Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: S8oo0JYayWVlHfTXBxjZCzORS0gApJPDnvna1TDy87c=
Subject key identifier: A2:5D:2A:36:06:D2:8C:B3:CF:47:74:EE:30:C5:C0:F6:CD:DB:B1:09
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019D2704CF611068D853BD4F7AF0EE75D5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: Pshol4zXYD1K6al8H0Vw87Bnorjoeonok3vHlPYqeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cf:61:10:68:d8:53:bd:4f:7a:f0:ee:75:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=a25d2a3606d28cb3cf4774ee30c5c0f6cddbb109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:26:50:5b:07:50:bc:7c:ee:3e:36:c6:dd:
17:6a:aa:8d:e0:2a:e2:85:cc:c2:16:d0:14:22:7f:
d7:6f:0d:3f:15:d3:5c:c8:1c:21:20:aa:a6:01:06:
db:80:86:00:06:a6:07:9f:9c:54:92:8c:6f:7f:ac:
10:b3:43:e7:39:4c:ad:e3:82:4e:40:46:4a:7f:75:
7a:da:2e:42:a8:ef:4d:82:1d:d3:40:40:fb:fb:0c:
67:c9:92:de:36:15:84:40:6b:89:47:13:40:02:77:
9d:79:d6:5c:6d:21:5e:3e:aa:56:7e:8d:ba:29:9f:
92:09:2f:54:8a:8d:ac:c8:b2:4f:9f:13:c9:ea:db:
64:65:39:a1:cb:5c:20:1b:e8:1a:c2:a5:62:b3:66:
e9:07:06:7f:a7:26:15:d4:cd:4d:c2:77:79:24:0f:
58:c4:3e:40:00:ad:f5:37:3e:66:73:7d:62:00:f3:
be:4f:9f:71:d3:34:13:82:f1:7f:33:8f:31:13:0b:
74:84:2c:bf:d0:16:22:f6:5e:6b:d1:53:95:d3:17:
f1:58:08:14:a9:3f:60:3c:06:7e:ec:83:21:df:2d:
bd:6a:e5:14:41:99:8e:25:4d:8d:f0:a1:c7:47:6c:
fc:e5:0c:fd:7b:88:87:8b:2d:53:58:21:43:ff:e7:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:2A:36:06:D2:8C:B3:CF:47:74:EE:30:C5:C0:F6:CD:DB:B1:09
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:f6:b0:9e:fc:ae:eb:91:a4:39:ad:d2:ce:29:d5:61:dd:
fd:d2:b6:c2:99:fe:db:96:2d:ca:61:68:f3:fc:4c:f7:2a:1d:
3e:94:27:12:0d:2c:39:35:ab:68:dc:29:2a:23:a7:1e:72:86:
ee:5f:f7:c4:3e:f8:ca:56:c8:46:a5:e1:5e:d9:ee:a8:16:9e:
65:86:32:d4:75:9c:14:56:c6:25:25:5b:30:18:c9:8a:6f:2a:
48:77:55:09:55:e1:e8:fd:bd:5a:c8:1f:a6:1a:cd:52:b9:41:
93:70:49:a7:cc:84:54:03:77:8a:4f:d4:31:7a:c1:ec:3c:45:
58:ff:f9:e1:43:97:92:4a:a4:60:21:5f:46:c5:a9:4e:32:cd:
ce:96:db:fd:b8:05:ae:9e:a2:51:95:73:a3:ad:05:bc:46:83:
20:5b:21:c8:9d:e7:f7:7a:8e:6f:d2:13:ae:9f:f4:a7:b0:ff:
0c:81:d4:76:53:35:b8:ac:0e:8d:42:09:5c:d5:0b:12:5a:5b:
9c:b5:6f:5a:c3:d9:6b:71:69:74:0b:32:2e:f2:47:9d:8f:f9:
05:dc:9a:7d:d8:77:d9:3f:97:c5:42:61:71:91:55:d7:e3:a5:
03:ef:67:87:54:23:c9:11:aa:b0:1e:a7:6b:e1:18:85:8a:17:
99:de:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:02 2026 by rpki-client