Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: 04FaQAzYn5zm6j5zbiYk4Ji+UfPqfxd7sA3YG3NK4Y8=
Subject key identifier: 84:87:4C:8D:4A:73:C3:2E:1E:34:63:D4:90:22:1A:5B:DC:5A:73:56
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 01A0EFD4FDC26B596B05B69092E2CF8FB428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 1A7A
Signing time: Wed 30 Sep 2026 01:01:48 +0000
Manifest this update: Wed 30 Sep 2026 01:01:48 +0000
Manifest next update: Thu 01 Oct 2026 01:01:48 +0000
Files and hashes: 1: 9Oc3Qrkh-WGI82en3F3kWexrfy0.roa (hash: g6ufVMQ2+i4B4SEYwZTcvbXAAfQ4pevHKfoq/wjdF2w=)
2: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: fb5ecZY7oKtJcZuYI8sfcgb3ZgHZddCUWP7icqUPZts=)
3: zPgsCRDb5gAtSvqDim5Of48kyvA.roa (hash: rPEbmMa51gkJTXi8HWqGM5oBfXCu7j0eiFWR1QtHgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:fd:c2:6b:59:6b:05:b6:90:92:e2:cf:8f:b4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Sep 30 01:01:48 2026 GMT
Not After : Oct 1 01:01:48 2026 GMT
Subject: CN=84874c8d4a73c32e1e3463d490221a5bdc5a7356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:3e:06:8d:04:7d:7f:94:37:28:13:9f:a3:
56:03:7b:23:cf:3e:34:04:b9:06:84:57:fb:70:4e:
5b:f1:51:d5:86:51:b0:f7:ee:80:16:3f:5e:48:ff:
8b:e3:50:50:c0:d0:b8:ae:61:d7:0e:0c:bc:48:68:
17:60:51:da:3e:c6:07:ed:c6:45:89:0d:f3:c4:48:
ed:26:62:2f:1f:b0:bd:4b:f8:33:38:6c:c2:d2:44:
7f:2b:2c:1e:f0:fb:a3:b2:48:2c:59:2d:9c:08:3e:
25:4f:96:83:5c:ec:41:b5:f7:09:ae:59:4a:7c:d7:
3d:d9:18:24:34:c7:60:26:ee:3a:81:45:e3:29:8e:
aa:25:56:21:63:de:dd:49:0a:b7:9f:9f:74:58:40:
70:3d:ed:8e:46:f8:88:48:5a:78:c5:6e:2b:a6:dc:
a5:b8:53:9b:f1:67:b8:ae:4a:c1:b2:ad:8b:02:07:
d5:72:d8:ac:cd:c5:75:93:8e:97:0b:94:f8:33:43:
49:30:6b:0b:b4:99:64:b3:49:42:10:a9:0e:36:00:
3f:1b:1a:69:2d:ef:14:ec:f2:b1:bc:03:70:26:91:
65:a3:f1:c5:08:5f:55:2b:1b:fa:f2:b3:88:c5:f3:
f6:f4:ee:c1:d9:8f:12:21:23:b4:25:f7:80:43:b8:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:4C:8D:4A:73:C3:2E:1E:34:63:D4:90:22:1A:5B:DC:5A:73:56
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:90:4c:56:4b:84:69:d0:dc:de:a3:3e:fc:4d:5d:78:c7:3d:
e5:98:47:01:79:44:2c:f9:2e:8b:61:ff:59:d3:f5:32:6e:87:
fc:1f:05:a7:b5:87:a3:af:3f:ca:aa:c5:ff:3b:fa:4d:93:25:
8a:c4:ee:a7:25:d1:3d:1f:30:d7:3d:bc:7a:5f:25:77:f7:4f:
c1:92:79:cc:53:97:4e:1d:36:e2:8a:b1:a6:b6:db:de:74:93:
71:80:4d:08:c1:f2:ef:b7:01:36:42:19:96:84:71:d6:67:b5:
dd:dc:02:08:2e:92:0c:1e:e8:18:ff:e5:a8:46:6f:6b:c7:6a:
02:1c:76:f5:8d:cd:af:eb:91:af:9f:61:b4:29:80:06:2b:1a:
7e:f6:a2:ae:19:ce:42:03:5d:2b:a5:87:d2:99:4d:a8:95:5a:
0f:f1:14:b1:e4:d9:07:cb:5c:b2:3d:0a:c2:ce:d1:86:f3:31:
d9:94:ce:b0:9a:61:8a:94:05:d6:94:11:aa:22:9c:64:ba:2a:
d5:f9:7d:74:96:69:27:d1:98:75:73:da:fa:8e:37:9e:e9:91:
ad:42:15:42:29:6f:93:06:30:95:c4:27:1f:c3:5b:b5:79:f9:
a7:91:d1:fc:c3:14:0d:43:f4:0f:53:c2:6c:df:af:9c:9c:12:
13:b4:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:55:14 2026 by rpki-client