Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier: GFCc3RoDC8DBDsj57C/SBAtLZzEZE+BsMZqdpquJOQg=
Subject key identifier: BB:F2:BF:E2:29:16:E1:C5:9F:F8:95:3B:24:6D:77:F6:7F:D0:6B:60
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 019D37C00BE62A202C17F16BB1D39CAD3CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: So8muBWRfIb_bocA-uBwGx60z8Q.roa (hash: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc=)
2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: 0EPSG5JxvoPe5OqoSp9b8lemi4y+aiNF9uk6jpIK3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0b:e6:2a:20:2c:17:f1:6b:b1:d3:9c:ad:3c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=bbf2bfe22916e1c59ff8953b246d77f67fd06b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:06:24:be:30:f9:e8:16:f7:68:e4:89:50:
7c:55:5b:80:9f:d3:62:b0:f2:91:9e:39:40:3f:8f:
da:39:c2:bd:41:8f:b6:e2:8b:36:54:78:65:f8:8e:
47:40:15:e8:3b:5f:95:1a:08:0a:4d:a4:71:14:4a:
fa:87:22:fd:a4:24:43:11:52:a1:21:c9:0f:41:f5:
b0:19:ec:8a:e4:2b:42:9d:58:e1:b5:b0:a9:3c:76:
6f:38:c7:d2:53:a8:10:bd:9f:43:77:8a:be:96:4e:
a4:0d:c8:32:ae:56:d3:dc:e8:ca:ee:fa:77:58:c6:
85:4b:f6:58:0a:70:97:2f:e1:ee:5b:26:b6:54:61:
b6:b6:d8:86:f1:db:06:b9:0f:ab:8a:94:a9:ed:d9:
c9:48:79:eb:6d:53:b2:ff:89:2c:41:61:4e:af:82:
da:69:34:a6:46:90:a9:f8:23:0c:bf:f0:d0:c8:fb:
b6:b1:fe:cb:57:6e:df:a2:11:cd:04:f3:c5:7a:26:
0e:92:0f:bb:c5:a2:03:27:f0:8e:f0:b5:ba:b5:45:
70:41:16:07:f1:e7:5d:50:af:fb:90:a8:55:9c:ca:
dd:cd:aa:dc:66:b7:b4:80:44:74:b5:e8:f8:54:dd:
33:81:ab:db:b8:5b:35:0e:ab:f5:b1:47:9a:93:6e:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:BF:E2:29:16:E1:C5:9F:F8:95:3B:24:6D:77:F6:7F:D0:6B:60
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b6:91:41:e1:f3:d2:98:f9:54:f7:8e:da:39:e0:4b:06:e6:
4c:b3:e4:54:03:dc:ab:88:c6:af:81:a8:fa:8b:72:d3:fd:89:
1f:b0:d5:a2:89:f6:81:dc:36:ef:bd:f6:ad:40:85:e8:24:06:
a3:5b:1e:c6:72:4f:51:f3:5b:98:92:10:c5:02:02:97:2f:c2:
a9:ab:ba:48:c3:ac:85:43:52:e9:ce:24:19:4b:b1:41:7b:c2:
8e:62:8f:38:57:de:4d:39:64:1e:a7:ee:77:a4:6c:e4:e4:cd:
87:91:7a:73:96:20:36:e0:1f:2a:f2:3e:8c:25:92:0b:38:95:
74:b6:93:e9:e5:12:d5:62:81:f2:ae:f3:2c:de:86:fa:8a:a5:
b1:b0:a1:7c:0b:12:65:e5:64:d3:8e:86:9e:e8:b6:02:37:f8:
59:09:8c:5e:0f:a7:94:ba:e4:e4:6a:b1:b7:f6:73:69:46:b2:
4d:19:15:83:f5:03:f5:05:d5:20:4c:05:61:d4:8c:f4:63:34:
f5:44:f7:cf:34:f6:5f:a3:dd:72:0a:e2:96:c2:52:ae:69:2e:
9f:62:ea:91:6d:84:3b:16:73:e1:fc:f6:8b:17:97:86:0b:b6:
c8:4b:bc:f7:6d:32:8c:1e:eb:a0:43:83:e5:14:f8:bf:47:2a:
50:97:60:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:31 2026 by rpki-client