Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File: Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier: I1vTRczgJl05+ZUsNEFNUmGYGDZ1DI+gPoC5wv7p0xk=
Subject key identifier: 6C:14:3A:0E:AB:10:50:F6:9D:FC:96:CA:0F:CF:46:40:34:BE:18:11
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer: /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial: 019FA86220420FA727B64C331FBC07794B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number: 0491
Signing time: Tue 28 Jul 2026 11:00:30 +0000
Manifest this update: Tue 28 Jul 2026 11:00:30 +0000
Manifest next update: Wed 29 Jul 2026 11:00:30 +0000
Files and hashes: 1: 7eUHBGs5-5ccLiuJle7ggH6TQjE.asa (hash: Bnt40cDgGP9nDvETNeaVD27iCk/Fc7R7LcRjaxb8Cnw=)
2: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: C/5ZXVznbXYrBbm34mu8qTha1Rtcos0gz9Dn+1uE8ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:20:42:0f:a7:27:b6:4c:33:1f:bc:07:79:4b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
Validity
Not Before: Jul 28 11:00:30 2026 GMT
Not After : Jul 29 11:00:30 2026 GMT
Subject: CN=6c143a0eab1050f69dfc96ca0fcf464034be1811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:5b:6f:6f:2e:b1:e1:1c:9b:91:7e:ea:46:
e3:1b:0d:30:3e:41:43:92:56:d2:ea:e8:11:83:8b:
4a:f3:a6:7a:6c:b5:ca:83:ad:72:97:ef:79:b2:37:
a8:83:89:8b:51:5d:45:02:b1:14:24:c3:70:ce:50:
db:bb:0f:db:b8:b2:a0:eb:4a:f2:e5:53:43:58:84:
4a:07:47:5b:6a:57:a8:40:e6:7b:54:97:42:7d:c8:
3d:c8:e2:ef:23:62:f1:32:f5:9c:76:77:8d:0a:5a:
07:e3:06:f1:8b:fd:b5:b8:ba:9b:22:f6:ee:66:57:
ef:2d:2b:45:35:02:6b:8b:c5:3c:52:3a:59:ae:3e:
28:7e:2e:7d:1c:0e:e5:8b:44:e1:21:63:d3:ee:a9:
db:9e:ab:39:0d:5e:10:fb:c9:84:b0:96:97:64:c1:
f5:38:f3:b7:af:ac:31:e6:53:f9:ff:83:b9:d4:df:
19:86:d4:1b:cb:a8:1e:f7:24:a1:c1:21:39:90:8f:
76:9a:9c:2e:36:b7:ad:29:1b:15:c4:32:34:10:2d:
e8:52:6b:f7:6e:20:88:79:b6:1a:65:cf:1a:3c:21:
d6:1b:93:f9:d9:3e:06:f0:ed:5d:39:e0:e7:4d:d1:
2b:30:45:ff:46:04:a5:ed:f1:fb:21:9c:24:cb:70:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:3A:0E:AB:10:50:F6:9D:FC:96:CA:0F:CF:46:40:34:BE:18:11
X509v3 Authority Key Identifier:
keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fe:f2:04:6c:de:00:c0:8d:63:5f:d2:af:74:ad:81:47:b0:
41:00:02:25:f0:3d:40:22:87:a1:91:94:e1:1c:06:da:3a:db:
19:35:f0:f4:d6:eb:86:46:08:c2:e5:ac:51:02:b4:5e:a7:a4:
9f:b8:f0:cd:d5:02:cd:37:d2:65:e9:8c:fe:9b:48:ed:c4:67:
0a:37:5d:0d:c7:77:e3:c1:8e:18:fb:d1:93:b2:81:75:bc:cb:
d6:5d:17:5b:fd:55:c8:84:85:c6:16:6d:37:e1:bf:3c:95:15:
72:61:b4:85:ee:a0:d8:85:7b:d3:70:8d:f3:bc:8e:83:73:66:
ec:c4:92:06:27:3b:28:09:13:c4:30:fb:e7:b8:1f:e8:44:d0:
49:fc:97:91:15:65:92:c8:32:a4:97:f7:42:73:5d:77:6c:b6:
26:f7:e4:92:2f:58:ca:49:c5:a8:e9:f6:16:c8:f0:1b:ca:74:
a9:32:32:ff:da:56:bb:0c:75:28:86:eb:14:70:11:20:37:ef:
03:41:d7:62:38:ba:5d:1a:8c:ea:5b:1a:9a:2e:5f:e3:16:07:
c7:73:ba:08:03:bf:ff:82:21:43:7a:bd:23:db:df:82:a3:a9:
a2:bb:48:76:e7:e0:01:cb:4f:29:b1:e3:5b:7e:45:c6:e1:e2:
75:61:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:24 2026 by rpki-client