Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: 8wgypmVUxcp2u53SjCAfud6GWgAYM3tGHtvb461PgNM=
Subject key identifier: 4C:49:E9:25:F0:F7:41:32:3A:04:B8:10:37:0D:95:FD:DD:40:C0:53
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019E4EEA620FD69E440B7F58D4346EB88B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0D87
Signing time: Fri 22 May 2026 09:00:43 +0000
Manifest this update: Fri 22 May 2026 09:00:43 +0000
Manifest next update: Sat 23 May 2026 09:00:43 +0000
Files and hashes: 1: 1-8yART7xM2-_6XMTd_NQPcz65zM.roa (hash: tQW6oVAcsw1dq1koaqtzJ35SlN0zgIfaKPB7+0DEfrg=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: Jg3RQ+8Izo6HNB38VYeqLFrdPrTR7rsH5t8oftsoktk=)
3: zv8htVuLlM7L27gWdlqS584Hu_g.roa (hash: aUcg7/4honTLftFLDXOy/acZ6va/bYgkctanVBZKlS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ea:62:0f:d6:9e:44:0b:7f:58:d4:34:6e:b8:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: May 22 09:00:43 2026 GMT
Not After : May 23 09:00:43 2026 GMT
Subject: CN=4c49e925f0f741323a04b810370d95fddd40c053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:d7:8f:05:9a:e4:37:10:31:5d:12:ce:02:
d3:92:89:38:11:1c:3d:13:a1:e2:c6:85:b4:96:8e:
2d:f8:63:73:40:a3:32:21:9b:ce:35:90:e9:6b:1b:
e6:38:81:7d:da:1d:0f:7a:a3:63:db:58:af:1c:c5:
5b:00:6f:b7:db:66:f6:de:10:d9:f1:72:20:b9:27:
23:8b:7c:6c:fb:9d:7c:f1:00:7d:e6:ad:c7:50:5d:
38:b8:14:a9:7c:b6:33:a4:3b:94:6f:9e:45:51:c3:
49:d3:20:af:6c:4b:e1:22:63:58:29:fa:ac:ff:88:
6d:ab:11:80:dd:aa:ce:79:06:32:12:f9:6f:20:33:
ab:29:9a:f4:60:0d:97:50:35:cd:f8:aa:60:f4:e2:
34:c1:7d:54:bc:0a:5c:ee:a8:d8:77:23:2d:80:ce:
ba:14:96:e1:99:b1:d2:7f:2f:2e:3f:4d:80:6b:9c:
75:e8:6b:f1:f2:92:26:05:0d:c8:aa:3c:3d:ab:15:
c7:97:64:7b:e6:5b:eb:07:a9:a9:8b:8e:9b:b0:2b:
2e:a4:23:7b:51:0d:a7:e9:23:e5:eb:c5:53:81:6f:
38:f8:16:6a:8e:5c:50:e7:70:75:5c:6d:77:65:66:
e5:f7:6b:cf:21:8e:3e:09:77:29:5a:35:c3:58:63:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:E9:25:F0:F7:41:32:3A:04:B8:10:37:0D:95:FD:DD:40:C0:53
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:c6:b2:c5:06:e8:df:36:26:28:c0:24:42:d0:6a:45:e1:
cb:c4:ea:4d:e4:3b:e1:1f:63:16:1b:bc:f9:7b:8e:6d:dd:2e:
e3:e6:ad:91:3d:5c:6c:7b:b0:38:8b:59:04:a0:4c:c0:7a:e9:
0a:2d:63:9d:04:f2:0f:f5:5f:ed:a9:15:a9:17:b1:01:71:17:
59:54:8c:5f:e2:45:82:e4:0e:b5:6e:08:c4:3d:ac:14:45:bb:
7e:ac:02:cd:6d:c1:fb:34:4e:b5:ca:69:d6:16:8f:44:ad:cb:
c8:69:04:6f:62:8e:2f:1d:2a:c6:65:14:a6:7c:a6:28:dc:75:
86:42:b8:fe:46:d4:08:95:af:9c:54:9b:ee:91:05:49:26:50:
82:06:db:5d:23:b5:d4:33:fd:55:7c:ed:47:99:c2:4d:0c:b2:
55:96:05:64:5e:e1:13:32:d6:1c:94:80:41:d0:78:b2:96:85:
a4:81:9f:6f:ac:e7:56:e0:a4:d3:bc:07:dc:f0:48:db:24:a1:
cb:3f:c5:c2:d0:2a:d6:d8:8f:9e:44:dc:e6:15:1b:ea:3d:be:
29:60:28:1d:2a:2b:40:28:3b:7b:3e:69:d0:e3:87:e3:c4:d4:
17:c9:12:c3:d9:30:b4:02:1b:48:e0:d6:52:08:43:b0:78:3f:
b9:93:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:45 2026 by rpki-client