Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: XJuwYSUjryPc9wGOly8ghFR7Xq4lyF3RjGcNyiJgyTE=
Subject key identifier: 5C:A0:65:78:22:8B:84:5D:29:3B:29:B2:DB:DE:BA:73:CE:BA:94:24
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 019CAAFD0D3E3DF736C5BD1B1B9A98D8FBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=)
2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: 2t8qUbUK2bpl01sgFfCKwSpMEMAuBlOEOcb8Flh1k08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0d:3e:3d:f7:36:c5:bd:1b:1b:9a:98:d8:fb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=5ca06578228b845d293b29b2dbdeba73ceba9424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:0e:54:ca:7c:3c:3f:86:32:9f:bc:ea:d3:
4a:03:55:c7:39:82:25:21:a1:9f:33:a3:95:3f:b6:
f6:69:fc:25:28:4e:77:ac:d4:e1:e8:ff:86:6b:9a:
6d:66:b7:dc:63:a4:ba:1d:ca:ba:e6:91:9f:f2:9b:
39:38:34:0f:86:a0:4a:cf:72:2f:e6:1f:6c:af:78:
79:61:1b:db:24:32:5a:65:c1:aa:51:71:03:d3:d7:
65:2a:65:73:bb:37:61:eb:70:65:a1:13:4f:ac:f0:
b7:95:43:2d:48:9d:d4:bf:03:2a:df:04:88:d5:07:
4d:8e:7a:80:06:e0:ce:94:49:fc:3f:fa:1a:8e:d4:
6b:a5:53:96:32:71:f0:50:2b:54:22:51:7c:8f:fa:
4a:86:b9:5b:78:0e:05:6b:ed:d8:e4:62:71:9a:17:
46:2d:8d:b1:19:32:e4:87:13:58:18:ff:a4:8d:df:
a5:6c:2c:2b:27:13:d1:da:e2:e1:ce:9e:e1:c8:fb:
c6:f8:92:53:08:c0:df:0e:35:3e:b1:40:ac:b2:4e:
22:c0:1b:32:60:98:a1:aa:17:fe:9e:0b:85:55:48:
3f:f2:26:0a:7c:96:86:ff:1d:24:25:7e:e1:42:d2:
5b:aa:93:58:ea:72:bd:5a:36:37:e7:46:dd:9c:6d:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:65:78:22:8B:84:5D:29:3B:29:B2:DB:DE:BA:73:CE:BA:94:24
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:87:e7:4b:cc:1a:2b:18:c7:74:19:5b:ff:75:7a:c8:03:a6:
38:7d:d7:96:01:18:0d:52:c2:a3:54:c4:6b:f9:09:52:06:9b:
ac:8a:30:07:94:00:8f:3a:82:8a:a7:2c:a8:71:2c:58:5e:d8:
45:c0:80:db:80:2c:05:3b:ad:16:2d:f1:b1:56:7b:0f:b1:e4:
df:a4:41:7a:3e:54:94:1d:56:69:7f:c5:22:e2:4c:21:09:36:
b2:bf:50:4c:63:b0:0f:c9:64:d8:e7:b1:48:43:d7:0f:fc:f9:
af:73:e5:fe:de:b4:9a:ad:aa:82:54:80:8f:0b:df:7f:d5:cc:
b2:10:d9:70:7c:8f:29:2c:21:33:7f:cc:0b:fd:eb:d5:e5:49:
da:9d:27:65:16:77:9c:9d:5b:f8:bf:02:1d:fe:2c:32:d1:b3:
3e:97:a8:17:46:1c:91:1e:04:c8:36:aa:ed:d2:3b:08:52:f8:
ae:2b:3c:3a:a1:15:06:e9:a8:ab:f6:2b:96:a7:58:b5:1d:64:
0c:9a:53:3e:0d:2e:88:8e:87:a2:8e:22:a7:2f:36:b5:a8:ff:
a5:f4:c9:a9:ce:b2:2d:d2:da:79:da:13:97:2a:78:6b:7a:3d:
ca:d0:ba:0e:46:67:5a:11:24:a6:43:73:ec:b6:54:c6:54:fd:
05:06:bc:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Q0+Pfc2xb0bG5qY2PvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh
MzkwZTkwHhcNMjYwMzAxMjAwMDM2WhcNMjYwMzAyMjAwMDM2WjAzMTEwLwYDVQQD
Eyg1Y2EwNjU3ODIyOGI4NDVkMjkzYjI5YjJkYmRlYmE3M2NlYmE5NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLUOVMp8PD+GMp+86tNKA1XHOYIl
IaGfM6OVP7b2afwlKE53rNTh6P+Ga5ptZrfcY6S6Hcq65pGf8ps5ODQPhqBKz3Iv
5h9sr3h5YRvbJDJaZcGqUXED09dlKmVzuzdh63BloRNPrPC3lUMtSJ3UvwMq3wSI
1QdNjnqABuDOlEn8P/oajtRrpVOWMnHwUCtUIlF8j/pKhrlbeA4Fa+3Y5GJxmhdG
LY2xGTLkhxNYGP+kjd+lbCwrJxPR2uLhzp7hyPvG+JJTCMDfDjU+sUCssk4iwBsy
YJihqhf+nguFVUg/8iYKfJaG/x0kJX7hQtJbqpNY6nK9WjY350bdnG1E4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFygZXgii4RdKTspstveunPOupQkMB8GA1UdIwQY
MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt
ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1
LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfofnS8wa
KxjHdBlb/3V6yAOmOH3XlgEYDVLCo1TEa/kJUgabrIowB5QAjzqCiqcsqHEsWF7Y
RcCA24AsBTutFi3xsVZ7D7Hk36RBej5UlB1WaX/FIuJMIQk2sr9QTGOwD8lk2Oex
SEPXD/z5r3Pl/t60mq2qglSAjwvff9XMshDZcHyPKSwhM3/MC/3r1eVJ2p0nZRZ3
nJ1b+L8CHf4sMtGzPpeoF0YckR4EyDaq7dI7CFL4ris8OqEVBumoq/YrlqdYtR1k
DJpTPg0uiI6Hoo4ipy82taj/pfTJqc6yLdLaedoTlyp4a3o9ytC6DkZnWhEkpkNz
7LZUxlT9BQa88A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:47 2026 by rpki-client