Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File: ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier: GuB+FEis6YuuyTHO+tET6djYjcWiaDAT7q1sX5hV5f4=
Subject key identifier: D1:16:98:35:E5:E4:58:11:01:DD:7D:50:A7:E7:C5:54:2B:26:54:6E
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 019CAA5921FCE75A83A574247696943785E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:34 +0000
Manifest this update: Sun 01 Mar 2026 17:01:34 +0000
Manifest next update: Mon 02 Mar 2026 17:01:34 +0000
Files and hashes: 1: 5UJy-FglB36m_WVGPhQjUeDpJcA.roa (hash: jbNzffXqgNznaRTGjwlBv00PamtPBMfxq/7d1gTuI2I=)
2: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: +AhQaK1Pr/ofA6OjY1T7PBEMcfdTxeGWJuU92er3LkM=)
3: e1ImFgRyhdMOKFgAB5kl9XY5Nfc.roa (hash: nTHeDeSEMp4wiPOugAgAjRRaTG5Sm3T4L+dSsNdSPbM=)
4: jsanitEq0EQzEoP-koTj7RMMQyI.roa (hash: CH0iu1++iAldc7IvIKXIHNPTTc8uHt4Xf+q2a+oCLdQ=)
5: xaFYB9Z2Erc-fREk_pDSJqz_vjU.roa (hash: PD/YbANQupr5zYAFp72kktOtRa9bbOhTbu5miLL+NIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:21:fc:e7:5a:83:a5:74:24:76:96:94:37:85:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Mar 1 17:01:34 2026 GMT
Not After : Mar 2 17:01:34 2026 GMT
Subject: CN=d1169835e5e4581101dd7d50a7e7c5542b26546e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:7b:00:33:89:9f:2e:b8:06:60:97:b2:a2:
00:12:73:9a:f8:6e:d1:8b:54:8d:69:83:0b:cf:19:
c1:d3:bf:68:e7:68:00:8b:5e:3a:18:35:9b:b1:21:
a9:9f:35:e7:82:65:66:db:40:10:35:f8:21:2f:0e:
6b:a1:8e:ac:e4:12:92:94:aa:ab:7e:b4:46:7b:f6:
e3:bc:c4:e3:0c:09:01:a3:0f:e5:12:b1:af:22:69:
77:5f:19:ad:ce:08:ef:e7:8d:7d:e1:e6:60:f0:eb:
1f:13:a4:53:70:eb:c1:08:bb:75:75:d5:07:8a:2d:
f4:70:52:0d:c9:ca:1b:46:cb:c4:06:6e:1a:61:c2:
e8:51:0c:18:c4:89:9d:27:83:58:e4:a8:09:57:13:
53:40:e0:15:4e:be:f2:0b:b0:e5:ee:45:dc:7c:f1:
77:1d:e6:61:8c:f5:0a:dd:0c:4a:b0:93:97:03:4e:
1f:b5:e6:de:ef:66:78:7a:ab:94:df:7e:b2:12:46:
0a:2e:29:01:bf:1c:9e:1f:ab:a5:e5:44:37:41:77:
be:ef:56:73:e9:b6:a5:a1:68:32:f0:bb:c1:63:06:
15:06:e4:f9:05:5e:01:6b:90:cf:7b:11:b8:3c:67:
2e:8a:aa:50:f3:f9:0d:f3:6d:a2:cb:81:6c:4b:47:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:98:35:E5:E4:58:11:01:DD:7D:50:A7:E7:C5:54:2B:26:54:6E
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1e:7d:c7:b7:59:fb:14:18:f1:54:d6:4e:b2:d9:a2:30:70:
24:5e:c4:13:1a:a2:ef:8f:e5:e2:ab:5e:97:ff:7c:b8:1f:59:
ca:8b:ed:4f:57:8c:9c:5b:60:81:a7:e1:c5:54:f1:54:61:fa:
49:b3:97:27:ce:fd:d0:01:69:e8:bb:20:f9:27:4c:21:d2:2b:
22:a3:15:83:89:c5:4f:7e:a0:b6:68:4a:5d:06:87:17:92:7b:
14:53:08:ec:67:4d:45:80:5e:06:b7:f9:10:0b:eb:cd:e6:e9:
1f:6e:73:e5:dd:48:3e:23:e7:c0:81:ce:b3:ab:41:8a:06:13:
14:fd:55:d8:33:4e:7a:3a:d8:bc:6a:e4:77:92:f6:37:4d:e2:
30:90:45:24:03:88:0a:95:c3:04:21:2a:1c:65:41:09:a7:32:
c4:fb:25:9c:e8:24:31:6f:10:a9:2a:7b:f8:0b:3b:70:4c:a9:
3a:7d:c5:1d:65:ce:66:e3:01:c3:43:63:b2:b7:08:f7:d0:cb:
fe:cb:08:ec:02:16:b9:c1:45:97:fb:f3:f0:58:f8:80:54:f3:
9b:18:eb:a6:3b:4d:51:36:92:6e:e3:67:f3:c2:41:7e:3a:57:
fb:26:02:65:26:4d:6c:3b:db:63:e6:9d:67:08:dc:f5:3d:07:
1e:7c:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:41 2026 by rpki-client