Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: ixARGNasSketEv6kVevicwmmjHSFjBt69HhjRMBfW6k=
Subject key identifier: 52:43:03:85:0B:FC:3D:A8:13:5C:B8:D4:EC:74:CF:48:CC:D9:89:0A
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 01A0CF360F705A5E03DDD0BD8853904B721B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 19FF
Signing time: Wed 23 Sep 2026 17:00:21 +0000
Manifest this update: Wed 23 Sep 2026 17:00:21 +0000
Manifest next update: Thu 24 Sep 2026 17:00:21 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: M+xXyR9xe5BStY1kPsaIGP3WS/CJesmTGvhOML1spXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:0f:70:5a:5e:03:dd:d0:bd:88:53:90:4b:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Sep 23 17:00:21 2026 GMT
Not After : Sep 24 17:00:21 2026 GMT
Subject: CN=524303850bfc3da8135cb8d4ec74cf48ccd9890a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:eb:e6:43:0a:07:32:c3:73:82:d8:c4:d3:
d0:00:86:a7:7b:54:01:4e:c1:f0:4c:0d:6b:2c:c5:
22:d0:e9:09:63:c4:c2:b8:fd:b7:51:e6:5f:75:c6:
c3:e6:40:49:06:b6:41:e1:0e:c7:db:c0:81:2f:ff:
1b:25:38:11:98:a7:75:70:35:4c:55:64:31:6e:02:
7f:36:67:3f:7b:b5:01:fc:72:d3:81:9e:35:79:54:
57:5a:2a:c3:ea:63:5d:9e:1e:a9:27:3f:05:7d:a1:
94:ad:f1:2d:c7:12:21:3a:01:c3:9a:0e:b5:c7:b3:
b9:e1:0e:ac:b5:29:d3:97:7a:57:f2:29:54:28:30:
11:61:24:bb:3f:7c:c0:00:7f:3b:bd:f0:d7:3e:a9:
e2:4f:b1:12:4b:27:24:35:e7:d3:5f:0e:9d:7c:59:
cf:49:c6:ee:e7:82:98:43:f5:3c:3e:3c:75:80:d4:
d4:f5:47:10:d2:f9:97:98:03:52:fa:6d:c1:0c:29:
d3:dd:68:96:32:67:19:32:7d:fc:0a:52:35:79:06:
08:b6:40:7f:cf:4a:1a:46:59:18:1a:50:b4:05:03:
54:fb:8f:8d:55:e1:0d:84:51:e3:b2:08:4b:57:47:
92:a7:d0:4a:8c:ef:34:f5:29:43:6d:e8:03:17:62:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:03:85:0B:FC:3D:A8:13:5C:B8:D4:EC:74:CF:48:CC:D9:89:0A
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:15:68:17:8d:76:0a:e4:24:dd:51:da:91:18:6c:ae:0f:e8:
2b:b9:36:ba:5b:dc:6e:69:37:be:94:b9:50:a2:7b:12:be:39:
05:e1:d5:f8:18:9d:88:8a:55:cd:1e:38:35:5a:3b:87:a8:7f:
de:a4:da:e9:02:9f:1f:fd:0b:b2:38:f0:92:41:b2:fb:55:1d:
c6:5f:c5:ec:70:29:b5:22:17:28:98:cf:c8:d7:29:56:46:7c:
a4:0b:bc:ac:30:52:f8:22:59:82:58:d1:94:93:26:a4:36:6e:
3c:26:f2:a8:1b:2f:ce:d5:20:e0:d0:39:11:6b:7d:70:c7:a1:
3f:d2:51:8b:02:65:f4:de:ca:9a:82:a4:c1:12:09:7e:79:ac:
7f:24:d0:4b:98:66:81:20:3f:3d:03:2d:67:f2:ca:75:fc:36:
5d:2e:90:0f:07:9b:aa:da:a5:36:ac:31:7d:8c:73:d3:85:9d:
c9:4e:eb:76:cb:bc:be:8a:61:56:42:f0:32:3d:09:48:be:32:
38:07:bb:dd:ac:6c:eb:67:b3:82:75:4a:2d:97:c6:7b:70:73:
13:44:2b:13:c5:bf:fb:73:c7:89:68:f8:c6:fa:16:22:90:88:
57:84:1c:ec:19:47:a6:17:4c:2a:f0:23:40:80:65:06:cb:d3:
09:26:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:11:35 2026 by rpki-client