Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: rLokT7J3ZRpVhzoE8QwClUT4Xfg4TXHbLJmNX4IsJYc=
Subject key identifier: 18:1D:A1:7C:74:C2:9A:5C:7A:3C:4D:6F:8C:EC:FC:54:4D:D7:46:6D
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 019FAB636A37AF47440E0635D87F5319565F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 01:00:46 +0000
Manifest this update: Wed 29 Jul 2026 01:00:46 +0000
Manifest next update: Thu 30 Jul 2026 01:00:46 +0000
Files and hashes: 1: 9Oc3Qrkh-WGI82en3F3kWexrfy0.roa (hash: g6ufVMQ2+i4B4SEYwZTcvbXAAfQ4pevHKfoq/wjdF2w=)
2: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: u4P/pyCmV8sV58VLGdyqp+vyW9QOp2PoNvYNvRimyeM=)
3: zPgsCRDb5gAtSvqDim5Of48kyvA.roa (hash: rPEbmMa51gkJTXi8HWqGM5oBfXCu7j0eiFWR1QtHgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:6a:37:af:47:44:0e:06:35:d8:7f:53:19:56:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Jul 29 01:00:46 2026 GMT
Not After : Jul 30 01:00:46 2026 GMT
Subject: CN=181da17c74c29a5c7a3c4d6f8cecfc544dd7466d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:25:6e:17:91:f9:a6:e9:12:c8:a2:a9:51:
cd:2a:fd:65:84:d3:4f:6b:3e:1f:cd:4a:87:c9:ea:
c6:f9:f7:9c:e5:4d:4e:89:7b:33:ba:b3:4d:2d:aa:
24:64:a4:2a:0f:6d:cc:db:6a:8b:4e:7e:b6:bd:1d:
aa:32:fc:1b:9a:98:3b:4c:23:c8:27:9b:a4:7d:37:
d9:5c:ea:08:c7:1f:6e:69:b5:25:e9:55:ed:8b:b9:
d1:ac:39:e3:64:34:c2:11:8f:de:8b:87:c6:f9:3a:
b2:15:d7:ef:4e:54:3a:9b:da:f1:11:20:00:76:f6:
93:ba:f0:c2:ea:44:92:8b:19:a8:3e:f8:90:55:c8:
6b:b1:0c:fb:ae:66:13:e5:6d:d2:68:6a:78:bd:e0:
72:07:39:7c:54:18:f3:a1:6d:a2:cd:b7:ef:48:f2:
b8:15:18:71:28:5e:bc:9e:63:2e:55:bf:e6:64:73:
c6:ad:c3:b3:b5:27:08:1d:6f:a0:55:88:d8:41:01:
59:50:ae:a2:c4:26:d9:41:73:7a:27:e1:e2:22:16:
5c:aa:6a:b4:75:86:dc:04:bb:69:35:ef:0a:8f:f5:
d6:3d:58:cb:18:a7:3c:e9:41:68:2e:9b:a0:68:d7:
0e:79:74:fe:41:e1:20:e6:0a:f7:91:a5:0e:be:da:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1D:A1:7C:74:C2:9A:5C:7A:3C:4D:6F:8C:EC:FC:54:4D:D7:46:6D
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d8:56:f3:aa:38:dc:77:d4:fd:87:e1:e4:0d:3b:9e:f7:2d:
b1:aa:a1:83:23:89:b3:d4:a3:97:eb:ca:00:f6:71:84:38:f7:
16:1d:8e:39:6c:e8:f4:43:9f:70:7c:b9:b1:d6:91:b5:9e:3c:
76:63:2c:cc:96:81:51:25:04:4b:99:bb:86:c1:f1:44:0b:46:
56:8f:0f:22:dd:0a:87:4d:49:ac:7e:1a:e9:b4:8a:34:04:1f:
30:1f:16:e9:7f:52:ff:2e:3b:d5:04:9b:49:5d:76:11:7f:fa:
f5:12:e0:fb:9f:c7:9a:37:92:e9:bd:95:80:4f:b4:dc:25:e7:
1b:45:63:38:b1:f7:b9:08:cb:24:46:69:60:b1:50:fc:d7:45:
73:83:f0:56:7d:c9:ae:31:c6:16:01:66:b8:18:f6:f3:ba:28:
46:87:63:32:00:a7:9e:64:61:11:93:fc:f9:0e:23:76:b0:bc:
06:5e:d9:50:c3:4d:6d:f1:27:c2:bc:33:b6:3d:4d:a6:5b:ab:
36:7d:e2:8d:8b:5f:47:7a:16:3f:20:98:78:4e:73:7f:0d:bd:
7c:21:14:fe:5f:4f:12:86:c8:7e:af:dc:8f:82:f3:aa:5d:98:
79:c7:88:57:55:36:6b:a7:f3:cc:c7:ea:bc:c3:f8:88:ff:b7:
b8:b9:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:04:02 2026 by rpki-client