Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: kJz+r+PbRkE4ThGl6WpKnngDzCt3cmHHjt6dHvfxbUc=
Subject key identifier: F1:8D:1E:F2:90:19:DD:01:65:EF:93:5A:E4:AE:D7:AB:E8:6E:C4:9D
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 019D37C09FEA281A24EEE7424EF122C42142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:01:03 +0000
Manifest this update: Sun 29 Mar 2026 04:01:03 +0000
Manifest next update: Mon 30 Mar 2026 04:01:03 +0000
Files and hashes: 1: 9Oc3Qrkh-WGI82en3F3kWexrfy0.roa (hash: g6ufVMQ2+i4B4SEYwZTcvbXAAfQ4pevHKfoq/wjdF2w=)
2: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: 1qqW+bAfl7/aSElqPEbyzWc3IN+ZUtOK7Txf7yvAcAA=)
3: zPgsCRDb5gAtSvqDim5Of48kyvA.roa (hash: rPEbmMa51gkJTXi8HWqGM5oBfXCu7j0eiFWR1QtHgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9f:ea:28:1a:24:ee:e7:42:4e:f1:22:c4:21:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Mar 29 04:01:03 2026 GMT
Not After : Mar 30 04:01:03 2026 GMT
Subject: CN=f18d1ef29019dd0165ef935ae4aed7abe86ec49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:32:71:8f:ea:c7:dc:89:e5:d9:06:3a:9d:fb:
9d:9a:d0:03:aa:e1:74:10:03:d7:1a:fb:1d:cb:bb:
4f:46:ee:bb:ac:5c:a1:16:22:1a:b2:88:fe:5b:55:
4c:3d:9b:ec:83:22:51:12:21:70:27:9b:4e:3a:dd:
84:9c:99:2a:d8:de:35:c5:df:5b:c6:6f:7d:3f:f9:
fa:8f:13:9f:84:3d:24:de:a0:9c:e5:67:2d:ca:22:
a8:2e:12:3a:be:3d:49:66:68:34:db:ad:f6:8e:4e:
ea:24:09:e5:f8:ed:67:2d:47:61:52:e6:7b:b1:20:
13:4c:57:90:72:ce:49:c4:c3:18:81:d6:6c:9d:93:
34:81:db:87:fa:20:a4:9a:a7:81:a1:07:9e:24:25:
c7:7f:21:97:b7:61:16:14:3d:c0:76:ba:eb:be:6d:
30:29:4d:ab:55:f6:77:4d:c6:78:0e:4b:ee:fa:a4:
48:4e:1c:18:c4:9f:53:be:07:83:6a:71:88:35:42:
3f:27:68:0e:37:7b:ef:fe:81:67:51:b7:4b:38:cb:
c7:8a:e7:27:b7:2a:bb:c1:c2:ba:1b:7d:30:d3:bf:
b0:39:dc:2b:ba:88:a1:dc:35:50:30:a9:29:ba:40:
99:cb:7d:41:22:73:44:87:5a:71:5c:f9:a9:f7:59:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8D:1E:F2:90:19:DD:01:65:EF:93:5A:E4:AE:D7:AB:E8:6E:C4:9D
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e9:43:e1:75:0f:c0:c0:91:71:84:df:2f:d0:8b:35:12:9c:
a6:73:e1:1a:40:06:6f:48:53:60:31:3f:66:60:13:bf:24:71:
05:ce:f7:c7:8e:2a:7e:8f:06:32:d7:49:80:10:94:cd:ef:78:
db:ea:71:c2:8c:95:ce:73:d0:a2:71:dc:2e:7d:39:da:00:b5:
cd:9f:b6:05:e1:f4:9a:de:ed:90:16:30:8e:27:72:3b:66:f0:
f5:d9:b0:b8:69:a7:e7:4c:ba:8d:4e:57:f0:29:24:09:d7:b6:
25:2a:1b:56:23:ee:06:c8:a1:c3:8f:95:5f:df:c5:f1:3c:c3:
72:6a:b0:20:de:66:80:b4:27:ef:ae:ae:9a:20:6e:5f:f8:3a:
42:43:5e:83:10:1b:21:ac:6c:0d:56:17:64:a6:25:95:7c:fe:
3f:5b:ea:8e:6b:ea:17:e7:f7:0f:f6:18:61:b9:40:bf:0e:a8:
95:a2:ba:1b:22:6d:d8:02:f1:cd:bb:16:fb:53:85:6a:07:1b:
93:c0:a2:96:43:01:fa:7d:aa:1c:d7:9f:f6:66:1d:2c:62:78:
95:7e:cf:e8:91:2f:81:27:5c:6a:a4:47:5f:06:4c:b6:c8:88:
3b:4b:4b:2c:5f:9f:da:bb:e1:2e:93:ce:54:b2:d0:21:b8:0e:
f5:aa:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:11 2026 by rpki-client