
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: ZjZxL4LaCRaK+1rmuQEm9BNRk2FLyiZWNVlZSLMEM1E=
Subject key identifier: 90:6F:DA:81:4D:3A:A3:C0:A6:6A:41:E9:5B:90:3A:23:D1:8F:40:A8
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 01A002EF9423CB4D584262E462D0FB4A0D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 1A03
Signing time: Sat 15 Aug 2026 01:00:50 +0000
Manifest this update: Sat 15 Aug 2026 01:00:50 +0000
Manifest next update: Sun 16 Aug 2026 01:00:50 +0000
Files and hashes: 1: RsnrJKwmL8cQaNh398zcQEeUvVY.roa (hash: LNyFYXYZiYI7HKKoks5EZWi0DK28Q+wkZrR9sNh6HOA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: n3VUrN95fnOKQTUHbUOGypUVfxDw2rbtpZBAx002ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:94:23:cb:4d:58:42:62:e4:62:d0:fb:4a:0d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Aug 15 01:00:50 2026 GMT
Not After : Aug 16 01:00:50 2026 GMT
Subject: CN=906fda814d3aa3c0a66a41e95b903a23d18f40a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:ed:07:56:db:7d:e2:97:ff:75:0e:ec:78:
b1:e1:70:ae:ec:7f:a7:64:0d:64:59:46:ae:be:48:
bc:39:47:c2:f2:7f:ce:26:38:81:9f:de:c1:c2:cc:
65:52:45:d0:0c:76:72:37:f5:99:a3:6c:4d:17:1c:
2d:3b:f4:9f:36:b1:df:1d:9c:81:e9:88:38:1c:a3:
fb:ac:91:96:82:07:53:99:d0:9a:ee:ed:83:ed:4c:
66:3b:d6:71:2c:b7:e7:26:2a:12:f4:1b:e6:eb:e2:
95:a1:73:e2:6f:a7:52:b2:56:bf:3a:20:6c:80:c5:
71:f0:4e:40:68:79:34:97:eb:aa:97:21:94:fb:b4:
ca:f2:c2:e7:c5:a4:f7:8d:42:44:2c:55:11:30:a1:
36:a9:27:58:34:0f:f1:0a:e9:1e:c3:47:04:7d:69:
ee:1c:8b:54:e8:64:07:b5:d3:35:63:0e:65:39:ab:
4d:71:dd:b3:e9:a6:2f:94:a8:64:f2:c4:a5:61:36:
7e:65:18:4d:63:ca:cd:b8:7d:00:fd:15:db:72:7a:
f3:d3:78:1c:6c:b8:cf:e8:56:b3:15:3a:6c:49:c3:
6a:b3:8b:b7:de:53:40:af:e0:a4:43:6d:d1:fb:4c:
e6:d2:df:cd:4a:6c:5d:02:d8:93:be:f8:2f:5d:26:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6F:DA:81:4D:3A:A3:C0:A6:6A:41:E9:5B:90:3A:23:D1:8F:40:A8
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:25:51:7c:e3:f6:48:82:8d:8a:57:13:cc:ab:1f:a0:6f:dd:
26:cb:f6:ab:49:74:21:fc:f1:87:6b:ba:ff:95:49:d1:39:c6:
06:2c:cf:61:e8:af:66:36:c7:ce:01:ed:ec:1e:38:fa:cc:9c:
df:e3:e4:18:67:82:ba:b5:07:65:85:a1:66:38:17:45:46:26:
63:e3:c5:e3:6c:a4:c9:44:f1:87:f9:5b:05:e3:f0:9f:62:65:
e5:a4:60:6c:04:94:d4:e8:87:3d:3f:30:e2:05:ce:16:26:3a:
e1:b0:77:79:b5:31:8f:52:2f:fb:ea:8c:82:b1:64:ca:ca:c8:
99:d3:46:03:b9:9f:61:35:0e:7c:b1:71:cd:51:83:1a:2b:6c:
06:db:01:f5:31:e9:da:db:cd:85:46:a9:a3:1d:e2:f4:ab:0e:
45:e5:8b:86:e5:ad:35:55:e5:50:a8:40:6d:f1:97:69:bc:9c:
1e:56:5f:93:44:69:8b:e3:32:d9:f1:4b:be:82:a0:97:97:41:
13:3a:40:b3:c1:50:af:3f:d8:dd:e9:e4:a1:c0:19:f6:7f:a6:
62:a3:4d:a2:b0:53:00:d6:c8:64:e4:73:46:ae:9f:8e:f2:51:
41:fe:8a:20:2f:fa:a5:9f:1e:21:90:bb:04:c2:57:9c:1d:3f:
c8:3c:f9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:52 2026 by rpki-client