Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
File: ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft (raw, json)
Hash identifier: a0FcVLXlffLQ7Qw0yFbIC0Bzrq9uVmbD6T17FBfkYvk=
Subject key identifier: 66:BD:F8:7C:B1:61:8A:2F:12:B4:84:94:2C:06:F8:80:CE:EB:06:81
Authority key identifier: 66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
Certificate issuer: /CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Certificate serial: 01A19A6A91F17A25FE6AFADC4360034EECC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
Manifest number: A0
Signing time: Mon 02 Nov 2026 04:00:37 +0000
Manifest this update: Mon 02 Nov 2026 04:00:37 +0000
Manifest next update: Tue 03 Nov 2026 04:00:37 +0000
Files and hashes: 1: ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl (hash: mCDWnHnWo8qkUb6Syz4bFv6qV6xDE3fumWv8mqwcsQM=)
2: hwu5SvCgU59ShO9fogdURCv6AoU.roa (hash: nBkergd1LBGxB0QpkcjB5a9Defi7cKkNRW0IBJmar/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:6a:91:f1:7a:25:fe:6a:fa:dc:43:60:03:4e:ec:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Validity
Not Before: Nov 2 04:00:37 2026 GMT
Not After : Nov 3 04:00:37 2026 GMT
Subject: CN=66bdf87cb1618a2f12b484942c06f880ceeb0681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:90:61:fd:97:62:73:c7:b1:9f:00:7c:ae:
21:b7:5c:c3:d3:f8:8a:4f:38:8e:b3:6a:61:9e:a3:
5f:10:3c:23:d5:ce:24:74:07:74:ec:b7:93:a8:38:
79:8a:8e:ad:17:9e:ed:aa:1c:c0:10:d5:65:ab:cd:
fc:fe:2d:dc:d1:27:dc:b2:eb:73:3f:3f:93:05:af:
53:21:f5:60:0b:12:63:f1:73:fe:9a:d2:57:ed:30:
38:c2:ae:99:3d:11:a5:82:57:e4:c9:3a:ed:70:2a:
2f:a4:0a:ed:de:3b:7b:97:23:e1:8e:a3:d3:bd:18:
56:fe:e3:ac:0f:a8:1a:37:63:9a:d3:d7:10:83:fd:
55:67:a5:fc:48:8e:83:cc:bb:e1:41:c8:dd:4a:3c:
20:e8:47:e4:ca:4a:67:d3:5d:68:da:2d:1f:23:d9:
9f:d3:85:12:ab:33:1f:59:43:ef:0c:d0:14:1f:87:
05:f4:c8:1d:42:35:95:cc:e5:4e:9d:5c:fe:ce:ef:
07:8a:c0:0c:a0:8c:ec:53:5b:ef:13:02:94:ea:af:
25:d5:51:14:26:68:3b:fc:4f:0f:0c:a9:ee:5b:f2:
24:8e:be:49:c9:6b:5d:ab:b1:e0:b0:9c:29:f8:0c:
b2:60:38:df:bd:b8:ee:65:5b:fa:ea:cd:68:b1:69:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:F8:7C:B1:61:8A:2F:12:B4:84:94:2C:06:F8:80:CE:EB:06:81
X509v3 Authority Key Identifier:
keyid:66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bd:90:66:7d:a7:3d:cb:17:66:3d:18:c7:16:1e:c4:62:54:
5b:d8:89:4e:4a:8a:91:33:3a:f0:55:7c:7f:b9:b4:ec:65:98:
a7:cf:23:a3:d0:dd:75:47:da:16:09:ed:4b:ee:85:e8:b7:3c:
b5:fd:62:9b:87:1d:f6:fc:f5:11:8a:75:63:b1:56:5b:fa:eb:
56:53:86:17:e6:9a:6a:90:aa:10:bb:f2:f1:0c:85:24:eb:98:
e0:5e:51:61:fc:23:76:d4:f0:8f:25:32:97:b5:88:b5:1d:36:
ec:1f:a7:6d:27:bb:75:3d:92:7f:af:29:3e:0d:20:f0:fd:3a:
01:60:e2:ab:2f:fb:a2:c0:13:15:03:5c:63:98:d0:fb:ff:5e:
2b:f7:77:24:47:1d:22:d7:7a:b7:b7:e1:15:74:a2:57:4b:8c:
6c:09:e4:e1:55:91:a7:99:85:ae:43:65:3d:59:cd:89:96:23:
70:9c:85:13:3c:73:f6:23:8d:48:7f:e3:5d:49:a8:10:6d:9f:
11:52:67:de:08:6e:9d:71:4e:d9:10:8b:cd:38:f5:43:69:ba:
88:8f:8a:9a:62:dd:5a:09:8e:89:a8:f8:da:62:6b:e0:e4:fd:
de:19:7a:b6:e9:f3:ec:f1:50:ad:6f:37:fa:03:75:3f:e1:92:
62:d4:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:28:29 2026 by rpki-client