Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier: gAG1DEjw1Gu51xgJyEfvKx2ehVSqM0khC6aurCQC1oU=
Subject key identifier: C8:82:6F:CA:96:95:DB:B5:E9:43:70:B4:9C:CB:9D:A0:A2:CD:DF:A6
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 019F82D4FFE3BF05C9565800299E9BF99750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number: 1951
Signing time: Tue 21 Jul 2026 04:00:24 +0000
Manifest this update: Tue 21 Jul 2026 04:00:24 +0000
Manifest next update: Wed 22 Jul 2026 04:00:24 +0000
Files and hashes: 1: So8muBWRfIb_bocA-uBwGx60z8Q.roa (hash: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc=)
2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: J0cXs4KhaRS+/NM+Lz5t0xAJdAJNoXsRTduC+/UHCJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d4:ff:e3:bf:05:c9:56:58:00:29:9e:9b:f9:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Jul 21 04:00:24 2026 GMT
Not After : Jul 22 04:00:24 2026 GMT
Subject: CN=c8826fca9695dbb5e94370b49ccb9da0a2cddfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:0a:c1:3d:9f:11:83:e5:eb:f2:7c:1f:cb:
c5:fe:52:d2:03:49:6f:94:c3:61:9e:6c:10:ee:5a:
73:87:24:d4:60:e9:42:f7:b4:85:03:7f:66:88:f8:
63:95:d6:8f:43:6f:d6:94:a5:2d:04:3c:68:52:83:
f0:54:a6:2e:08:54:27:9b:67:3e:03:05:9d:88:dd:
a2:70:62:1f:f8:b0:7a:31:74:41:74:a3:5f:0d:ed:
7c:e6:36:14:4d:8e:27:e6:40:a1:0d:06:14:3c:ef:
68:c4:0a:63:3a:7e:94:7d:67:52:01:61:3b:0c:be:
41:1f:6a:45:86:48:02:81:8a:28:c8:f8:76:8c:e0:
b4:39:34:1a:b3:d5:ee:57:3e:72:69:69:ee:ca:5e:
86:c3:a9:ba:dd:3a:67:b5:9a:f6:0a:46:a4:20:56:
b8:a6:ac:9a:65:7b:c1:8c:8b:a4:06:94:79:9b:c4:
d5:95:3b:d0:b9:8a:26:3e:60:ba:ca:3e:0f:b0:7d:
8e:6d:68:25:b9:d1:20:f4:11:67:7f:0f:bd:75:a7:
9f:cd:cc:62:6e:a0:3b:cf:67:33:c9:3d:c0:c3:18:
ae:77:f5:ca:c4:57:e2:c4:d6:8a:db:d1:3b:b5:21:
39:a7:cf:b6:59:33:53:51:48:d3:45:a5:22:be:5b:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:82:6F:CA:96:95:DB:B5:E9:43:70:B4:9C:CB:9D:A0:A2:CD:DF:A6
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:20:2c:1b:c7:17:8c:2c:7d:54:20:b9:e4:58:c0:2a:d3:7d:
bb:99:5f:cc:7b:a9:f7:1c:cc:66:71:99:d9:52:96:2f:5c:68:
05:c1:21:0d:75:6c:be:34:92:f4:b6:29:71:14:44:26:18:d0:
b2:1e:1c:b6:95:1e:43:48:3f:fa:9f:a0:50:2f:55:15:6d:46:
11:16:ce:5a:d9:ef:15:3b:88:cd:3a:7e:db:e7:d3:dd:ed:d9:
ee:b0:f3:c3:2c:89:2f:75:83:bd:ea:1a:74:6a:d1:19:f8:5e:
29:77:27:8e:30:df:9d:85:a6:3c:a9:2d:c5:2a:68:20:c1:b7:
b9:9c:69:c5:eb:c4:62:0a:25:25:b1:a8:25:2b:e1:4a:b1:6b:
51:3c:95:42:2e:61:5e:2a:a0:d5:5a:ca:d1:51:95:09:31:db:
08:ff:62:2f:aa:57:9d:08:3d:31:e7:96:d9:41:10:3f:5e:c8:
2a:b1:e0:34:6b:c3:3f:1f:64:e7:55:9a:80:bc:7d:5f:ae:92:
a2:6c:0c:e7:8f:2a:9d:53:41:12:aa:10:4d:ad:12:b0:c2:d3:
8d:b4:64:0c:7a:a9:95:fc:d5:8a:2a:8b:03:f4:ee:7c:58:eb:
b4:81:12:43:c5:b5:14:a8:fe:77:00:d4:9a:c7:57:23:04:3a:
04:34:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:01:02 2026 by rpki-client