Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier: +ldakFseeI5y+s7g0OdpCDdT57j2cu20JbxUGyk6YrI=
Subject key identifier: CF:60:05:97:29:16:92:F7:8B:A8:AC:3F:57:E2:6A:91:61:FC:62:13
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 019D984F998A1A6F560C93FBEC597B12B873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number: 1853
Signing time: Thu 16 Apr 2026 22:00:46 +0000
Manifest this update: Thu 16 Apr 2026 22:00:46 +0000
Manifest next update: Fri 17 Apr 2026 22:00:46 +0000
Files and hashes: 1: So8muBWRfIb_bocA-uBwGx60z8Q.roa (hash: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc=)
2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: H+vsdyGf6zGVyOueaOFEW1sdxMRtwVkuekwfnAxhkxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:99:8a:1a:6f:56:0c:93:fb:ec:59:7b:12:b8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Apr 16 22:00:46 2026 GMT
Not After : Apr 17 22:00:46 2026 GMT
Subject: CN=cf600597291692f78ba8ac3f57e26a9161fc6213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:b2:1e:e3:db:93:89:d4:d3:6e:42:5d:10:
aa:bb:c5:f7:af:84:c8:79:83:58:1b:c9:37:1e:2c:
6d:1a:64:e4:41:3a:9e:6e:c2:fd:b7:2e:72:b9:d2:
a8:87:0b:65:06:69:33:2f:79:5b:71:1c:49:a1:f5:
4b:a8:c4:82:64:8e:fc:d8:67:88:19:ef:e7:45:a9:
c0:29:72:64:06:74:aa:d9:a0:c6:a5:11:b6:60:8b:
a0:1b:e7:e8:98:9d:f5:51:83:94:bc:53:b6:48:2a:
52:4c:c4:0f:e9:79:9e:25:f0:59:7d:5b:48:9f:c5:
fb:f3:22:cb:dc:58:75:bb:9b:45:06:6f:54:8e:73:
25:bf:5a:49:9d:49:7f:5b:c2:25:cb:29:b3:9a:f1:
5c:d4:c7:e9:21:c9:e3:f4:02:c4:78:77:cb:58:fe:
c7:1d:76:dc:f8:db:c6:ad:08:61:d0:1c:30:2a:0f:
5f:7f:90:99:f1:d3:b5:47:e2:ac:97:69:98:da:b1:
80:ac:93:c1:fb:d4:3a:6a:aa:85:d0:a9:1c:86:b1:
6d:1d:b9:0d:82:e8:ef:14:3d:12:52:9a:2d:24:6e:
9d:fa:9d:ed:14:3e:6f:98:00:8c:63:45:61:b0:a6:
82:fd:21:9d:b3:30:8a:7a:8c:96:a7:14:b4:60:f2:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:05:97:29:16:92:F7:8B:A8:AC:3F:57:E2:6A:91:61:FC:62:13
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:2f:01:b0:7a:ef:cd:24:1b:32:69:a2:e4:35:bd:74:4b:
cb:f6:df:1b:25:fd:e9:82:11:ff:18:93:fb:be:1e:4b:8c:c1:
a4:0b:d1:81:ed:c9:bc:3c:f4:a7:98:5c:10:f1:4e:05:d9:c0:
c4:92:6e:fa:ee:04:9f:1a:51:17:b9:2b:43:9b:eb:71:31:ee:
c5:bf:0e:c7:67:d3:36:61:b0:36:09:28:08:2c:0c:b4:2d:4a:
3b:91:39:7f:0e:f2:db:81:84:17:c6:3c:20:c3:fb:c3:74:3f:
a9:c6:25:c6:e7:c0:b5:02:18:e2:0a:c0:ee:06:9c:83:ac:26:
64:67:3e:37:4a:e5:43:b4:6e:07:a0:4a:9d:56:2a:47:fd:b5:
da:12:b5:1a:63:f0:9e:bd:d1:37:09:db:14:e1:e8:1c:fe:46:
09:2a:a7:07:fa:19:c2:c4:66:73:9f:e0:45:d2:63:e9:9b:49:
91:e8:83:68:3b:2c:f7:34:4c:72:59:ad:3d:a1:56:09:0f:11:
e7:29:6c:68:10:4f:e8:24:1e:63:48:26:2f:af:fe:1f:b2:80:
f9:7c:35:59:16:6b:ec:07:5d:29:dc:80:5b:77:2d:d9:16:82:
1f:42:6d:93:83:da:73:d0:d8:0a:23:68:f8:96:d7:b3:47:57:
30:d8:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:40 2026 by rpki-client