
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: oUTaFUIIYDiYnL035B7XXPEvZEa8UddrEuXtCPKSWLU=
Subject key identifier: 93:F4:5E:59:8F:16:79:6B:79:56:60:05:78:DA:83:C7:CB:27:E6:2D
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 019CE7494A148126B6BE96479A97E341CF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 13:01:05 +0000
Manifest this update: Fri 13 Mar 2026 13:01:05 +0000
Manifest next update: Sat 14 Mar 2026 13:01:05 +0000
Files and hashes: 1: RsnrJKwmL8cQaNh398zcQEeUvVY.roa (hash: LNyFYXYZiYI7HKKoks5EZWi0DK28Q+wkZrR9sNh6HOA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: AzvUeM6QMeARwqnhFYPFpGQLMg+1Yg27GFPaPXjEF9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:4a:14:81:26:b6:be:96:47:9a:97:e3:41:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Mar 13 13:01:05 2026 GMT
Not After : Mar 14 13:01:05 2026 GMT
Subject: CN=93f45e598f16796b7956600578da83c7cb27e62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:78:07:5e:b3:be:6b:6a:3c:55:87:00:c3:
04:f3:05:80:1a:cf:dd:73:f3:17:fa:a4:6d:90:59:
00:77:bf:28:27:d1:d5:ab:14:f7:e5:59:bc:43:02:
5b:4f:3c:71:de:a0:ee:4c:b7:80:94:61:d4:85:4d:
20:64:c2:7b:7e:ec:99:d5:8c:21:77:b9:b5:cc:91:
94:ae:c7:38:29:a5:77:4f:fd:73:d8:29:9e:91:56:
16:1f:95:0e:dd:e4:f7:c3:c6:ad:48:3e:64:2d:2e:
79:71:26:09:5b:60:84:73:08:66:be:e7:09:42:1b:
7c:b6:a4:98:84:5b:16:78:17:3a:e3:26:53:2e:82:
29:fb:c0:e8:37:9c:68:84:6c:ac:55:07:c1:04:91:
6c:d8:1b:a9:78:7f:5c:2c:7f:9a:5d:f1:18:b4:5f:
5b:56:b3:08:be:31:b5:f4:1e:6c:52:70:3f:29:0b:
13:54:44:1f:dc:7f:d9:20:d0:03:eb:ee:5a:5f:08:
8c:ac:b9:24:7b:ba:ba:ed:42:a2:60:5e:01:cd:5f:
95:14:d8:98:75:08:69:e4:a8:cf:f7:5e:43:32:20:
87:e5:86:7d:ba:d9:e7:70:d0:b4:e1:9b:6b:a3:13:
8e:88:e9:be:2a:dc:1b:f6:83:9b:92:60:11:f4:f9:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:5E:59:8F:16:79:6B:79:56:60:05:78:DA:83:C7:CB:27:E6:2D
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8b:03:04:cf:eb:67:23:9b:97:fd:ae:9c:88:33:3d:29:ca:
f0:b4:0d:70:32:8f:f6:f7:85:c5:3a:81:a7:81:37:8b:ca:e8:
11:1c:36:11:da:f1:f5:63:82:00:59:ff:51:1f:8e:c3:ed:16:
aa:4a:11:5f:e6:a2:ee:bc:0a:f2:62:bf:fe:54:2c:83:f0:a0:
e0:00:80:98:c5:ff:af:39:a4:f5:7a:05:dd:ec:2e:2c:c5:fb:
b7:7c:70:1b:1f:04:9a:25:39:92:63:2b:f9:fc:f3:66:93:d9:
33:c5:fe:d8:16:04:87:b5:85:d4:be:a1:6a:80:c8:12:80:d0:
c0:79:9f:74:e0:06:39:74:aa:dd:3a:a3:8b:65:84:cc:40:b6:
42:e7:08:6b:e2:75:95:cb:2b:be:c4:df:7e:89:f9:ab:21:3b:
4d:6f:d0:c7:96:c8:c0:dc:79:33:d9:ca:54:ef:d8:ad:6a:8c:
50:61:e5:d1:79:8f:4c:2c:77:0a:68:77:6f:ad:42:e1:ec:a3:
7e:61:63:cc:8a:ae:f4:89:80:ae:8b:45:6c:f5:55:42:2f:0a:
e9:44:e1:2e:eb:c4:6d:0e:3b:c7:dd:88:81:6a:f3:e9:03:38:
64:50:98:9d:55:b0:2a:10:61:21:02:8f:e7:37:20:78:59:13:
7e:73:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:56:00 2026 by rpki-client