1NN1m895waaIf9j/HEdO4pzPpWAide2eJ7XOMsY=
Subject key identifier: 20:2C:B1:3F:19:9D:F9:9A:35:03:95:86:58:DF:CB:F2:F9:23:BA:16
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 019D37F6E88BA31D2607ACA009D9B667CBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: MtECqgjUmdLPJsUAwhtiklOspTi07TV3w2cOhz1eb+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e8:8b:a3:1d:26:07:ac:a0:09:d9:b6:67:cb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=202cb13f199df99a3503958658dfcbf2f923ba16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:1c:15:e5:9f:55:c1:13:f2:1c:3b:fc:eb:
50:6b:3c:e7:bc:fe:06:29:73:4e:a4:b3:63:25:7d:
b2:a4:80:58:b0:85:cf:cb:cd:44:5c:8f:05:6a:b3:
d1:5e:ae:a6:f7:dd:0a:e1:cd:f8:bc:00:60:80:a9:
39:29:4a:74:86:50:44:13:2b:19:68:85:1f:4b:5b:
53:51:6d:ae:7b:09:5e:80:47:dd:5c:00:d3:92:13:
33:38:12:e2:2f:a7:a9:f4:db:f4:a4:26:17:39:71:
82:72:b7:22:fa:cf:10:f3:02:7f:32:1b:14:c3:7e:
9b:4e:d0:59:83:27:bd:43:e0:c4:ce:e3:4c:34:a7:
d6:5c:e5:56:91:94:b5:fe:77:49:ac:68:0a:2d:a5:
a1:01:23:bf:3a:4a:a4:37:6a:c1:b3:40:bd:6d:c0:
72:22:a8:71:21:c6:e4:85:0e:b5:ab:f5:9a:6c:a6:
01:9c:b7:18:62:56:84:0c:a4:b1:e1:85:3a:df:bb:
65:c9:db:8f:5d:42:f5:69:5e:75:64:a0:57:3a:a1:
67:6c:92:99:f0:d1:57:29:6f:04:7e:06:80:0b:f4:
14:aa:0b:15:f9:ed:78:8f:4e:6b:7c:ce:16:ed:0e:
85:f9:9b:24:c6:5f:11:75:19:2c:2e:3d:b2:6c:2d:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:B1:3F:19:9D:F9:9A:35:03:95:86:58:DF:CB:F2:F9:23:BA:16
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1b:93:e7:aa:2f:9f:1b:bc:6c:b6:bf:ed:db:a1:a6:94:75:
f6:aa:ff:6d:28:be:0c:98:a3:f0:4c:2a:ad:b7:f2:26:3b:08:
ce:3f:a7:4b:be:f0:7c:45:2b:4c:7a:f0:a3:10:67:59:52:4f:
69:aa:81:66:37:e5:28:b7:bc:94:9e:b8:dd:18:7c:e2:2e:11:
2d:62:18:f5:c0:59:3b:21:9d:a1:3c:08:37:da:fa:eb:71:db:
b3:75:30:5b:95:b1:04:86:d9:a6:0e:5a:73:a1:14:b0:de:bf:
eb:45:d9:f5:f3:38:86:23:23:68:89:15:0e:d1:b9:a8:bf:51:
dc:c5:2b:30:a8:40:aa:61:67:a3:a0:44:1d:50:37:b3:ec:b4:
aa:97:f1:99:9c:b5:28:70:df:8f:bd:77:b4:40:46:4d:17:80:
18:55:71:3a:d0:bb:64:b0:8a:8c:2b:05:61:80:0f:85:e8:0c:
6b:01:d9:b0:29:bc:23:e1:9b:eb:fe:e7:7d:37:31:0b:ca:5f:
f4:0d:68:54:a9:0f:8c:0b:31:63:d0:6a:e5:e8:78:95:e1:84:
06:e0:3d:14:a5:c4:7d:ad:83:e7:33:eb:49:98:8e:12:3b:7d:
18:bf:9b:b8:b1:68:b9:ce:a5:77:87:8a:68:f2:c0:13:5a:a4:
47:b5:88:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:13 2026 by rpki-client