Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File: ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier: GbqvT2t70AYj41SV0DORzJm+zXfBxaifOwbWbi8fkXk=
Subject key identifier: 87:9A:25:68:03:0F:D1:6B:06:C5:15:D2:60:04:E6:00:41:46:07:A4
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer: /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial: 019D29293E8E485AB3D510205FDB79495A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number: 1470
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: R4biYlru54aTOhXabFWJZhdtNlE.roa (hash: wWEd9TpnYbM1KpOe7QAvs/pg0aALtJHWzooiwoOKRvU=)
2: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: tkFGZQ4ySjLd94hh6cF9cgaUjyKNzcsVbf0vPL6zge4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3e:8e:48:5a:b3:d5:10:20:5f:db:79:49:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=879a2568030fd16b06c515d26004e600414607a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:54:76:09:8d:55:e2:d0:45:0c:a9:eb:f8:
c7:9a:96:ee:3b:d2:fa:1a:21:9c:7e:cf:0b:6e:fa:
bb:c1:4d:c2:e1:2d:4b:3a:97:83:8c:ec:66:13:8a:
63:6f:da:69:46:73:65:ed:17:a7:aa:20:03:82:55:
e2:13:37:76:d1:26:8f:e4:9a:1a:a4:fc:0e:f0:14:
29:9c:e8:f5:45:eb:78:00:99:69:99:6e:18:62:c0:
66:81:25:13:c6:4d:44:62:4b:3c:52:35:49:c0:f3:
f0:ff:13:62:e1:93:54:30:e6:2f:e4:34:ea:fc:52:
da:f0:20:61:89:2d:45:1b:32:44:04:5f:bf:36:88:
1d:be:2e:fc:b7:50:96:18:cc:48:dc:18:3d:87:4a:
30:35:66:5c:2b:90:85:33:f8:97:e8:09:18:f7:dd:
40:fc:76:6b:85:39:f1:01:c6:00:3d:03:87:c2:34:
8d:64:b6:b6:2a:4a:18:13:e5:c1:ec:91:97:f4:6f:
8b:cf:9c:99:e4:ff:5f:b1:6f:36:52:33:22:99:30:
87:f5:b5:54:e3:23:d5:07:fd:9c:db:3f:83:08:5e:
64:f0:d8:38:8f:f0:b7:24:be:7c:f0:05:2e:5b:bd:
29:ff:23:44:e2:88:59:d0:c3:6e:82:a2:66:92:57:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:25:68:03:0F:D1:6B:06:C5:15:D2:60:04:E6:00:41:46:07:A4
X509v3 Authority Key Identifier:
keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8a:1a:95:44:b4:66:36:39:93:e2:87:96:ff:1f:e3:0d:51:
da:15:15:3f:9c:26:dc:b0:6a:2b:cc:a8:0a:f3:09:0e:94:fc:
56:1e:d6:8f:23:c8:00:4e:5b:2f:fb:c6:02:a1:cf:0f:42:d9:
7e:24:32:60:4b:41:b8:be:62:d8:5b:60:7f:c1:69:cf:36:2d:
8d:bf:24:f9:74:5c:6d:55:d7:d9:37:8f:1c:cc:fa:ee:19:5d:
e6:fb:76:b2:3e:e2:04:d9:76:42:a6:7c:d6:9d:04:c7:73:4a:
bb:3a:8c:19:37:41:e2:af:9e:74:4c:64:d6:30:57:6e:96:92:
67:65:b7:78:e1:54:bd:22:08:12:2d:3c:0a:8d:91:af:cc:11:
f6:64:f4:88:52:32:86:43:d1:ec:f9:bf:cb:55:93:c7:fa:44:
88:54:d5:6b:b1:08:8b:87:c8:85:81:d9:2a:43:eb:f4:c8:55:
c5:31:39:7a:39:d5:d9:ab:0f:a6:c3:f8:8a:3d:7b:a4:f9:e7:
6f:0a:6b:6e:00:9e:c0:67:01:6a:34:f3:72:f4:89:3f:52:ff:
36:40:d1:f9:d0:ce:e0:0b:6e:b5:92:7f:95:52:d7:f7:54:67:
ec:17:a5:b8:25:81:93:e8:e4:07:7a:05:59:59:88:ba:59:e8:
a8:cb:cf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:18 2026 by rpki-client