
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: rTHaFABAiRzKdcZMeqaC1gAzZncKgof7k/L7vvgKWUI=
Subject key identifier: B9:B8:B4:C1:A0:18:94:81:7B:CC:AD:5C:66:92:8E:F6:A9:50:82:79
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019A1BE2E1BCD6982C169C7A6F0E093520B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 123F
Signing time: Sat 25 Oct 2025 15:00:44 +0000
Manifest this update: Sat 25 Oct 2025 15:00:44 +0000
Manifest next update: Sun 26 Oct 2025 15:00:44 +0000
Files and hashes: 1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
3: kAtcjeL4q23GFCUbpg4QtXInyEI.roa (hash: 5K8wPb3jbiUlLft+liX8W5eEXe9eE+pHlH9nNwzDSk4=)
4: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: R7GYHMjkJNmO5izJX3bm74cyGCg8JppDzCdlFr/GaxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:e1:bc:d6:98:2c:16:9c:7a:6f:0e:09:35:20:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Oct 25 15:00:44 2025 GMT
Not After : Oct 26 15:00:44 2025 GMT
Subject: CN=b9b8b4c1a01894817bccad5c66928ef6a9508279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:02:50:97:f9:22:3a:1c:6e:04:d8:30:9a:
80:06:56:61:8f:f0:c2:0f:2b:cd:d2:cd:c7:18:4a:
08:b6:cf:8d:ee:31:5a:34:67:b7:cf:4c:20:aa:79:
4e:b6:cb:18:a2:e4:63:20:2f:37:68:26:b6:cd:cd:
e4:da:05:bc:73:ad:87:ca:50:b3:a8:99:74:3f:42:
ed:c6:3e:d7:55:c4:e5:11:00:fe:6c:dc:7f:78:44:
b6:19:b8:e7:f5:c6:46:93:77:81:db:41:24:6f:cd:
35:39:44:7c:73:76:bf:1f:0b:55:c8:a1:b5:80:5d:
6d:bc:0e:7d:9d:fc:91:1d:e9:ec:95:1a:f7:cc:77:
26:71:76:69:7a:a8:c8:ce:16:99:8f:46:59:77:7c:
a2:07:08:52:54:5e:73:a2:96:5c:4b:b7:42:bd:ad:
b8:0d:63:f9:39:4f:1a:0c:a4:09:14:7f:b9:b7:7c:
28:e5:0e:a3:c7:44:f3:b8:19:0a:f9:14:7a:fc:b9:
bc:c2:df:e6:c5:39:71:3c:66:f6:9a:f2:fa:db:e5:
c6:58:32:e3:27:0b:22:63:97:81:9a:80:7f:ea:29:
5b:48:49:92:8f:cf:3a:7d:80:4e:5c:bc:db:99:62:
44:b7:bc:77:7c:9b:c2:e4:5f:d2:e3:87:a5:b4:f4:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:B4:C1:A0:18:94:81:7B:CC:AD:5C:66:92:8E:F6:A9:50:82:79
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:67:04:c0:7a:5d:38:b0:3d:a2:83:d1:b3:98:4f:98:fb:4d:
10:a7:fe:b0:22:1d:6d:e6:31:00:79:6b:65:e6:75:b6:aa:37:
d1:82:8a:9d:01:d5:3f:85:29:6f:46:34:c1:93:38:4c:86:40:
41:06:47:ff:20:37:d9:e8:8e:63:68:2b:ae:70:43:b2:ed:c3:
4b:63:dd:78:5e:2d:d8:65:0d:d8:2c:65:a3:b0:50:ce:97:1e:
04:25:8d:f1:42:43:99:06:83:f9:8d:56:cf:66:c7:5b:85:59:
37:b5:fa:6d:2a:3a:c7:70:8a:b2:2d:83:ab:88:40:53:9c:b6:
6c:5e:64:4e:cf:58:0b:51:e5:30:d9:05:4c:99:7f:33:32:e0:
39:f8:d7:9c:04:a5:ed:4c:0e:da:50:24:83:61:db:f7:22:c9:
7b:48:00:ce:2f:af:e9:f8:49:14:b4:37:a5:d9:1f:07:f6:2e:
45:09:f2:91:6b:40:b5:a3:9a:35:6f:99:34:33:f3:a1:55:74:
72:29:76:fb:fc:79:dd:7f:06:76:3f:f3:05:c3:6a:21:46:60:
13:e3:7d:13:02:29:f3:73:d5:14:eb:20:b3:9e:09:66:14:2a:
c5:a9:96:17:cf:ee:be:88:5e:e3:89:dc:94:54:75:1f:67:38:
f0:35:b1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZob4uG81pgsFpx6bw4JNSCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx
MThiODUwHhcNMjUxMDI1MTUwMDQ0WhcNMjUxMDI2MTUwMDQ0WjAzMTEwLwYDVQQD
EyhiOWI4YjRjMWEwMTg5NDgxN2JjY2FkNWM2NjkyOGVmNmE5NTA4Mjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaUCUJf5IjocbgTYMJqABlZhj/DC
DyvN0s3HGEoIts+N7jFaNGe3z0wgqnlOtssYouRjIC83aCa2zc3k2gW8c62HylCz
qJl0P0Ltxj7XVcTlEQD+bNx/eES2Gbjn9cZGk3eB20Ekb801OUR8c3a/HwtVyKG1
gF1tvA59nfyRHenslRr3zHcmcXZpeqjIzhaZj0ZZd3yiBwhSVF5zopZcS7dCva24
DWP5OU8aDKQJFH+5t3wo5Q6jx0TzuBkK+RR6/Lm8wt/mxTlxPGb2mvL62+XGWDLj
JwsiY5eBmoB/6ilbSEmSj886fYBOXLzbmWJEt7x3fJvC5F/S44eltPRqpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm4tMGgGJSBe8ytXGaSjvapUIJ5MB8GA1UdIwQY
MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt
MGRiYjNiOGRiMTVmLzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUtMGRiYjNiOGRiMTVm
LzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGcEwHpd
OLA9ooPRs5hPmPtNEKf+sCIdbeYxAHlrZeZ1tqo30YKKnQHVP4Upb0Y0wZM4TIZA
QQZH/yA32eiOY2grrnBDsu3DS2PdeF4t2GUN2Cxlo7BQzpceBCWN8UJDmQaD+Y1W
z2bHW4VZN7X6bSo6x3CKsi2Dq4hAU5y2bF5kTs9YC1HlMNkFTJl/MzLgOfjXnASl
7UwO2lAkg2Hb9yLJe0gAzi+v6fhJFLQ3pdkfB/YuRQnykWtAtaOaNW+ZNDPzoVV0
cil2+/x53X8Gdj/zBcNqIUZgE+N9EwIp83PVFOsgs54JZhQqxamWF8/uvohe44nc
lFR1H2c48DWxyw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 00:08:33 2025 by rpki-client