Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: aLj3X55E/ggZU+EbKMWsfq023Q++ClRpnFlhSUHykQk=
Subject key identifier: 2C:B8:60:11:E1:35:42:CD:F7:F6:29:F4:73:CC:8A:F5:6B:C8:3D:1E
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 019DA41CFA6C2D79157DEDED0905FA2E8C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 185B
Signing time: Sun 19 Apr 2026 05:00:55 +0000
Manifest this update: Sun 19 Apr 2026 05:00:55 +0000
Manifest next update: Mon 20 Apr 2026 05:00:55 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: DWIUNl2KljZWHv2xwfzXF1Ob9mHSJufc+hNihOU/zi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:fa:6c:2d:79:15:7d:ed:ed:09:05:fa:2e:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Apr 19 05:00:55 2026 GMT
Not After : Apr 20 05:00:55 2026 GMT
Subject: CN=2cb86011e13542cdf7f629f473cc8af56bc83d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:22:d3:49:11:68:9c:a0:b2:51:b1:ef:26:
56:5b:7d:dd:a2:b6:fb:e9:54:b3:0d:15:67:b8:c2:
1e:69:1d:3e:98:68:3a:2b:84:77:ad:6a:70:46:7f:
b7:48:bf:b8:fe:f5:d1:c0:d1:f0:0e:92:fd:25:80:
ba:ae:d0:24:a7:6d:44:bd:70:5a:85:10:f0:f2:ed:
c5:84:b5:62:c9:06:4b:76:f0:96:f6:1a:39:5f:ff:
a8:25:9f:0f:63:b4:3b:89:db:23:28:db:52:82:e2:
10:0f:10:4d:a0:a1:bb:42:03:ff:5c:2f:fa:e9:b2:
57:67:27:68:69:fc:81:d9:b5:e4:1a:27:9d:c8:09:
28:e2:50:c1:86:3f:e7:0a:39:99:4c:2b:f6:e3:a4:
24:52:29:3b:db:58:0a:37:e4:57:f1:41:86:33:15:
cf:a0:0c:23:5d:c8:8e:5b:04:75:c0:d9:35:e5:aa:
60:4e:57:a4:f5:15:ad:75:44:8a:6d:29:73:ee:31:
fc:9e:d3:0a:7a:1a:7f:2c:3f:83:ad:6e:67:02:65:
56:cb:3c:22:3a:62:f3:68:9b:13:5e:0c:72:e2:e3:
6b:31:04:7b:ca:ec:21:92:c0:1f:fa:ca:f5:6c:06:
0c:a3:54:1c:8e:e5:74:13:00:5c:32:6b:7a:f4:17:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:60:11:E1:35:42:CD:F7:F6:29:F4:73:CC:8A:F5:6B:C8:3D:1E
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:3b:11:d9:9b:7a:b1:c3:ca:72:d0:8a:78:02:24:ab:af:
6e:c3:52:6e:1f:36:99:76:ab:7a:55:61:c6:eb:23:2d:61:97:
98:d6:82:91:3a:ea:e7:fe:ab:19:33:a0:b5:52:f6:9d:cd:cd:
2a:84:17:1a:55:35:bb:00:15:9a:f5:e5:69:94:8d:03:72:d2:
9f:6c:65:33:ad:cc:ad:68:06:c9:c4:87:af:e7:49:ad:0f:23:
36:5f:b7:d9:48:d4:db:26:a0:42:da:1c:bf:ca:cd:61:ae:16:
41:d9:79:71:dd:c4:8d:e5:8b:d4:7d:3b:69:09:e8:9a:4c:bf:
8d:7d:c8:4a:de:43:e8:91:7a:78:38:e5:6e:03:1f:7d:49:73:
f8:e6:16:8c:ac:08:a2:4d:e8:dc:75:83:28:34:48:1b:dd:fb:
e2:fd:28:41:73:57:f4:bb:7d:75:57:fe:f1:8a:55:6b:46:4e:
07:25:7a:e4:7b:a8:9e:f6:bb:ab:ff:a1:f6:d1:f7:2d:79:b3:
a9:6e:14:ab:62:e0:82:bb:64:4f:d2:ae:7b:02:3f:22:aa:47:
88:e2:41:a4:5f:95:28:5c:7f:d3:c5:20:e9:5f:c9:62:5b:43:
2f:68:9c:10:56:e6:22:40:6d:8e:e0:d9:f2:4a:2b:d2:8d:e7:
1f:d8:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:59 2026 by rpki-client