Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File: ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier: /VzUm6v6QDK1LPgzDGv2x4IZQKNpNq3KbQ1+FP8S43I=
Subject key identifier: 13:AE:51:44:12:36:70:6F:41:5D:BE:C5:59:A2:D3:80:6C:AE:7A:1D
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 019D99D046547DC7D9F9EA8D2E8BC17B9DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:56 +0000
Manifest this update: Fri 17 Apr 2026 05:00:56 +0000
Manifest next update: Sat 18 Apr 2026 05:00:56 +0000
Files and hashes: 1: 5UJy-FglB36m_WVGPhQjUeDpJcA.roa (hash: jbNzffXqgNznaRTGjwlBv00PamtPBMfxq/7d1gTuI2I=)
2: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: 4sDPpM1LJGT5AIu2HUlK8WQNPHcv02LluXkn89X+JNA=)
3: e1ImFgRyhdMOKFgAB5kl9XY5Nfc.roa (hash: nTHeDeSEMp4wiPOugAgAjRRaTG5Sm3T4L+dSsNdSPbM=)
4: jsanitEq0EQzEoP-koTj7RMMQyI.roa (hash: CH0iu1++iAldc7IvIKXIHNPTTc8uHt4Xf+q2a+oCLdQ=)
5: xaFYB9Z2Erc-fREk_pDSJqz_vjU.roa (hash: PD/YbANQupr5zYAFp72kktOtRa9bbOhTbu5miLL+NIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:46:54:7d:c7:d9:f9:ea:8d:2e:8b:c1:7b:9d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Apr 17 05:00:56 2026 GMT
Not After : Apr 18 05:00:56 2026 GMT
Subject: CN=13ae51441236706f415dbec559a2d3806cae7a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:d5:61:8c:a8:25:aa:0b:01:14:9f:cc:1c:
66:ea:95:14:26:a6:be:bd:cd:ae:bc:da:47:2a:cd:
70:34:9a:6a:02:76:33:24:5a:c5:6d:35:75:63:60:
e1:40:d2:74:9a:07:fd:ea:24:7c:6d:a8:19:46:c2:
0c:24:24:f8:60:47:2d:8f:d9:97:cb:7b:ea:1c:50:
fd:ea:06:61:be:1d:86:fa:c8:a6:da:b7:3f:88:b3:
cb:e2:f5:10:ec:ea:99:f5:d7:db:26:72:d5:15:07:
bc:e9:c8:c2:6c:e8:d9:de:0d:8a:3d:ac:ea:50:4f:
fe:6a:0c:01:40:d8:8f:e6:cb:2f:e8:32:9c:9c:c0:
dd:42:63:30:09:b9:ff:78:7f:18:f0:dd:d5:43:88:
0e:02:ca:80:d5:6a:46:80:83:af:b9:43:f1:11:d1:
3c:42:c9:70:01:c6:37:b3:99:d2:d0:95:73:aa:32:
98:28:5d:6a:4c:45:b7:45:02:db:b5:b1:06:c6:1a:
14:03:bf:38:31:93:ad:24:4b:c7:4e:07:fc:c9:1e:
92:26:a9:fe:b7:f7:e4:95:e7:92:91:c7:d0:7f:98:
bc:d7:b7:31:e0:a6:ae:4a:c3:94:8e:34:7f:1b:06:
59:f0:14:b9:5c:e3:6e:6e:f5:fa:27:3c:55:5e:50:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AE:51:44:12:36:70:6F:41:5D:BE:C5:59:A2:D3:80:6C:AE:7A:1D
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a6:83:65:84:af:d5:9f:61:41:08:6f:cf:34:7d:98:b5:05:
e7:98:5d:02:71:d8:61:f9:6e:f9:60:dd:83:61:4b:75:fd:89:
f2:50:b2:f5:fc:53:c8:7e:21:bc:de:4f:85:49:b4:d9:54:47:
13:9c:75:c7:c8:df:b0:8d:a2:5e:38:1d:6a:9a:01:4c:70:95:
14:cc:37:83:be:71:21:fd:4c:79:84:e6:1c:b2:06:b8:f3:b3:
f8:1e:15:35:46:97:a9:0f:31:09:70:e3:1b:3f:9c:23:7a:75:
d9:7e:e4:7b:89:01:f6:d3:5c:04:03:da:ac:32:3a:b6:e8:30:
d9:13:a0:26:61:df:e5:d9:5d:92:cf:a6:d9:69:ca:c4:33:8f:
49:8f:61:66:28:13:f2:86:e9:9d:df:43:ad:85:b8:d9:52:d1:
57:be:25:02:8d:d1:21:3e:43:e9:1d:e0:7b:51:ba:93:88:f7:
58:3a:64:cf:52:ac:5f:38:77:25:03:34:48:3a:e7:8b:40:b0:
1c:7a:97:94:f4:51:86:87:07:13:73:0e:a3:38:07:77:70:a6:
97:36:92:67:ff:bd:79:0c:29:6b:25:18:0e:18:9e:bb:7a:03:
97:8f:59:df:a6:e5:ab:29:c4:9f:d7:1c:9a:03:27:b7:a7:50:
14:aa:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:46 2026 by rpki-client