Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier: cZoBsDP+KIV/L0EdFuRE0SicETICh4Jgron7tf24KcY=
Subject key identifier: D0:8C:3D:F2:F4:7E:B5:E3:2C:43:20:AE:F9:00:2A:B7:E3:CD:E2:60
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 019CAAC6BC1157A01D72565164423FEC396B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: So8muBWRfIb_bocA-uBwGx60z8Q.roa (hash: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc=)
2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: 4SKYAeQ/Jle2mfiLRGXjAslPx2yR88PuV5Ier3MWmts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:11:57:a0:1d:72:56:51:64:42:3f:ec:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=d08c3df2f47eb5e32c4320aef9002ab7e3cde260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:62:3e:45:a5:7a:23:4f:80:3d:a7:1a:ca:
c4:1b:72:1b:01:63:30:b0:e0:93:c9:ba:53:4b:c4:
07:ae:b3:2c:b6:c0:78:29:da:d9:1f:cc:00:6a:2e:
3c:e2:c6:07:82:92:b9:61:64:e0:dd:a1:ba:a9:bb:
a5:7b:51:94:c4:23:7f:b9:a6:c6:2e:88:6d:e8:6e:
e2:b5:5e:58:fe:23:07:b7:df:0f:a4:fb:9c:84:54:
66:f8:b8:dc:c3:b6:fd:20:64:3e:59:e0:7d:1b:8c:
7e:ff:60:d4:88:31:ee:7d:cf:be:8d:21:1f:d6:17:
25:e1:d3:94:af:47:1b:32:28:76:3d:26:9b:bb:f8:
d6:0e:28:7a:1b:f3:2e:66:c8:54:25:7b:41:db:3f:
0c:6f:72:26:39:63:3e:a4:e3:e2:31:88:ed:1a:0a:
73:ac:b9:94:a9:b7:d1:38:e8:97:3d:a0:e6:6d:f8:
9a:e1:13:63:57:0e:46:fe:8c:6c:b9:ef:24:25:9a:
7e:aa:33:32:ef:0d:92:a1:4c:6a:fe:46:6a:ee:68:
13:4c:25:2a:ae:0a:5c:e2:7a:06:ec:88:f4:e6:6a:
84:88:73:d0:8a:24:50:6d:5e:fc:42:50:43:a4:8c:
6f:0d:29:99:2b:87:e0:a5:73:bb:15:d3:bd:69:a3:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:3D:F2:F4:7E:B5:E3:2C:43:20:AE:F9:00:2A:B7:E3:CD:E2:60
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:56:ce:7a:c0:13:56:47:a4:cb:00:0f:cf:04:15:36:92:2d:
00:6c:46:10:36:03:7c:7e:9c:f0:86:f3:c5:a4:07:64:92:72:
a0:95:65:44:ba:bb:ce:d2:46:f9:5e:c7:b9:02:bf:74:03:a8:
ed:ae:08:04:57:a4:6d:9e:39:f6:f8:59:6d:d7:82:78:94:29:
ba:56:88:69:cd:d7:d5:d4:96:c8:f6:1c:e6:82:03:6c:59:e0:
8b:80:45:a0:f2:a8:55:07:7b:b4:67:2c:8b:b2:55:2d:a7:1f:
54:e8:8f:bd:17:a6:8d:1e:a1:20:7a:bb:d8:af:06:95:a0:cd:
55:b4:7b:d3:03:c0:84:09:8d:e0:d3:87:3a:61:a6:a1:6d:98:
f7:b0:80:29:f0:a2:5d:fe:11:c2:cd:d6:c4:a7:4c:6c:58:09:
60:01:40:b0:33:f5:49:77:8f:ac:4b:b0:3e:97:0e:24:83:06:
aa:27:fd:07:7b:2a:0a:ab:19:04:c1:68:fe:19:23:ef:5f:09:
3f:7c:d9:3b:14:03:30:8f:43:1d:88:f1:5c:ac:a1:e2:3d:5d:
fe:f5:7a:aa:69:ee:fc:ee:9a:35:b4:e4:38:74:3c:78:76:bb:
9c:ba:2f:90:18:31:90:e0:09:73:12:7b:47:5c:e1:de:c9:08:
fc:55:93:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:11 2026 by rpki-client