Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: QM+dOUgmq+SrSi/ZGIAs5XiPlU8bHalCXt2CFNqOqPs=
Subject key identifier: 89:30:A7:BA:C8:DF:99:F8:62:55:3C:29:49:7C:74:D0:59:F4:8D:09
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 01A0EA09C882EEE116868663B0EE2514479D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 22:01:44 +0000
Manifest this update: Mon 28 Sep 2026 22:01:44 +0000
Manifest next update: Tue 29 Sep 2026 22:01:44 +0000
Files and hashes: 1: 9Oc3Qrkh-WGI82en3F3kWexrfy0.roa (hash: g6ufVMQ2+i4B4SEYwZTcvbXAAfQ4pevHKfoq/wjdF2w=)
2: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: tJEFEzQpeeLYsf/wd6aKer1sPf19kyWJpm9Jbcc+RhA=)
3: zPgsCRDb5gAtSvqDim5Of48kyvA.roa (hash: rPEbmMa51gkJTXi8HWqGM5oBfXCu7j0eiFWR1QtHgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:c8:82:ee:e1:16:86:86:63:b0:ee:25:14:47:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Sep 28 22:01:44 2026 GMT
Not After : Sep 29 22:01:44 2026 GMT
Subject: CN=8930a7bac8df99f862553c29497c74d059f48d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:00:e3:93:12:72:92:54:0c:49:df:23:46:
05:e2:24:ac:c4:39:0c:f3:50:ad:27:e8:07:1c:bf:
ba:6f:16:81:36:ed:f5:26:33:74:75:b5:92:9f:6a:
49:23:02:d4:42:55:ee:3e:78:bb:76:6b:fe:d5:60:
c7:9d:4f:5a:1d:ec:e2:24:c8:a3:09:3d:c5:1e:c4:
01:21:9a:c2:9b:fd:ec:f0:39:56:2a:1c:47:bd:f3:
ad:82:1d:f0:45:15:82:27:42:64:94:db:89:50:c3:
8b:9c:d2:5a:72:80:8e:02:16:cc:c1:3f:4b:15:42:
22:ae:9a:8b:e3:18:75:0c:ff:30:ef:b5:c9:ce:23:
93:f7:e7:31:d5:a4:3d:e2:c4:4b:68:a1:dc:62:32:
ef:0a:11:6c:5f:13:30:16:7b:6f:94:0b:ce:3a:05:
88:60:88:7b:7b:29:11:e1:8e:c0:56:38:28:c4:b5:
ea:25:69:59:91:18:8c:57:ab:44:a2:df:87:b6:02:
3f:f1:4b:02:45:2b:28:ca:9c:9c:6c:71:b3:08:37:
75:70:ab:fe:71:d7:0d:6a:c5:c7:fa:70:95:47:4f:
00:48:7f:98:8d:4b:60:95:a5:88:37:c4:87:4d:96:
bf:15:f0:a9:6d:fc:e6:d4:35:c7:48:2c:c0:84:77:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:A7:BA:C8:DF:99:F8:62:55:3C:29:49:7C:74:D0:59:F4:8D:09
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:24:41:cb:76:46:54:bf:1e:ea:3e:f8:b9:2e:c9:9f:14:3d:
79:94:75:6c:b6:9a:24:5c:34:35:74:6a:95:dd:9c:64:7c:ca:
a7:11:c9:b7:f3:2c:b3:6c:c4:39:79:f3:3e:f5:c7:2b:52:54:
b8:db:3a:b4:02:b9:14:4c:94:10:f0:c1:ca:01:ba:13:98:dd:
d2:28:78:f0:de:ed:60:f7:9b:cc:0c:03:af:c1:4d:d7:0a:a0:
7c:f8:69:94:41:4b:5c:49:79:77:bf:f0:85:8d:b9:63:bd:43:
1b:07:7e:3c:a4:70:a2:ab:b6:32:f0:65:59:62:c9:99:11:bf:
92:ac:e0:ed:54:72:3c:f9:e8:98:cd:ce:24:6c:2f:80:16:0b:
8e:d4:8f:64:73:30:20:e0:4f:96:5a:95:60:4c:30:ce:89:7b:
ae:4a:06:91:6b:99:ac:98:22:ab:19:da:34:87:7f:95:6a:d8:
47:9b:8a:ff:61:5d:8c:e9:b0:94:16:42:0d:8c:f6:e3:ae:45:
1e:ef:59:74:37:2d:44:27:83:8d:18:bf:25:cd:54:a9:7f:fc:
2c:c6:23:13:34:0e:c3:cb:62:6e:b2:4b:1c:43:19:69:69:78:
20:88:b9:9a:7d:f8:a4:db:87:2a:2a:c6:b2:86:f9:51:50:58:
2a:d7:22:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqCciC7uEWhoZjsO4lFEedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NjZhZGRmOWNhMGRlNDlhNmVlZjQ5ODU4Mzg0ZjU0ZjQ3
YTU2ZjAwHhcNMjYwOTI4MjIwMTQ0WhcNMjYwOTI5MjIwMTQ0WjAzMTEwLwYDVQQD
Eyg4OTMwYTdiYWM4ZGY5OWY4NjI1NTNjMjk0OTdjNzRkMDU5ZjQ4ZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFcA45MScpJUDEnfI0YF4iSsxDkM
81CtJ+gHHL+6bxaBNu31JjN0dbWSn2pJIwLUQlXuPni7dmv+1WDHnU9aHeziJMij
CT3FHsQBIZrCm/3s8DlWKhxHvfOtgh3wRRWCJ0JklNuJUMOLnNJacoCOAhbMwT9L
FUIirpqL4xh1DP8w77XJziOT9+cx1aQ94sRLaKHcYjLvChFsXxMwFntvlAvOOgWI
YIh7eykR4Y7AVjgoxLXqJWlZkRiMV6tEot+HtgI/8UsCRSsoypycbHGzCDd1cKv+
cdcNasXH+nCVR08ASH+YjUtglaWIN8SHTZa/FfCpbfzm1DXHSCzAhHfoQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkwp7rI35n4YlU8KUl8dNBZ9I0JMB8GA1UdIwQY
MBaAFGVmrd+coN5Jpu70mFg4T1T0elbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTIt
M2YyOGI2YWRiZGE5LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTItM2YyOGI2YWRiZGE5
LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCRBy3ZG
VL8e6j74uS7JnxQ9eZR1bLaaJFw0NXRqld2cZHzKpxHJt/Mss2zEOXnzPvXHK1JU
uNs6tAK5FEyUEPDBygG6E5jd0ih48N7tYPebzAwDr8FN1wqgfPhplEFLXEl5d7/w
hY25Y71DGwd+PKRwoqu2MvBlWWLJmRG/kqzg7VRyPPnomM3OJGwvgBYLjtSPZHMw
IOBPllqVYEwwzol7rkoGkWuZrJgiqxnaNId/lWrYR5uK/2FdjOmwlBZCDYz2465F
Hu9ZdDctRCeDjRi/Jc1UqX/8LMYjEzQOw8tibrJLHEMZaWl4IIi5mn34pNuHKirG
sob5UVBYKtciLg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 09:21:19 2026 by rpki-client