Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: Z66mPW8/DkslvVrcoTIwW3Ten8CgmWhsedpd9Xy6p18=
Subject key identifier: 5F:74:A7:2E:68:B7:09:E7:3E:5E:CE:06:CF:1B:32:AA:B8:49:E8:C4
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 019CAAC6696A6A7ECB890187926553EBBFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: 9Oc3Qrkh-WGI82en3F3kWexrfy0.roa (hash: g6ufVMQ2+i4B4SEYwZTcvbXAAfQ4pevHKfoq/wjdF2w=)
2: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: LWXRLmXcmLJ6ksrUTdKeXQsoT6TNHZrfzZ4MNzuRJAg=)
3: zPgsCRDb5gAtSvqDim5Of48kyvA.roa (hash: rPEbmMa51gkJTXi8HWqGM5oBfXCu7j0eiFWR1QtHgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:69:6a:6a:7e:cb:89:01:87:92:65:53:eb:bf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=5f74a72e68b709e73e5ece06cf1b32aab849e8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:df:85:3c:1e:21:62:05:95:00:ca:42:b5:
ea:4a:f3:d3:41:30:2e:f6:4f:e7:cb:71:97:f2:a7:
82:d0:1d:ab:96:f9:1f:80:c1:9d:18:68:b5:27:55:
51:4b:2e:12:22:88:0e:04:af:29:69:43:be:d9:29:
d4:33:20:97:9c:40:90:94:15:6b:cd:e5:08:95:dd:
b9:9a:29:af:54:69:e2:ab:15:e6:09:0d:67:20:3f:
d8:f3:18:e2:d8:73:f1:8c:28:f1:12:96:f4:1f:64:
d5:31:55:f1:ca:21:f4:ca:2f:e4:11:dd:e1:22:a7:
5c:85:a7:57:45:ec:2e:c4:9d:03:29:54:0f:49:91:
82:31:d0:b2:0f:98:5f:f5:b8:40:db:70:12:2c:a9:
cd:35:86:d7:35:72:8e:11:54:a7:ec:bd:c1:6e:fd:
dc:80:57:6a:5d:85:97:4f:c5:35:9d:1a:37:c5:60:
96:77:96:43:e1:3e:33:cf:68:2f:f8:04:fc:20:50:
69:f0:79:6f:42:44:05:35:26:0e:bb:97:49:fe:96:
6f:79:2b:5b:e9:b3:c7:28:92:c1:95:7a:b7:d0:94:
48:56:7a:cf:28:62:88:8a:2f:e4:92:9b:d1:8e:44:
21:6e:f9:3d:dd:5f:0a:b9:e5:e4:17:1d:46:79:65:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:74:A7:2E:68:B7:09:E7:3E:5E:CE:06:CF:1B:32:AA:B8:49:E8:C4
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:d0:ba:7b:65:f4:31:88:c1:d1:ad:e6:b8:3a:15:4f:5c:
d6:c9:bf:74:81:34:a4:f6:e3:4f:df:7e:fb:22:16:59:c3:82:
49:b7:a7:9d:ec:24:30:60:3b:86:7e:82:b2:08:47:80:db:f4:
a5:e2:96:2e:79:5a:f0:0e:2b:05:a9:42:ab:99:a0:c1:9f:67:
e3:98:cc:87:ba:79:4a:ac:8f:40:68:b0:3c:69:cc:a5:31:ce:
f6:cb:ae:8c:9a:c9:09:75:06:e0:b8:12:6e:73:cc:d5:f2:27:
f2:d9:41:52:32:bf:92:dc:9a:10:ab:93:c3:65:66:3d:a8:d5:
73:22:89:21:8f:5d:c5:d2:e8:c4:5b:49:56:e7:ac:2e:bc:76:
86:45:3c:a1:28:2a:f7:ee:79:f6:c3:66:92:69:2b:3c:5e:c6:
ea:93:1e:96:b2:bb:63:8c:e7:44:ad:82:d9:dc:87:61:35:96:
9e:8f:58:33:ae:e7:e9:7a:cc:f6:fe:4f:fc:40:08:5f:c6:67:
52:ff:81:13:4e:51:d1:b9:ec:b9:f1:16:ec:95:c0:31:ab:ed:
14:14:d9:f6:ed:4f:b6:76:3c:2e:ea:b8:8b:58:5c:ae:5a:00:
f4:f9:b2:85:d3:4b:6a:c2:e5:17:a5:fe:5a:ef:4d:96:08:35:
0a:6d:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:50:05 2026 by rpki-client