Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File: ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier: ZtBVb0DABboMAxc4qjcYz9NttLHEqQw/PJf73S/MqWQ=
Subject key identifier: 21:75:22:70:E1:F4:60:E1:4B:B7:C2:FE:F2:DD:66:A9:5F:D4:7C:F0
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer: /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial: 01A0DB72624B723F706256F054A25D88FF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number: 165A
Signing time: Sat 26 Sep 2026 02:01:41 +0000
Manifest this update: Sat 26 Sep 2026 02:01:41 +0000
Manifest next update: Sun 27 Sep 2026 02:01:41 +0000
Files and hashes: 1: R4biYlru54aTOhXabFWJZhdtNlE.roa (hash: wWEd9TpnYbM1KpOe7QAvs/pg0aALtJHWzooiwoOKRvU=)
2: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: KPR6tScPOKEI6kjZsjQiSm+nbIX4uT0D9T4bnu+XH1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:62:4b:72:3f:70:62:56:f0:54:a2:5d:88:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Validity
Not Before: Sep 26 02:01:41 2026 GMT
Not After : Sep 27 02:01:41 2026 GMT
Subject: CN=21752270e1f460e14bb7c2fef2dd66a95fd47cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:44:22:17:66:4d:15:79:d6:be:f7:2b:64:
6e:6b:bd:70:c1:a1:b1:f2:b3:aa:e1:10:8b:fc:60:
0b:4b:bd:fd:37:86:ac:0b:9d:1b:4f:1b:e5:5a:7c:
d1:82:d5:a8:7f:db:49:98:f6:74:5e:48:de:da:49:
ae:12:59:8f:14:25:14:ad:65:4b:99:45:a1:c1:14:
dd:1f:f6:59:37:00:a0:e6:e0:bc:13:55:b7:ed:f9:
3f:e4:84:ea:01:5d:c3:8c:c3:e2:20:36:da:43:de:
cc:74:1b:eb:c3:36:ba:bf:a6:99:63:e6:6b:5f:3b:
e5:e5:7c:ed:0d:53:84:17:37:56:bc:c0:1a:e3:ec:
8e:10:b6:80:51:86:f4:e1:9c:e0:62:a4:78:bd:96:
c0:1b:d3:4d:75:88:cd:3f:75:81:75:cf:56:11:e4:
c2:88:bf:af:d1:ba:41:d8:c4:f9:a3:7a:49:d5:f5:
11:53:22:d7:82:56:fa:c6:98:42:b2:94:ab:06:46:
25:f6:ae:4e:6f:a6:44:7b:45:7f:38:72:32:01:c8:
9e:9b:73:02:85:89:64:93:11:4e:f6:82:7f:f7:5c:
5e:86:10:b1:f9:99:20:24:1e:d8:f6:3c:76:28:9f:
22:6a:f5:f7:ac:38:4d:56:cf:c6:74:b8:90:d5:13:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:22:70:E1:F4:60:E1:4B:B7:C2:FE:F2:DD:66:A9:5F:D4:7C:F0
X509v3 Authority Key Identifier:
keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:2e:11:ea:ca:90:45:9e:77:eb:81:8d:6c:0e:60:c7:0c:
87:99:c6:c6:da:19:e3:25:bc:af:68:d6:81:f9:5a:86:b5:0a:
7c:16:87:f1:d7:b9:91:fe:2e:f9:82:8e:e4:4b:2c:70:d5:54:
4c:4a:58:2b:7d:77:fb:9b:19:d3:66:a1:cf:c2:91:1a:aa:9d:
32:38:6c:76:37:c8:6a:ee:c6:b8:d0:8e:8e:28:2d:e3:37:73:
56:96:bd:c0:5a:c1:ec:35:ba:a8:82:85:a4:2c:96:ad:31:70:
de:a7:6e:ad:37:8b:fd:9e:d7:7f:35:67:c4:78:57:f4:c5:34:
4d:bd:fa:a2:0b:33:c8:ae:6a:6e:0b:b3:a5:d3:d7:a9:57:70:
4a:f1:6f:65:ec:a0:48:f4:95:c0:aa:38:8b:49:43:c0:f7:8d:
d6:2d:7e:b9:5a:41:37:b0:61:9c:2b:96:87:f5:4f:e2:9c:3e:
b4:2b:b4:71:ef:22:d6:95:c9:0b:41:8b:bc:12:a9:b8:14:aa:
50:39:b6:85:45:5b:84:2d:b4:0e:64:ca:3f:db:09:d8:2b:32:
d2:2c:99:80:b2:1a:af:42:46:33:75:4b:dc:06:25:f4:2d:b0:
c7:60:9c:33:47:cd:ae:c5:1d:45:59:d1:43:0e:ba:c8:d3:ea:
7a:ef:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:47:54 2026 by rpki-client