Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
File: ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft (raw, json)
Hash identifier: SJuRpiLNn6SGlYoKh4cz9sAipz6jQksjka5g7TfJ9ek=
Subject key identifier: E5:01:E7:D0:72:70:A5:70:E2:EE:35:5D:4F:3E:19:92:84:14:0B:CF
Authority key identifier: 66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
Certificate issuer: /CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Certificate serial: 01A093C6B1B8217656B3F2BFF08E1B896A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
Manifest number: 18
Signing time: Sat 12 Sep 2026 04:01:07 +0000
Manifest this update: Sat 12 Sep 2026 04:01:07 +0000
Manifest next update: Sun 13 Sep 2026 04:01:07 +0000
Files and hashes: 1: ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl (hash: 6q6gmIRDmW/+mkLrIbNWHfbkwCW1cDy/9JPIGyfijIE=)
2: hwu5SvCgU59ShO9fogdURCv6AoU.roa (hash: nBkergd1LBGxB0QpkcjB5a9Defi7cKkNRW0IBJmar/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:93:c6:b1:b8:21:76:56:b3:f2:bf:f0:8e:1b:89:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Validity
Not Before: Sep 12 04:01:07 2026 GMT
Not After : Sep 13 04:01:07 2026 GMT
Subject: CN=e501e7d07270a570e2ee355d4f3e199284140bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:75:d0:2b:1f:4e:14:e7:f3:93:36:c1:ed:
4f:24:27:ea:1f:3e:cb:db:30:d3:43:b1:f1:ac:24:
a7:e2:45:dd:a2:a4:ad:cb:9c:8f:21:af:d7:96:45:
a8:fc:ec:f4:04:2c:9a:7c:a7:eb:2a:22:12:de:4a:
37:44:ab:9c:ff:94:15:a9:d7:11:7e:31:d0:8b:02:
7b:d1:9a:f8:52:7e:c6:35:ef:88:4a:ec:34:0f:d9:
1b:cb:bd:a3:7e:1f:1a:54:71:9c:7a:e7:1e:fc:fd:
06:15:75:61:76:8f:5f:5b:13:f3:74:fa:94:a5:47:
95:43:22:45:1a:eb:21:90:4c:7e:11:77:b1:c7:25:
9c:69:ba:38:94:31:18:7c:5b:cc:71:34:84:8b:e9:
c0:41:62:bd:ec:b2:fe:1c:2d:f7:bc:fe:1d:b8:d0:
4b:78:30:67:cc:9c:5b:12:30:8b:50:f9:3c:46:10:
45:45:1a:04:cb:3b:18:89:d4:ba:07:6d:77:bf:fd:
71:f3:23:53:48:7d:e1:88:9c:35:4a:ea:a2:70:7b:
af:dd:f7:6f:a4:ae:58:87:3c:56:77:40:81:e7:ad:
fe:90:21:e7:61:18:56:ac:31:e8:a7:af:50:34:81:
ad:bf:b0:0c:b5:87:09:30:1e:2d:9f:f8:d9:7b:6a:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:E7:D0:72:70:A5:70:E2:EE:35:5D:4F:3E:19:92:84:14:0B:CF
X509v3 Authority Key Identifier:
keyid:66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d7:57:30:51:c2:83:02:d1:e4:82:29:10:f0:87:3f:74:71:
f6:cf:37:2e:99:2b:dd:59:51:14:03:f5:83:00:e0:dd:8a:5e:
fb:03:43:fb:9c:ed:18:fe:9f:79:cb:9a:57:ca:b2:4e:6c:6b:
d1:1c:ff:3f:a4:e6:26:a2:0f:21:6b:1c:6b:ad:0e:86:83:71:
01:cf:f9:d6:8d:05:44:22:db:86:29:63:40:60:75:51:15:d9:
92:1d:02:64:01:24:3a:a4:37:db:1b:eb:c2:5a:75:76:64:aa:
ce:a2:ca:8c:8f:a9:7a:f7:18:71:31:70:14:fe:fa:3a:65:ee:
80:62:20:a0:ff:38:4f:72:65:65:75:82:bc:62:bd:02:cd:3c:
91:91:6e:39:52:87:b5:e6:f9:e1:c0:b3:3d:47:bf:00:cc:47:
ce:36:49:02:dc:8d:fb:08:2e:51:3f:8d:67:68:00:b2:7d:e7:
c4:df:7b:c2:3d:64:76:32:f3:b0:b5:e9:c9:86:aa:20:71:aa:
d4:90:48:38:67:d6:fb:5f:b7:5d:ca:6f:31:25:ac:6c:37:a2:
ad:d8:22:09:e7:7a:19:6e:62:e7:4c:6c:98:4b:a4:79:01:a3:
33:47:9d:95:79:22:5a:b9:5c:c4:c7:12:8d:82:f8:d9:03:e7:
16:36:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:42:00 2026 by rpki-client