Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: dhP/neoS3E0xLZ+QbEqwrUNFAq3GxMiuhwV6+CyxZcw=
Subject key identifier: 59:C0:A1:1E:2B:46:F5:D6:E4:33:BD:03:A1:22:92:E8:A3:A4:2E:B1
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019D38655B3AF08371CB91FE231AA6B3074A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: qrlhZQFH4yQA6hrcb+zzlv4Tnh5LCGMtwzAywpKltgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5b:3a:f0:83:71:cb:91:fe:23:1a:a6:b3:07:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=59c0a11e2b46f5d6e433bd03a12292e8a3a42eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:70:cb:8c:e5:89:45:ed:30:ce:66:bf:0c:
86:ab:2b:bc:ac:1e:40:63:d7:63:69:66:17:f7:95:
8d:76:ab:46:db:19:d1:d4:dd:55:10:a5:6a:3d:1e:
18:66:71:6e:f3:48:2c:2c:0d:b3:09:7a:0b:6c:2f:
aa:62:bf:5c:b0:ea:4a:e3:9c:94:e5:94:49:eb:50:
3c:97:02:6f:2d:86:5b:bf:de:93:43:46:aa:19:de:
85:bc:25:63:25:46:79:6f:74:0d:57:b5:f2:7f:34:
5a:85:77:39:42:62:f2:5f:47:4f:43:41:ee:be:f5:
5c:60:6c:63:fe:ae:9d:5d:b9:b7:91:55:7a:c3:67:
e4:fe:d8:6e:13:5b:4c:d6:f9:7d:ad:c9:3c:8e:b0:
bf:d8:c5:6c:db:3e:f4:e3:4e:60:46:95:9a:a9:ee:
04:f4:83:64:07:0a:cb:e1:c8:52:80:1c:fc:b6:ab:
8d:42:33:5b:50:10:9e:f7:69:0b:a3:d6:1c:d9:6f:
b9:01:75:a2:d0:cb:35:c7:d5:f4:63:0b:cf:24:fa:
0a:12:e0:dd:e7:11:76:21:f0:d3:49:a9:4e:8f:40:
41:a8:3e:aa:6f:94:18:5a:73:c3:77:bb:33:15:32:
6b:b2:3d:29:2c:7e:46:75:23:ba:55:aa:ae:0f:fd:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:A1:1E:2B:46:F5:D6:E4:33:BD:03:A1:22:92:E8:A3:A4:2E:B1
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fe:96:cc:0a:cd:5e:df:db:b9:4a:97:20:de:4d:ae:7c:aa:
66:15:7e:66:05:4d:75:2c:5b:64:98:48:ea:9d:2d:67:0a:83:
c6:97:37:0d:c1:dd:ba:1b:b9:36:49:30:fc:cf:c3:c9:7d:39:
10:8f:79:8f:20:00:23:60:8f:a9:9c:0d:87:0c:c0:aa:f0:e2:
d8:0f:bd:3e:a6:fc:1d:8e:5e:e7:39:90:ea:d9:52:1e:3e:ce:
22:b6:a1:87:98:d2:9c:bf:2f:be:7e:06:9f:7a:52:fd:81:81:
78:09:dc:69:e0:3a:aa:fb:34:9f:be:0c:b5:15:e5:d5:b3:aa:
4c:5e:d6:5e:87:ae:02:ed:86:a0:f4:1f:2c:33:00:ad:57:0d:
9c:74:dd:8c:ef:07:87:f3:bf:6b:f1:60:7d:e1:82:8c:95:10:
32:6c:83:c3:37:84:26:8a:5f:77:e3:e1:8b:fb:82:b5:4e:26:
ac:ee:16:b4:56:ee:7b:27:76:9a:7e:bb:7d:fa:f0:2f:cf:77:
c5:a1:24:9d:13:11:aa:03:3d:7a:d4:cb:85:bf:51:e6:4e:90:
d0:6d:38:ac:05:b6:0b:69:72:c5:93:b4:cc:4d:4e:f8:4f:ae:
99:de:6a:e4:d7:fe:06:37:ee:b1:9a:ea:95:34:90:8f:b6:f8:
52:8d:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:01 2026 by rpki-client