Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: qCpWOSQfUH5HE3/qpe+6o/hCpgjxCWt79DSthuuYbck=
Subject key identifier: 58:9E:76:53:EB:54:3A:DE:3E:F5:43:2C:DE:91:4F:9F:EF:2B:86:87
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 019EBFFF8E673EA3AAD4C8C47D559C5BEF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 18EE
Signing time: Sat 13 Jun 2026 08:00:56 +0000
Manifest this update: Sat 13 Jun 2026 08:00:56 +0000
Manifest next update: Sun 14 Jun 2026 08:00:56 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: CkmjiZT3XVZyjF5R7V19DXGJ/hd4R64NNkCdH5wnKxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:8e:67:3e:a3:aa:d4:c8:c4:7d:55:9c:5b:ef:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Jun 13 08:00:56 2026 GMT
Not After : Jun 14 08:00:56 2026 GMT
Subject: CN=589e7653eb543ade3ef5432cde914f9fef2b8687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:d5:7f:9d:bf:6a:7f:5c:9e:14:6a:d7:24:
45:de:16:c4:06:88:d8:2d:86:09:ab:7f:64:d8:fd:
c5:eb:d8:59:fb:e7:03:0d:45:ad:e2:0d:7d:70:7f:
85:97:ff:0d:9d:9d:6b:92:e6:6b:08:f8:91:d3:81:
f2:7c:65:c9:97:0c:c0:97:72:8d:03:e6:cd:f5:4c:
58:24:40:e3:74:0b:d2:3b:c8:ea:3f:90:f3:56:ef:
77:df:16:fa:40:30:89:32:55:60:c0:d7:0f:83:23:
48:ed:99:3b:85:c4:52:91:e8:5b:4d:dd:c0:eb:8c:
b9:b3:86:44:da:fb:33:a8:bf:ba:ff:8d:6f:75:68:
70:b7:51:32:79:73:e1:cf:6b:31:0c:44:7f:d6:a1:
e0:0a:5c:28:15:43:19:cc:80:8d:52:40:8b:4a:43:
2b:75:c8:7e:37:84:44:1d:b7:88:e0:28:ee:55:26:
0f:dd:b2:b0:34:be:47:c2:e3:a3:96:2b:88:df:22:
5a:d4:63:01:c4:c5:5d:14:c3:b6:ec:76:1b:3c:8f:
2f:9f:66:ca:f1:c1:fa:54:1a:c8:f2:6e:3b:ab:a5:
03:1b:37:97:e3:48:86:b0:00:84:8c:31:c4:f1:88:
8c:8d:03:8b:35:85:d7:cd:d2:5d:f5:74:41:0a:13:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:76:53:EB:54:3A:DE:3E:F5:43:2C:DE:91:4F:9F:EF:2B:86:87
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:69:eb:b8:2b:14:ee:14:99:43:a5:e2:49:6e:79:98:43:c1:
75:2f:a4:4b:8e:4b:46:62:dd:dd:a0:3d:10:3e:35:ab:43:35:
9d:47:32:91:a5:67:78:e7:7b:4e:88:ef:a7:04:86:5d:1b:c2:
78:ee:57:72:ad:61:8d:b2:ee:a4:ab:1c:4c:ec:d9:4f:97:85:
08:a0:7d:76:2c:88:b2:bc:5b:79:c4:f0:53:5b:e3:e6:29:ea:
21:b5:37:34:65:c2:db:6b:ab:58:7b:74:a8:f5:e1:8d:41:f3:
23:be:9a:8e:fb:37:86:09:89:74:a7:c5:7e:62:ff:50:ac:86:
d5:d5:05:08:16:22:15:03:a9:ec:1a:cb:70:68:20:92:e1:6c:
0d:2b:fc:30:8a:67:50:b2:6c:b0:68:85:c5:06:3c:15:73:8d:
9a:fd:02:e8:89:a4:c0:fd:5c:36:6e:c3:c6:ad:b7:6e:ea:e4:
15:81:05:70:7b:ba:ab:ad:44:45:b5:9f:5b:95:4e:eb:68:97:
c3:1b:99:60:84:b3:7e:6c:e4:96:38:bf:b7:e8:c2:40:8d:b6:
62:8f:62:86:0e:fc:ad:d5:3b:82:a9:54:81:76:ae:39:e3:9f:
c5:38:4e:84:b1:ad:bb:93:1d:18:b1:bc:cc:d0:15:8f:38:04:
72:d5:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:56:53 2026 by rpki-client