Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: ifN2GzzvAOGC+IaBYz2RM6vEuEPoymNwPfhIvVflcN4=
Subject key identifier: 6E:32:8C:FF:D7:16:8C:08:2E:60:78:DD:61:69:56:CE:13:01:86:B1
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 019E3117A71423961645AAC4AAE83EE13154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 18A4
Signing time: Sat 16 May 2026 14:01:33 +0000
Manifest this update: Sat 16 May 2026 14:01:33 +0000
Manifest next update: Sun 17 May 2026 14:01:33 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: 9biszepWcXCqW+mgGAMOSnNk5Ulqt1MWWHT5RSnppWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:a7:14:23:96:16:45:aa:c4:aa:e8:3e:e1:31:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: May 16 14:01:33 2026 GMT
Not After : May 17 14:01:33 2026 GMT
Subject: CN=6e328cffd7168c082e6078dd616956ce130186b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:1c:a7:4f:d3:83:c1:77:29:c1:01:b6:bf:
a9:40:50:03:4d:eb:6e:d4:73:99:3d:ee:21:18:5c:
94:f2:77:4a:63:20:e1:b1:79:88:d5:98:e1:16:fa:
b7:9b:e2:55:a9:5f:79:2c:9d:27:0e:c6:24:7c:9c:
dd:54:1b:77:6d:fb:90:4b:38:49:d4:d1:e4:25:3e:
29:a1:dd:ca:1c:cb:43:f6:5f:0e:63:d1:35:19:c7:
95:7a:84:f7:dc:c7:01:61:3c:ab:da:9e:e5:7a:3a:
0d:8c:10:cd:76:52:e4:84:60:53:e0:df:aa:65:51:
18:57:a3:82:e1:d1:50:da:3d:bd:74:46:f2:36:eb:
47:a8:8b:40:b9:c1:d0:c8:dd:67:64:39:f2:d8:80:
b0:57:97:4d:42:1a:db:46:2d:73:fe:25:c8:ec:14:
d1:88:a0:45:fc:7e:68:04:96:4b:85:d8:a2:ac:2e:
63:49:84:67:ca:30:7f:8a:d0:c5:0d:48:e1:41:dc:
a1:c9:f4:87:bb:85:f9:f6:3a:6b:7e:d2:e6:e6:0c:
53:01:0e:9c:22:01:50:8c:93:66:db:ad:f6:9c:fc:
8b:0f:fe:be:1e:d7:2d:a0:2b:11:e3:ae:7b:e8:20:
2d:f2:87:8d:87:d6:8e:7f:ba:ec:13:3a:d5:6e:c0:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:32:8C:FF:D7:16:8C:08:2E:60:78:DD:61:69:56:CE:13:01:86:B1
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9a:ad:ee:29:71:c4:f4:b9:20:60:05:fb:b0:d9:45:53:bc:
e7:d9:24:dc:45:b2:42:ce:16:b6:63:7e:21:e0:b9:e9:d3:b3:
0b:05:91:6c:f7:f5:33:11:e6:59:3c:0a:93:57:7f:23:da:0a:
04:e0:33:71:6f:fd:8f:f6:41:81:ff:17:d0:12:62:cd:09:3b:
f9:41:67:b4:5b:cb:21:05:f4:91:0a:f2:f9:15:0a:2e:2e:b0:
c7:5a:59:c2:66:dd:00:02:51:5c:fe:bb:7f:88:d9:f9:81:a0:
d0:1d:08:1f:63:b5:a5:f2:b0:b1:a2:1b:33:71:37:a8:d8:c6:
f9:11:89:26:eb:1c:05:66:60:28:ff:26:b2:76:a6:da:50:8f:
6b:fa:a6:fa:00:1f:d7:1a:a2:a9:a8:e6:a3:1e:6e:98:a5:52:
ed:07:2b:71:f8:f6:87:6d:57:78:b2:dd:30:8e:99:ee:f1:bc:
73:fc:da:b4:28:b6:1d:be:0b:fe:59:21:2b:e9:6f:ce:47:fe:
c2:82:25:91:fa:c5:8f:ff:f7:f5:d1:60:ab:26:8c:d4:ef:29:
c7:46:de:26:90:92:93:18:08:75:55:56:20:91:9e:94:33:39:
c1:9d:e1:dd:b3:c5:4f:05:05:03:83:49:35:83:44:4a:e2:18:
1a:3b:28:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF6cUI5YWRarEqug+4TFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh
MzkwZTkwHhcNMjYwNTE2MTQwMTMzWhcNMjYwNTE3MTQwMTMzWjAzMTEwLwYDVQQD
Eyg2ZTMyOGNmZmQ3MTY4YzA4MmU2MDc4ZGQ2MTY5NTZjZTEzMDE4NmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowIcp0/Tg8F3KcEBtr+pQFADTetu
1HOZPe4hGFyU8ndKYyDhsXmI1ZjhFvq3m+JVqV95LJ0nDsYkfJzdVBt3bfuQSzhJ
1NHkJT4pod3KHMtD9l8OY9E1GceVeoT33McBYTyr2p7lejoNjBDNdlLkhGBT4N+q
ZVEYV6OC4dFQ2j29dEbyNutHqItAucHQyN1nZDny2ICwV5dNQhrbRi1z/iXI7BTR
iKBF/H5oBJZLhdiirC5jSYRnyjB/itDFDUjhQdyhyfSHu4X59jprftLm5gxTAQ6c
IgFQjJNm2632nPyLD/6+HtctoCsR46576CAt8oeNh9aOf7rsEzrVbsDe3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4yjP/XFowILmB43WFpVs4TAYaxMB8GA1UdIwQY
MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt
ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1
LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZqt7ilx
xPS5IGAF+7DZRVO859kk3EWyQs4WtmN+IeC56dOzCwWRbPf1MxHmWTwKk1d/I9oK
BOAzcW/9j/ZBgf8X0BJizQk7+UFntFvLIQX0kQry+RUKLi6wx1pZwmbdAAJRXP67
f4jZ+YGg0B0IH2O1pfKwsaIbM3E3qNjG+RGJJuscBWZgKP8msnam2lCPa/qm+gAf
1xqiqajmox5umKVS7Qcrcfj2h21XeLLdMI6Z7vG8c/zatCi2Hb4L/lkhK+lvzkf+
woIlkfrFj//39dFgqyaM1O8px0beJpCSkxgIdVVWIJGelDM5wZ3h3bPFTwUFA4NJ
NYNESuIYGjsobQ==
-----END CERTIFICATE-----
Generated at Sat May 16 21:13:19 2026 by rpki-client