Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File: Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier: +c2nba7S6WW/nIs3JIDlRL0ZQJjBGO4xkeM+BEYJcIE=
Subject key identifier: 53:7B:4F:F9:61:B2:F0:1D:E5:E1:FD:54:78:0A:B7:C7:E3:04:6E:AD
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer: /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial: 01A0C821C4786ACF9FB485342846D562C767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number: 0526
Signing time: Tue 22 Sep 2026 08:00:51 +0000
Manifest this update: Tue 22 Sep 2026 08:00:51 +0000
Manifest next update: Wed 23 Sep 2026 08:00:51 +0000
Files and hashes: 1: 7eUHBGs5-5ccLiuJle7ggH6TQjE.asa (hash: Bnt40cDgGP9nDvETNeaVD27iCk/Fc7R7LcRjaxb8Cnw=)
2: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: 98nEOO+XCOx/J6PGVdpK9fPgO7HIgbV+FdpGk0+B3W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:c4:78:6a:cf:9f:b4:85:34:28:46:d5:62:c7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
Validity
Not Before: Sep 22 08:00:51 2026 GMT
Not After : Sep 23 08:00:51 2026 GMT
Subject: CN=537b4ff961b2f01de5e1fd54780ab7c7e3046ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:f7:f5:3f:b9:50:03:0d:e5:f4:9d:49:3b:
b1:10:5e:d4:88:85:16:11:9d:bd:d8:8f:53:49:ef:
99:d9:b7:43:c2:ed:28:67:a0:22:8d:3d:ca:2a:1c:
e3:d3:0e:a4:cd:9b:64:d5:02:ca:96:7e:e3:b7:17:
5c:cb:60:13:d8:b7:ed:6f:56:62:58:f2:43:f6:94:
41:84:1b:47:4b:6f:d0:62:23:15:3f:90:13:ef:ec:
31:d6:0d:bf:7e:c7:38:6a:25:51:53:95:5c:90:e7:
fe:6b:18:50:be:6b:24:77:2c:dd:31:24:4d:34:7b:
ac:d1:79:6c:29:4e:4d:d2:53:4b:cb:68:ec:cd:09:
2f:93:74:2a:fd:e3:4f:23:de:fa:97:d4:df:0b:d2:
d2:58:6f:86:b9:e8:37:8f:b5:a5:c8:b2:9a:43:e1:
b4:a1:4f:a6:7e:4b:3c:74:fa:ce:8f:7e:86:30:a0:
af:0f:b8:58:f4:b5:72:4c:8c:84:0d:fb:0b:61:2e:
67:29:4a:36:9c:32:aa:1f:df:6a:3e:b4:d2:4b:25:
e8:2c:79:8b:33:19:b1:9d:18:24:5c:e6:f6:90:fb:
95:ba:4e:39:f5:ff:0e:92:ca:82:6c:d2:14:dd:f9:
70:db:78:38:7c:29:17:25:81:f7:34:18:1d:94:42:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7B:4F:F9:61:B2:F0:1D:E5:E1:FD:54:78:0A:B7:C7:E3:04:6E:AD
X509v3 Authority Key Identifier:
keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3f:38:ca:90:f4:21:92:7e:b6:ae:e0:3d:6b:70:3c:13:72:
f6:be:55:69:7d:92:c1:3d:db:e2:36:8f:ce:73:1e:ee:59:30:
67:f8:f5:21:85:19:ef:3c:84:d9:2e:90:4f:26:74:44:de:27:
9f:ac:fb:72:be:b2:0b:e2:75:b3:e0:63:2b:fe:d6:f1:69:c5:
37:15:27:15:92:3f:ac:9b:29:97:0c:4a:be:85:fc:f1:ea:d8:
95:4f:ad:f6:9f:f1:dd:97:e9:04:90:a5:2a:08:6a:33:b4:14:
81:98:c5:1f:f1:54:eb:3a:be:28:4d:07:67:9b:ec:f3:34:08:
79:44:b3:43:81:02:00:fd:80:a8:d7:a9:04:55:9f:cc:da:ec:
12:57:54:6c:b5:63:36:cf:e7:58:af:66:72:da:06:d5:0e:63:
a8:a3:6d:7c:c7:1b:0e:09:cc:ff:8c:c4:cb:ba:c1:d7:0a:58:
66:be:c7:73:da:8f:e6:81:f5:7f:a1:fc:be:20:bc:c6:2a:21:
e1:3d:4f:c4:ce:41:0a:0a:7c:97:1d:d4:5f:da:95:da:8a:dd:
9c:86:55:21:da:fb:10:51:9d:10:2d:35:c8:62:09:f7:ec:53:
7b:26:0f:b6:3d:b5:b1:e5:d9:a5:8a:c8:9a:7c:91:18:e7:cc:
d0:47:ab:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIIcR4as+ftIU0KEbVYsdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTZhOGViYjAxMTExOWIyZjY5NTMyN2ZiMTZlNTFmODg3
MDQ0NzkwHhcNMjYwOTIyMDgwMDUxWhcNMjYwOTIzMDgwMDUxWjAzMTEwLwYDVQQD
Eyg1MzdiNGZmOTYxYjJmMDFkZTVlMWZkNTQ3ODBhYjdjN2UzMDQ2ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3v39T+5UAMN5fSdSTuxEF7UiIUW
EZ292I9TSe+Z2bdDwu0oZ6AijT3KKhzj0w6kzZtk1QLKln7jtxdcy2AT2Lftb1Zi
WPJD9pRBhBtHS2/QYiMVP5AT7+wx1g2/fsc4aiVRU5VckOf+axhQvmskdyzdMSRN
NHus0XlsKU5N0lNLy2jszQkvk3Qq/eNPI976l9TfC9LSWG+Gueg3j7WlyLKaQ+G0
oU+mfks8dPrOj36GMKCvD7hY9LVyTIyEDfsLYS5nKUo2nDKqH99qPrTSSyXoLHmL
MxmxnRgkXOb2kPuVuk459f8OksqCbNIU3flw23g4fCkXJYH3NBgdlEJtSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN7T/lhsvAd5eH9VHgKt8fjBG6tMB8GA1UdIwQY
MBaAFGYWqOuwERGbL2lTJ/sW5R+IcER5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEt
ZWQzZDI3MDU1MDIwLzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEtZWQzZDI3MDU1MDIw
LzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIT84ypD0
IZJ+tq7gPWtwPBNy9r5VaX2SwT3b4jaPznMe7lkwZ/j1IYUZ7zyE2S6QTyZ0RN4n
n6z7cr6yC+J1s+BjK/7W8WnFNxUnFZI/rJsplwxKvoX88erYlU+t9p/x3ZfpBJCl
KghqM7QUgZjFH/FU6zq+KE0HZ5vs8zQIeUSzQ4ECAP2AqNepBFWfzNrsEldUbLVj
Ns/nWK9mctoG1Q5jqKNtfMcbDgnM/4zEy7rB1wpYZr7Hc9qP5oH1f6H8viC8xioh
4T1PxM5BCgp8lx3UX9qV2ordnIZVIdr7EFGdEC01yGIJ9+xTeyYPtj21seXZpYrI
mnyRGOfM0EerIA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:29:53 2026 by rpki-client