Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: 58sZrQq5j1tGK+zbHoQrzquL7U/BnP5aG2QyiXBfYyI=
Subject key identifier: 0E:DC:6E:ED:C9:3A:B3:9A:0B:BB:17:4E:02:B4:02:08:BC:CA:6D:4B
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 01A15BF995C52F2C0096561DFCF393AE1EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 1AB2
Signing time: Wed 21 Oct 2026 01:00:45 +0000
Manifest this update: Wed 21 Oct 2026 01:00:45 +0000
Manifest next update: Thu 22 Oct 2026 01:00:45 +0000
Files and hashes: 1: 9Oc3Qrkh-WGI82en3F3kWexrfy0.roa (hash: g6ufVMQ2+i4B4SEYwZTcvbXAAfQ4pevHKfoq/wjdF2w=)
2: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: twUY2ONvSKXGXwtdMOWmvkFnBbYYGONOwVBZXR5vClU=)
3: zPgsCRDb5gAtSvqDim5Of48kyvA.roa (hash: rPEbmMa51gkJTXi8HWqGM5oBfXCu7j0eiFWR1QtHgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:f9:95:c5:2f:2c:00:96:56:1d:fc:f3:93:ae:1e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Oct 21 01:00:45 2026 GMT
Not After : Oct 22 01:00:45 2026 GMT
Subject: CN=0edc6eedc93ab39a0bbb174e02b40208bcca6d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:66:7b:14:c0:4f:92:e9:cf:11:04:08:4f:
0f:03:20:a8:b3:03:f8:a3:3f:95:3b:6d:3b:fa:9b:
c8:b1:bd:79:cf:0b:6b:e0:51:7c:1a:6d:9f:3d:27:
3a:c9:36:5c:05:dd:5b:a9:2e:46:c8:38:6c:42:20:
df:4e:81:52:0b:5f:21:db:1f:16:6b:cf:3b:5e:d5:
a1:3e:c0:23:8e:72:56:9b:04:54:8f:3a:27:14:d9:
58:7b:e6:3c:2e:e9:d5:25:c8:55:62:91:d7:8d:aa:
ae:1a:2b:fe:80:62:d8:c5:74:2b:3f:2f:88:2d:25:
a7:bc:75:8f:11:f3:86:65:d7:ec:f7:f7:f7:9a:1a:
16:eb:8e:10:8f:f6:d0:cd:dd:71:7d:b6:1c:7f:ec:
2a:b4:31:7c:ae:2b:16:70:e0:e3:74:10:a7:b3:f1:
ec:4c:9b:0c:47:65:91:2d:4b:60:f0:64:e2:8a:3d:
62:65:8d:c0:1c:18:0d:92:5f:f8:7f:2d:64:d4:58:
90:f6:8d:9d:d0:8d:e1:b5:0e:08:fa:9f:6f:2f:74:
ed:40:37:e2:52:46:01:42:f4:b4:fe:14:f6:d5:84:
39:1d:aa:5e:10:ea:63:f0:52:0b:3f:96:25:14:d8:
6b:10:02:67:ab:15:10:d2:63:d9:68:b3:c0:a0:81:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:6E:ED:C9:3A:B3:9A:0B:BB:17:4E:02:B4:02:08:BC:CA:6D:4B
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:f7:e8:b6:f4:eb:99:46:52:86:56:d1:ab:d1:89:56:33:
7b:77:1d:ff:c7:8f:3b:32:a9:c7:fd:98:2b:a5:a7:8d:82:48:
ee:8d:89:5f:3e:65:fe:7f:99:2c:99:ee:7f:2a:c3:b7:cd:9e:
04:6b:30:ed:31:85:2c:6e:b3:db:15:f8:ba:89:b3:3a:41:0f:
7a:72:06:35:aa:01:1c:64:ef:ef:df:89:92:eb:c4:a7:6c:af:
c8:dd:83:09:b3:30:d4:77:89:91:26:bb:45:34:3c:57:ed:d9:
43:6f:39:ea:eb:fc:7f:b5:8c:01:cd:56:e4:91:e1:3c:98:a9:
bd:c3:09:0e:1b:59:2a:50:fb:29:82:40:37:da:72:3c:27:1f:
f3:40:bc:8f:03:4d:4a:26:21:96:d5:31:8b:f8:f4:ed:c9:72:
64:a5:bd:99:b8:bb:a8:bb:f3:52:e4:81:84:60:c9:07:fe:d4:
b1:75:b7:61:ef:91:2a:28:73:3f:96:38:80:9c:be:d6:29:30:
82:d7:2c:3b:a0:26:1e:d5:be:f9:3f:fe:4c:21:43:fa:1c:18:
d7:d6:63:55:84:9d:b6:ee:ef:cd:cc:97:43:af:6d:3d:97:3a:
82:43:33:ef:8e:2d:24:43:a2:59:57:b5:39:80:66:ce:e1:83:
ca:96:7e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:18:12 2026 by rpki-client