Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier: mM9etMhDJAf6sCukppo5SD4yufmnWrYqtuh03JlvaUQ=
Subject key identifier: 6C:D7:27:87:07:39:4E:9F:62:76:18:B2:C7:10:65:6B:E1:F4:3A:20
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 019D284DF1367EE252C26049621FE79C7BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 04:01:29 +0000
Manifest this update: Thu 26 Mar 2026 04:01:29 +0000
Manifest next update: Fri 27 Mar 2026 04:01:29 +0000
Files and hashes: 1: So8muBWRfIb_bocA-uBwGx60z8Q.roa (hash: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc=)
2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: 9CWyl0q7+zZ5e5jaMuvdgq/UMnzFqScntviOIGoL9pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f1:36:7e:e2:52:c2:60:49:62:1f:e7:9c:7b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Mar 26 04:01:29 2026 GMT
Not After : Mar 27 04:01:29 2026 GMT
Subject: CN=6cd7278707394e9f627618b2c710656be1f43a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:78:d1:88:9f:e0:6a:ca:7f:5e:5a:b9:fc:
13:c4:92:d5:95:2a:6a:81:6c:75:9e:aa:1c:d1:ad:
74:66:53:7b:02:7c:31:f6:9d:b8:91:39:0f:c6:b7:
32:45:55:5a:b1:0f:30:5e:74:c2:80:bd:20:4d:9f:
18:34:0e:61:44:58:02:e1:9d:01:d1:c8:b8:d0:bf:
4a:34:7c:2f:4c:75:8d:9e:b5:4b:e1:ce:81:32:37:
f2:87:ca:8c:84:5d:84:dd:5a:b5:8d:c4:35:08:58:
c0:81:f7:4a:fa:c0:99:1a:f6:51:de:fb:b5:78:a6:
ac:6f:ec:73:0e:1c:7e:6d:af:78:f7:9e:b1:a0:b4:
51:f3:74:13:bd:81:63:b9:c8:84:39:71:45:ae:c0:
27:01:a8:20:88:a7:80:42:9f:ef:8a:cf:29:bf:58:
9b:1c:51:52:86:df:a1:11:ff:47:03:74:b6:19:f6:
6e:4b:ee:bb:bf:8f:f4:cb:aa:6c:75:3d:65:67:7c:
03:fc:de:77:84:d1:00:b7:4b:eb:54:81:02:47:15:
ce:ae:44:fb:8c:45:60:02:e8:d3:1d:b8:32:94:03:
ed:92:cd:bb:a8:12:57:b4:95:54:2c:d4:f3:b2:9f:
01:31:e5:9d:b7:21:8a:df:06:9e:5e:45:76:b8:2d:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D7:27:87:07:39:4E:9F:62:76:18:B2:C7:10:65:6B:E1:F4:3A:20
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:53:7d:b8:cf:5a:65:67:5e:e5:3e:f3:5b:dd:23:e4:7c:44:
fb:8a:a0:d8:30:cb:18:75:e8:c2:f1:34:8d:f2:8e:0c:4f:24:
12:ae:dd:8d:fe:65:1a:17:13:26:a7:a9:dd:d8:04:b7:59:2b:
06:be:cf:06:4a:cd:7f:f3:cd:d3:29:99:e3:19:94:0b:9b:61:
7e:b2:61:c1:29:8c:0f:1b:1d:49:b8:7c:61:d9:35:98:e3:26:
7d:53:41:c4:66:20:8e:7b:04:8e:c6:40:45:54:50:87:8f:48:
a1:98:67:07:0c:40:14:0d:d3:68:03:28:6f:67:49:57:13:02:
85:6f:43:89:d1:20:b0:08:27:f3:09:ae:de:63:56:30:33:78:
b9:0a:47:16:82:6b:5a:87:6f:43:18:13:49:5c:f4:3e:6e:b4:
f3:87:41:bd:25:4e:a2:c4:9a:de:b3:9e:b9:c4:76:81:97:d9:
7e:7a:f3:05:3b:31:79:cf:6b:b9:c2:57:29:53:73:33:92:33:
1e:53:f3:bc:8a:73:ff:d2:08:e3:c6:f3:e7:23:dc:1e:56:b4:
57:29:7a:21:92:d6:2e:d2:11:52:f0:9e:cd:e2:f5:ae:77:02:
c3:db:e1:99:d1:70:09:89:60:39:b5:31:36:80:ea:b9:03:a1:
2a:c1:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:38 2026 by rpki-client