Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: /jnJcoRcjitYq9oYKVOqZtjarqCVDotxeM2I8MhRZ7A=
Subject key identifier: 15:5E:F7:E7:D6:20:FD:09:35:E8:CD:07:32:9A:BA:0F:73:54:9C:0C
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 019D265F7436AD856E26EAB1912DA0DE8B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: 9Oc3Qrkh-WGI82en3F3kWexrfy0.roa (hash: g6ufVMQ2+i4B4SEYwZTcvbXAAfQ4pevHKfoq/wjdF2w=)
2: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: 5FyAMzCzhkwY3+y2HiXBJHg+8VJuaggewqE1t+Iar88=)
3: zPgsCRDb5gAtSvqDim5Of48kyvA.roa (hash: rPEbmMa51gkJTXi8HWqGM5oBfXCu7j0eiFWR1QtHgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:74:36:ad:85:6e:26:ea:b1:91:2d:a0:de:8b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=155ef7e7d620fd0935e8cd07329aba0f73549c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:9d:a2:c0:04:51:68:99:fc:1e:70:44:47:
2f:55:61:13:d1:34:6d:7c:e5:f1:02:7b:87:ab:20:
e8:ca:ec:75:f3:cc:e8:cf:43:07:a0:ba:62:9a:1b:
2f:46:23:a0:93:2e:4f:f3:3d:b5:5d:37:6c:74:56:
02:ff:49:80:66:f7:84:3b:20:63:a2:34:1d:53:73:
e4:d3:07:f9:f0:74:3c:e0:be:78:9c:37:85:7d:b9:
f0:70:0b:d3:6c:37:a9:e4:5b:4a:d8:e6:3a:2d:b8:
0d:86:ed:ac:af:1c:6a:02:5d:18:9b:7e:a6:ee:9a:
c4:c8:55:1a:fa:4c:d0:31:a2:8d:be:b6:6f:41:e6:
ae:df:80:eb:33:77:0e:a9:7c:70:1f:e5:09:18:a7:
fa:23:c3:76:75:55:7e:0e:57:86:b9:bb:5d:87:58:
e1:d6:da:23:bc:60:6e:91:42:78:44:db:10:31:70:
e7:9b:14:fd:4a:15:9f:c6:a7:0c:d7:fe:19:7e:c4:
71:5c:ec:4d:8d:02:5d:56:e8:84:6e:0c:69:9e:4a:
03:f6:6f:04:16:3e:3b:d5:45:d6:38:fa:b5:f7:28:
e7:0c:a3:c0:5b:f3:b0:d0:da:b7:99:d1:52:82:fe:
94:4f:84:e3:cc:1c:d9:58:ee:76:86:ee:34:04:96:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:F7:E7:D6:20:FD:09:35:E8:CD:07:32:9A:BA:0F:73:54:9C:0C
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d1:42:28:b9:cf:2c:cc:45:fe:3d:b4:45:78:e1:0e:d1:87:
cd:bc:07:2a:75:3a:c0:5f:d2:3e:2f:18:46:24:ea:81:e4:55:
76:02:2a:f5:4a:77:8a:28:98:f4:1b:af:57:d3:09:92:0c:8c:
7d:fb:12:1a:d1:fc:e0:b1:97:ae:65:3f:74:29:35:00:9c:dc:
48:f2:2d:95:f4:80:b4:2b:dc:3f:b1:c6:1a:a0:a4:cf:e5:fa:
ef:9c:9e:25:d3:76:fb:09:61:05:3f:8e:6f:0f:09:16:63:a3:
3d:a5:3a:f2:0a:4c:f6:13:77:d1:e3:1d:31:10:cc:b1:7d:b3:
63:5b:ce:55:c4:f1:0d:7b:b3:3a:2c:f9:25:46:56:3b:bc:1e:
2a:6f:ac:ea:85:4b:22:3a:3f:b2:71:10:c6:c8:cb:70:38:8f:
ce:7f:6e:3b:25:dd:21:b7:44:d5:f0:62:fb:4a:da:5e:1d:26:
83:16:ef:69:1e:21:82:78:1c:b3:9c:0c:42:85:d9:3c:1a:0e:
36:29:49:c7:f6:9f:07:3f:61:89:a9:6e:9c:75:2a:91:de:7b:
64:12:01:64:4a:ee:69:69:39:cc:32:c0:c7:62:04:80:69:d8:
52:26:4a:7f:e9:70:83:a9:f8:76:28:f7:91:7f:cd:51:3b:e4:
bf:1c:88:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:20 2026 by rpki-client