Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File: ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier: Y2Q49RjD9Cc9nnMzeJ1yJ0jJ6HwT1VDcxY3papcQwUA=
Subject key identifier: DE:7F:47:B4:57:0B:F1:AA:9B:44:75:5C:E9:B1:08:32:80:3C:7C:0E
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer: /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial: 01A08C43BDA03D95D30F7C5A64BB05A9AC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number: 1631
Signing time: Thu 10 Sep 2026 17:00:44 +0000
Manifest this update: Thu 10 Sep 2026 17:00:44 +0000
Manifest next update: Fri 11 Sep 2026 17:00:44 +0000
Files and hashes: 1: R4biYlru54aTOhXabFWJZhdtNlE.roa (hash: wWEd9TpnYbM1KpOe7QAvs/pg0aALtJHWzooiwoOKRvU=)
2: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: GwOBkMk6woaJiegBLQdRsos0SXIVfPZdcoj0hl5Ghv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:bd:a0:3d:95:d3:0f:7c:5a:64:bb:05:a9:ac:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Validity
Not Before: Sep 10 17:00:44 2026 GMT
Not After : Sep 11 17:00:44 2026 GMT
Subject: CN=de7f47b4570bf1aa9b44755ce9b10832803c7c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:d5:53:96:3c:8c:86:5b:f0:2c:1d:04:c2:
8f:d4:8d:85:d4:b5:3f:4a:80:2d:9f:ca:ea:48:be:
64:c8:53:8d:15:62:cf:55:1c:a3:6d:71:fd:65:0e:
15:b3:54:07:9e:06:fc:20:a1:2f:42:1f:df:ae:00:
c5:a5:e8:91:f3:89:51:9b:77:20:08:f6:55:87:ac:
7c:46:58:8d:e5:f9:44:51:a6:70:d1:6e:fb:af:61:
99:a4:11:86:c8:f3:ee:f0:56:af:9e:58:4d:d4:07:
12:29:bf:de:99:54:18:d8:f3:84:ba:8b:a1:bf:1f:
5f:4a:d7:9d:05:b4:52:0f:dc:1b:d1:86:1d:38:6b:
93:64:6d:8e:cc:ac:eb:20:cd:5c:ae:d0:ba:e6:bd:
6c:07:69:45:c8:83:9e:d1:77:21:25:a8:e8:6b:18:
f9:f7:71:0b:91:01:5d:f3:dd:15:09:4d:3a:36:79:
91:9a:1f:9d:c0:3f:e0:81:d2:2e:ff:b1:77:69:82:
af:8c:e6:42:d1:f6:e1:9a:23:d2:d0:e5:88:26:fa:
17:32:31:c2:30:5b:00:30:e4:79:0b:ca:f5:66:de:
5c:96:5c:48:15:40:06:4b:31:57:ce:33:d4:74:0f:
73:05:b6:77:dd:b9:f5:45:ee:55:cc:f0:38:28:7e:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7F:47:B4:57:0B:F1:AA:9B:44:75:5C:E9:B1:08:32:80:3C:7C:0E
X509v3 Authority Key Identifier:
keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d6:86:72:54:a5:43:9d:25:f9:a7:a3:f8:a1:26:d7:11:5a:
e0:48:c9:ad:99:0b:6e:96:db:fe:fb:71:7a:d6:85:c2:36:2a:
0b:0a:11:41:6c:9b:2b:19:27:ec:2f:38:57:a5:50:92:c6:6b:
bd:3e:65:e7:64:6d:e4:29:51:4b:ac:ba:a4:67:d4:df:3d:d7:
bb:70:14:7b:3a:81:c5:d3:1b:ea:30:ab:ab:61:ec:f7:63:6b:
f8:db:f6:e2:f5:f9:81:0f:af:f9:b6:6b:04:b3:c7:f3:41:c2:
f6:04:9a:94:93:f6:8c:5b:cb:60:64:98:07:ff:26:f6:c4:51:
0a:6d:35:5c:a2:b0:f0:d8:8d:10:fd:38:0d:40:22:15:b9:73:
ba:77:7d:6d:5d:72:ac:09:76:4b:38:c0:04:b1:09:e5:00:92:
de:a5:31:c0:f4:92:8d:fb:05:b6:d1:1f:73:eb:22:06:4a:bd:
c0:ae:09:73:00:7e:ca:2a:f3:42:d2:64:de:1e:7d:ee:df:54:
fa:3f:a8:5d:a5:4a:6e:8a:37:14:8e:74:bc:c9:8b:5f:dd:80:
1a:6c:f1:95:ff:70:a1:16:94:49:30:d9:78:df:2c:17:26:b7:
07:61:d7:c5:fb:82:50:c7:c7:34:24:e4:d2:5b:b7:f7:8b:1f:
ba:1f:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:18:15 2026 by rpki-client